Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa
File:                     8D3A25F09AD011EC890E2B39C4F9AE02.roa (raw, json)
Hash identifier:          bb9p0OeThGsLZsejX07u0r2bDA6KgI5XH4CYFCi62W8=
Subject key identifier:   48:7A:1F:C3:60:6D:39:9F:B6:47:F0:3E:08:6C:55:E4:BD:1D:CA:CC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F50B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:30:13 +0000
ROA not before:           Mon 06 Jul 2026 17:30:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149605
IP address blocks:        103.182.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62731 (0xf50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:30:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be625-26fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:43:8b:43:56:88:d2:44:d3:73:98:44:ef:
                    7b:c2:c3:bb:b3:ee:0c:e2:e6:b8:55:91:1d:7e:30:
                    6a:ad:c0:9a:b6:31:af:1f:dc:dc:04:f5:ca:23:36:
                    53:ab:90:4a:8a:cc:d2:ba:d2:30:77:20:55:00:08:
                    d2:07:44:b6:70:e5:c6:6e:45:c2:0f:b3:bb:7f:4f:
                    41:37:82:6e:c1:fd:d1:0a:3e:f7:bd:66:55:ac:1e:
                    d5:65:57:9f:6f:9c:0b:38:f6:81:89:2a:f7:be:68:
                    55:86:95:97:e0:67:61:33:45:ad:b1:68:49:e8:30:
                    a0:86:58:6c:ca:0b:c2:81:60:55:02:57:6f:77:32:
                    af:07:37:7e:52:c6:ba:66:dc:92:27:f7:24:b4:6f:
                    f8:ec:3c:6b:31:2c:3b:69:19:b0:ed:63:62:e0:e9:
                    2e:d3:64:14:05:fe:00:18:3c:18:b6:6b:aa:af:cf:
                    ee:09:ea:78:5b:29:72:5b:7e:dc:34:63:89:77:ac:
                    a9:50:6a:c8:4e:86:e1:01:25:39:9b:94:f5:ef:e0:
                    cd:db:99:08:17:51:db:e5:a2:ae:14:e6:c8:cb:a9:
                    c7:94:20:20:fa:c3:b3:fd:13:6e:d4:b9:fb:e0:7f:
                    6d:c0:5b:ef:a8:12:c8:de:ef:3b:a3:55:49:90:e3:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7A:1F:C3:60:6D:39:9F:B6:47:F0:3E:08:6C:55:E4:BD:1D:CA:CC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:98:01:1f:a4:81:ab:2c:d2:3e:07:0c:46:0f:13:b6:76:
         ba:3c:72:76:2d:bc:03:34:67:c0:11:2f:ef:84:2c:e8:93:a9:
         0f:98:89:5d:ae:d9:c2:84:83:c8:fb:70:18:0b:f9:70:51:7d:
         78:a3:65:fb:2a:69:55:ca:ab:5a:9a:6e:29:2a:d0:a3:9d:84:
         b7:8b:86:fd:f9:27:99:81:d1:7e:10:14:27:a1:b9:01:b4:47:
         4e:cc:d5:c5:09:5c:ef:c0:1d:aa:f7:ae:d8:a2:d3:da:b8:d5:
         a4:77:60:05:7e:13:ce:0f:99:ef:33:35:2f:f4:1d:3b:fa:c5:
         c3:4c:0e:1f:3b:c3:19:d7:ba:4b:a3:be:48:d6:4e:ae:40:b0:
         ba:bc:89:49:83:41:fa:22:73:dc:d9:14:2c:c2:42:0e:75:78:
         48:37:61:94:83:e1:d9:ea:a1:b9:f7:18:d5:aa:2c:59:c0:71:
         01:2d:22:f9:0b:c5:8f:a2:55:c4:4a:28:a1:69:54:54:d3:2c:
         60:84:c5:27:5f:e8:aa:0f:ae:0d:ec:50:bd:53:d1:90:f6:b5:
         b2:cf:66:67:44:24:57:69:7f:4e:af:aa:7c:e7:35:a8:5f:87:
         31:e4:52:61:6e:18:db:b8:57:df:37:8d:99:71:03:88:8a:29:
         dd:74:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:51 2026 by rpki-client