Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/903F64C400D611EDA8430A60C4F9AE02.roa
File:                     903F64C400D611EDA8430A60C4F9AE02.roa (raw, json)
Hash identifier:          /pwLTlLbQudexV3oRrGBX4IFT95UcMZTa60LyRGkZJQ=
Subject key identifier:   C9:E2:14:CB:08:52:19:B8:B5:96:56:CA:3D:DC:17:5F:DB:94:FD:F4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F537
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/903F64C400D611EDA8430A60C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:31:47 +0000
ROA not before:           Mon 06 Jul 2026 17:31:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150042
IP address blocks:        103.190.4.0/23 maxlen: 24
                          2400:8a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62775 (0xf537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:31:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be683-b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:30:4a:1f:ba:6a:f9:5a:e2:d4:9c:2d:74:
                    30:14:74:b7:12:f9:e6:f7:ef:0e:c1:62:d0:98:18:
                    b0:b9:fc:0a:3c:21:57:c6:4b:9c:7b:17:14:d0:3e:
                    3a:8b:7b:3c:d1:98:fb:dd:2d:23:fc:87:9c:ff:55:
                    6d:58:e7:b3:63:cc:60:b8:98:89:f5:62:18:1a:5a:
                    3e:60:de:84:46:b6:92:8b:fb:70:31:18:f5:97:08:
                    e8:0e:bb:de:00:9d:df:a6:c9:1d:39:f7:1f:09:a1:
                    4d:e4:59:09:07:04:0d:62:64:00:03:25:45:29:6e:
                    a4:ce:21:4e:59:75:69:fa:34:df:4e:e6:4d:ea:93:
                    23:6b:5c:f5:66:f3:db:c1:61:17:80:fc:f6:b3:72:
                    09:23:5b:d2:18:5d:e5:04:45:51:87:ab:fb:81:e2:
                    fb:1e:2e:17:1d:93:c0:5a:74:a3:75:e8:a1:3c:a6:
                    7b:ef:e6:f0:18:47:0c:41:ea:9d:d0:07:2b:f8:a5:
                    cf:22:6d:5d:5a:d6:6f:c2:9c:06:7a:12:66:8b:0e:
                    45:a7:3f:c3:03:ba:c9:57:4c:37:93:85:6c:4f:43:
                    2c:6f:59:d1:a7:ca:f8:0b:68:50:69:ef:85:70:fa:
                    ec:77:3c:d9:f4:5e:98:2c:a7:dc:1c:c9:34:a8:98:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:14:CB:08:52:19:B8:B5:96:56:CA:3D:DC:17:5F:DB:94:FD:F4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/903F64C400D611EDA8430A60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.4.0/23
                IPv6:
                  2400:8a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:7a:bb:0d:5f:d8:71:ff:47:1e:0e:e9:3b:38:b6:5f:de:
         88:b3:9f:98:2b:d5:2a:02:20:ef:0c:de:f2:5b:66:49:4b:4a:
         e0:44:0f:b3:41:7a:25:2b:c5:f7:26:17:fd:a6:14:43:9f:a9:
         95:f3:b3:43:33:26:91:95:69:c5:bd:84:66:e8:32:31:31:6a:
         fa:88:4a:5d:3b:1a:a8:ef:2d:29:07:f9:2a:c4:ec:f5:b6:c7:
         d7:14:24:28:03:be:90:b2:0e:a6:a7:64:72:ca:90:5f:d3:35:
         cc:36:93:ea:2a:41:1d:0a:19:d0:ab:4d:08:0b:01:27:62:b3:
         06:65:d1:30:6e:04:1f:b1:71:2e:60:45:6e:11:cd:3b:f6:31:
         a5:bb:cf:d7:23:77:62:33:ab:10:45:c5:55:e8:f4:79:79:af:
         c5:26:b7:b8:41:4a:28:ab:00:93:00:f6:a5:f2:41:bb:62:71:
         0f:5e:65:63:7e:9f:31:8e:5e:f4:9b:80:98:bb:29:37:9c:46:
         97:75:33:6a:74:b8:6c:39:65:72:77:f0:8f:01:64:c3:77:b5:
         b1:3b:19:0d:98:4b:b2:d6:45:0d:f1:d3:7e:04:72:5d:9c:12:
         28:6e:9a:6a:2c:a1:9a:4b:7d:2b:50:8f:ae:8b:ec:6d:d8:c8:
         ab:6d:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:34 2026 by rpki-client