Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa
File:                     8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa (raw, json)
Hash identifier:          RPmqiaXqMlE7xGucRf0DapE5uUs2tehER5Eo7/QxRZk=
Subject key identifier:   9E:43:35:52:FA:FF:8A:85:61:8D:F2:2B:68:5E:28:4E:46:B6:AC:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F415
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:22:09 +0000
ROA not before:           Mon 06 Jul 2026 17:22:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146901
IP address blocks:        103.174.32.0/23 maxlen: 24
                          2001:df2:4940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62485 (0xf415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:22:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be441-3982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:43:ad:f0:46:51:21:60:99:3d:df:95:2c:
                    35:e0:42:92:49:67:41:16:de:93:4a:b3:e0:07:df:
                    f8:ed:18:7f:ac:6a:be:a3:d8:f8:b4:8a:54:11:a2:
                    ae:b3:82:b8:09:80:09:0e:44:16:0f:97:65:e8:7f:
                    9b:c1:aa:47:22:cc:df:27:75:a5:8b:b1:67:8d:58:
                    73:e8:5d:1c:d3:44:20:69:4b:35:46:6e:37:64:20:
                    82:e7:61:ff:d2:1c:e5:bd:85:cb:7b:c5:23:e6:a5:
                    35:70:68:cc:09:18:36:3c:20:0f:d4:10:a0:f3:2b:
                    dd:81:1e:25:53:11:b9:5c:3b:e1:7c:69:34:f7:6e:
                    0c:27:9a:47:7d:78:0b:44:4c:bf:3e:1a:b4:7f:71:
                    35:a9:09:cb:e8:02:a2:78:80:8e:ff:21:41:41:c9:
                    1c:cf:e0:5e:4c:2e:6e:c3:b2:17:cf:3d:e1:62:24:
                    9d:49:4b:26:63:16:c4:e7:bf:c8:7d:2d:a6:e1:b6:
                    3a:f4:85:28:9f:04:1c:d3:8d:83:bc:da:bc:fb:dc:
                    83:be:02:e4:9c:0c:b9:c3:88:0c:96:62:4e:ed:0f:
                    e8:0d:44:41:13:32:d7:66:7e:1c:a0:f4:7b:6a:9d:
                    2e:ac:26:89:c0:1e:b2:aa:33:9a:a0:c1:e1:62:39:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:43:35:52:FA:FF:8A:85:61:8D:F2:2B:68:5E:28:4E:46:B6:AC:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.32.0/23
                IPv6:
                  2001:df2:4940::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:b3:8c:eb:1d:82:1b:b4:88:bc:54:ee:72:d8:fe:bf:f7:
         4c:ca:65:0d:90:a9:e5:9f:58:6a:47:3b:ac:8d:1f:5b:bb:45:
         37:99:e1:22:f7:01:90:6d:cf:02:49:33:14:95:11:b1:43:e2:
         46:f4:cb:a9:cf:19:35:cd:44:ec:e3:d0:22:55:b3:7e:d0:85:
         37:a1:88:a1:d9:3b:6e:d6:04:9a:9d:2e:e9:13:74:b6:8b:ab:
         08:b9:d7:89:f4:28:5f:2c:93:a7:79:7b:34:c1:7c:40:e4:42:
         8e:8f:0b:d5:77:e5:6b:fc:9f:2a:fb:43:03:fe:fe:46:1e:91:
         74:30:64:5c:43:0a:83:f4:b5:dd:e4:8f:b8:c1:cb:6b:5b:8f:
         2f:1f:bf:ee:b1:77:b1:90:de:d7:95:8c:a7:8f:e4:10:e8:9d:
         4c:64:fd:4f:fd:0b:99:18:2a:15:2b:97:5f:ce:60:8e:a6:92:
         4e:80:fc:ad:8a:b6:87:01:4c:a7:b2:f0:56:d8:44:43:be:bb:
         3e:cf:8b:4d:d4:56:cb:f1:e5:0b:63:25:d6:0e:1c:76:c6:68:
         b5:1c:a8:aa:c4:1d:59:6e:78:b3:da:e7:8d:56:1f:d5:b3:2d:
         1e:90:44:48:d3:70:32:97:6f:fd:34:dc:0b:05:86:5b:c6:2c:
         5d:cd:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:19 2026 by rpki-client