Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
File:                     89ACB13E759511EB8124E879C4F9AE02.roa (raw, json)
Hash identifier:          4fcTJQnB9qll9b46etOOBjCdxjCC7gjqYGWF4weLmxA=
Subject key identifier:   05:FB:E5:28:4B:DB:91:D8:CD:E6:72:D7:47:25:5A:43:06:95:72:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:12:32 +0000
ROA not before:           Mon 06 Jul 2026 17:12:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141302
IP address blocks:        103.160.170.0/24 maxlen: 24
                          103.163.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62200 (0xf2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be200-e89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:b3:77:6d:ea:f3:0a:9d:11:b1:ad:65:65:
                    a1:e5:7c:93:da:4b:8e:b5:9d:7b:b4:32:b5:14:f7:
                    44:f8:fa:b2:f5:27:ee:5b:fc:4d:5a:26:39:ec:76:
                    dd:d7:a1:aa:20:1b:c2:4e:66:72:67:1d:ae:63:ff:
                    c4:64:fd:27:04:4f:77:fa:e1:f9:66:41:4e:ff:8d:
                    5f:d8:79:e8:45:e7:08:96:67:cf:3c:54:22:a0:bf:
                    18:54:0b:13:c5:0a:31:af:04:80:f3:3c:56:af:ba:
                    ba:8b:0b:5d:c7:df:c3:f3:d2:0b:6e:b1:73:7b:fe:
                    ad:ad:b0:5a:21:df:01:d3:75:3e:2a:f4:0f:90:43:
                    20:17:a9:6e:2a:d3:9f:51:74:c8:71:b8:d4:f3:12:
                    73:a2:0d:45:28:08:8d:fb:de:b2:4f:6d:ab:72:af:
                    a7:e7:ff:05:f8:44:7a:96:81:ba:be:0b:55:1e:4c:
                    71:43:4f:b3:a1:7e:7c:a4:c3:55:57:51:51:1f:8b:
                    46:a8:c4:4e:a9:53:6d:46:81:cf:1b:41:2f:7e:0c:
                    77:a5:d9:3f:79:27:df:8a:30:f1:c3:19:97:c9:d0:
                    5e:9b:51:32:9a:8f:1a:af:08:2c:58:15:dc:a9:52:
                    34:59:8d:65:0b:b1:8e:1e:eb:c0:44:53:59:ab:9c:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:E5:28:4B:DB:91:D8:CD:E6:72:D7:47:25:5A:43:06:95:72:AB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.170.0/24
                  103.163.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:62:2a:07:60:37:62:e5:c8:4c:66:75:ce:f3:75:6e:95:
         2c:50:b2:47:c9:4a:22:68:d3:15:99:25:78:bc:5a:c5:29:a6:
         e6:e9:5d:a9:a7:5c:ee:2b:82:47:37:61:a9:ed:5d:a6:ef:8f:
         3a:9f:6a:ad:4e:62:23:ee:3d:c3:04:9c:4a:cf:69:6b:78:bd:
         61:d0:88:b9:53:a6:92:77:0e:08:39:0b:c0:ba:d8:9b:51:30:
         2a:24:60:cb:aa:1f:b1:c4:e9:6e:8a:74:bb:af:1e:45:5c:fa:
         cb:00:ae:5b:d0:31:e3:d4:a2:6f:dc:a2:14:00:ba:b6:10:1e:
         c9:a4:96:a5:41:31:a6:50:12:72:d6:75:19:44:ba:44:27:da:
         64:d3:fb:71:bc:23:92:41:b5:fb:d9:fb:58:bc:92:ef:6f:5c:
         ce:7f:0b:58:c1:26:e7:76:d1:1c:06:79:ae:b3:54:b2:c3:2c:
         fc:8e:5c:21:7c:dc:d9:3f:e7:55:54:e9:3a:2f:3c:da:ea:1d:
         67:28:73:0e:63:70:60:32:05:4b:f3:82:80:26:8d:74:dc:ad:
         aa:c0:ca:f6:8f:3d:ad:6e:cd:5d:40:95:34:87:36:54:ed:19:
         d5:35:48:f0:96:90:d8:d0:1c:46:3f:76:1a:c2:94:ce:55:53:
         51:50:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:47 2026 by rpki-client