Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/881E5044B96411EBB7108270C4F9AE02.roa
File:                     881E5044B96411EBB7108270C4F9AE02.roa (raw, json)
Hash identifier:          wRCMvxUs+vO9vof9azAEssrU8oGN6MSkM+HatJhQZXU=
Subject key identifier:   86:9C:C9:21:66:06:73:93:0B:BA:63:DF:10:0D:20:08:C8:A1:73:0F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F0B3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/881E5044B96411EBB7108270C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:53:19 +0000
ROA not before:           Mon 06 Jul 2026 16:53:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136344
IP address blocks:        103.92.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61619 (0xf0b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:53:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdd7e-0c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:c1:30:63:a9:bf:ad:c5:1b:2a:15:04:97:
                    fd:68:3a:1e:50:c8:89:95:91:48:14:a8:36:bb:74:
                    d5:c9:76:d8:4c:c6:c3:91:46:e2:07:f7:99:29:61:
                    8e:d3:ea:9a:c4:50:ef:72:f5:0a:da:a2:a1:b6:c3:
                    8f:90:51:db:a5:e4:ca:9f:4b:98:fd:d2:6d:14:6f:
                    ae:b2:f2:2b:83:31:d1:c7:8e:9b:56:1e:b0:d8:a3:
                    5c:49:7c:54:40:9d:f7:d0:81:f9:bf:d6:a0:87:56:
                    f6:60:1a:a3:7f:ab:b2:eb:99:1c:ef:1e:4d:dc:e9:
                    fc:20:ee:a0:8d:68:8d:b4:b2:71:fc:83:6f:20:45:
                    03:b0:27:12:30:82:0f:51:9c:1a:4a:0f:aa:2a:dd:
                    3c:d2:f2:31:76:db:43:22:c7:e7:2c:18:92:5e:98:
                    3d:7f:42:29:aa:7e:55:52:d1:f9:2d:dd:cb:30:a5:
                    9b:e7:b3:a2:56:27:db:9a:c8:d0:a4:cd:3a:32:d8:
                    7e:a8:83:2b:bd:ee:63:e2:6a:f3:e0:eb:50:a1:fb:
                    ee:58:03:fc:e1:d0:66:64:fa:6b:99:4b:ce:36:83:
                    f8:57:98:64:fe:a7:81:61:d8:ca:8c:78:f6:b6:60:
                    a5:46:f5:8a:5d:ff:92:b4:de:dc:61:44:18:26:c3:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:C9:21:66:06:73:93:0B:BA:63:DF:10:0D:20:08:C8:A1:73:0F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/881E5044B96411EBB7108270C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:25:fc:e4:de:9e:65:71:62:2b:cd:e8:59:3f:33:47:40:
         2b:4e:b3:e5:02:11:33:5c:92:e7:16:ad:2a:cf:74:c2:ac:63:
         3c:c4:46:b7:b2:84:00:43:6d:45:55:cd:60:bd:b9:6f:ed:e0:
         1e:af:18:2a:d0:f4:81:9c:d3:ef:da:77:17:80:74:bd:c2:a3:
         10:84:56:d9:81:30:ea:3a:f1:da:72:24:da:d3:89:9c:a3:b8:
         e0:6a:89:fe:50:46:7e:4e:c5:ac:73:b4:9d:38:40:26:b9:9c:
         3f:ec:85:06:a6:7c:da:f7:0e:03:5a:5f:72:85:59:fc:e4:fe:
         10:a1:03:88:3d:ad:36:52:80:85:ed:03:2c:12:f4:1d:9e:6d:
         10:0b:55:ee:a9:c6:6b:84:0f:c3:aa:a6:fb:d8:28:72:56:b7:
         cc:20:24:a9:7e:6f:53:fd:ad:13:ca:38:fe:ae:cb:22:1a:a8:
         e7:1c:a1:8b:31:e2:0b:83:98:8d:de:2a:8a:0a:9c:97:dd:d9:
         c7:65:9e:4f:90:fe:ed:ef:28:35:02:ff:49:16:a5:b7:76:12:
         a2:34:cc:13:6e:14:aa:35:9d:69:78:aa:85:66:50:27:06:c8:
         27:77:bc:ab:24:8d:d0:21:7e:f1:cf:fa:60:15:b8:81:46:66:
         bd:03:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:39 2026 by rpki-client