Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa
File:                     92BE755697CF11ED8A72A71AC4F9AE02.roa (raw, json)
Hash identifier:          DslIt5O3xR+m8SKrYzz/hNs5i9uXVchrCK7Sv5lB7KQ=
Subject key identifier:   35:6F:06:7A:AE:5C:F3:1A:D5:C8:AA:E9:FB:18:90:6A:89:2A:EA:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F59B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:58 +0000
ROA not before:           Mon 06 Jul 2026 17:34:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150625
IP address blocks:        103.67.98.0/23 maxlen: 24
                          103.126.240.0/24 maxlen: 24
                          103.198.187.0/24 maxlen: 24
                          2001:df1:d140::/48 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62875 (0xf59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be742-e49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:d9:f1:42:95:93:af:93:e2:36:65:4d:d4:
                    d9:41:8f:70:9a:6e:5a:7f:33:e8:9e:a0:6c:1b:9b:
                    7a:59:50:a0:d6:06:5f:24:7d:52:24:a2:44:62:df:
                    b9:5e:f6:a5:a0:02:8a:12:80:22:99:3f:90:04:e5:
                    3a:ac:7d:73:87:be:88:3d:dd:77:80:8a:1f:46:7d:
                    2b:e9:f5:54:d7:36:2b:a4:b0:3a:d9:df:0a:5b:47:
                    6f:8c:7b:e8:70:23:de:36:b4:ab:34:11:7f:cd:58:
                    1c:91:c7:53:f8:ba:71:d7:19:7c:33:c9:fe:9d:dd:
                    54:cc:62:ae:f9:51:ae:87:19:30:26:51:6a:b3:d2:
                    ff:7e:39:b2:f8:5e:19:52:9a:b6:49:5a:4c:21:c7:
                    e9:16:8e:f5:a7:1d:a6:f3:59:8e:b0:31:9f:fe:95:
                    d2:92:b1:0b:a5:ee:95:fb:51:8e:26:78:dd:94:3c:
                    18:3a:db:6e:e2:b2:6d:df:f1:02:57:43:d4:fb:8a:
                    17:e9:9d:fb:b1:bf:4f:4a:65:6d:85:01:d3:d9:a5:
                    fe:48:59:da:39:13:de:55:e6:3c:af:23:d9:5a:bf:
                    30:aa:e2:80:f9:bb:f7:77:ca:cb:1f:7e:29:25:b8:
                    63:b9:a7:ab:b0:6d:bb:60:dc:43:2f:64:7f:65:86:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6F:06:7A:AE:5C:F3:1A:D5:C8:AA:E9:FB:18:90:6A:89:2A:EA:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92BE755697CF11ED8A72A71AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.98.0/23
                  103.126.240.0/24
                  103.198.187.0/24
                IPv6:
                  2001:df1:d140::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:f4:15:19:dd:1e:ca:0b:71:74:43:0c:2a:99:f6:a3:81:
         36:7e:3e:cf:7a:6e:59:8c:83:55:ff:d3:b7:d8:98:14:4e:bc:
         91:b1:b2:63:8f:76:1f:9d:23:b0:db:36:e4:dc:e0:0f:09:db:
         51:e9:c2:90:b9:86:e2:2d:f3:4d:39:e3:50:cc:9c:49:e3:6b:
         c4:63:0b:07:c0:e7:54:e3:6c:13:19:28:57:ba:8d:3e:92:9a:
         ca:26:3d:eb:1f:17:7b:0a:5f:b2:0c:72:da:ef:b1:62:8a:7a:
         89:d7:91:4f:17:68:6b:15:c7:6b:c3:9e:4c:5a:d6:15:52:20:
         9d:d5:09:59:f0:f9:79:a4:92:57:9d:3f:dd:3f:fe:3f:01:14:
         5b:54:b4:d0:6d:69:88:58:07:25:49:b4:b7:cc:25:77:89:30:
         32:62:d6:dc:c5:62:e6:83:a7:20:36:cd:78:6e:a7:4c:4b:59:
         8e:c0:19:7a:c6:47:ee:a2:30:97:e7:2f:46:e2:f0:6d:44:40:
         f8:2a:df:e4:7b:83:62:a2:1f:8c:ab:8f:03:d8:06:8d:0e:e6:
         c7:c5:1c:41:42:b7:c2:ce:ec:0f:92:13:2e:79:e5:47:38:7c:
         7f:db:dc:92:97:2a:f4:88:05:10:41:bf:8f:9e:2e:9d:f3:f7:
         8d:93:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:41 2026 by rpki-client