Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa
File:                     96FF852E61D711EEA6CF0A0FC4F9AE02.roa (raw, json)
Hash identifier:          w5klfCz8rTsnziwEGrzESvWWjQV7dPpJgE+JLgpzhsw=
Subject key identifier:   CC:D7:02:80:22:6D:47:7F:6C:C2:F7:43:98:F8:12:F6:DC:98:95:09
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F604
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:38:20 +0000
ROA not before:           Mon 06 Jul 2026 17:38:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151688
IP address blocks:        103.213.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62980 (0xf604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:38:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be80b-d626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:e6:5a:7c:d0:8c:24:f0:14:d6:49:27:8d:
                    3b:61:94:d5:24:58:c1:b4:d1:e2:2a:30:07:31:17:
                    3a:f3:d4:d0:e0:05:ea:d7:10:b1:a6:1d:3e:a7:44:
                    98:e2:61:22:48:2c:3e:c9:3f:32:be:d3:3d:2d:84:
                    1a:43:e5:f8:c3:94:02:d1:96:3b:61:d1:9a:87:63:
                    90:d2:ab:15:66:c2:c6:fe:f4:67:ae:60:f1:71:d9:
                    7a:f9:9e:11:5f:b8:09:ee:ce:e4:59:9a:33:fa:de:
                    a0:6b:62:9c:47:03:5e:0d:a9:5f:cc:fb:c6:52:18:
                    fb:b5:0f:cc:09:e9:2b:70:75:e1:56:0c:a2:77:2c:
                    02:98:60:50:f6:3f:a8:74:c6:22:85:25:c6:25:de:
                    7f:62:83:1f:3f:f1:bd:c2:a7:30:ba:76:74:72:d0:
                    61:01:f6:10:f7:3b:de:35:4f:29:a1:01:c2:b5:d8:
                    33:4a:77:23:9f:95:39:d6:c4:65:a1:b2:56:d4:d7:
                    85:9b:8d:e9:9c:1f:ae:77:56:fc:f1:6a:67:45:c9:
                    4a:50:f2:ba:b5:36:aa:b9:70:f1:aa:41:1e:c6:de:
                    de:6b:e1:35:4d:57:02:cb:97:3a:2c:d5:6a:06:47:
                    a3:09:b1:62:11:8f:94:1e:55:6b:4e:4b:60:df:80:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:02:80:22:6D:47:7F:6C:C2:F7:43:98:F8:12:F6:DC:98:95:09
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96FF852E61D711EEA6CF0A0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:6e:b4:59:ac:a2:c1:b3:f1:8f:af:48:d4:36:7f:95:09:
         8c:56:ff:40:82:53:b1:13:34:73:dd:eb:fd:a9:e3:26:9a:45:
         8d:ee:b1:59:55:e7:c8:a5:c8:dd:01:25:8d:09:e4:42:f9:42:
         2f:b7:a0:2f:79:85:07:55:48:02:10:6c:8b:c2:c7:d0:34:d4:
         5c:7b:7a:06:42:fc:06:3f:4f:09:a2:71:e1:ea:2a:33:2b:74:
         82:00:82:95:f4:f9:3c:ff:f9:a4:75:33:ca:85:48:1f:ad:ed:
         44:49:75:5b:00:a8:bb:42:93:b4:e6:a4:12:49:20:75:77:79:
         3e:09:a7:0f:af:44:6f:31:0a:77:ba:3a:99:54:a4:ba:d7:d7:
         61:ff:2d:84:c0:52:99:24:85:48:c4:ee:66:50:32:0f:f6:16:
         79:0c:58:71:0a:30:ba:e9:c7:05:2f:66:4a:b9:99:85:04:84:
         2f:2a:49:51:9e:40:2a:22:6e:68:c5:27:64:6d:bd:0a:ed:fe:
         23:b2:37:3c:8a:31:74:c2:6d:b7:32:9a:00:50:68:f0:b8:cb:
         a8:be:8d:09:a9:a8:3c:5b:5d:39:44:43:ed:82:7f:ba:f6:fe:
         20:a0:67:72:33:86:7b:ef:4b:ec:f1:8c:38:4b:82:f2:4a:66:
         98:1d:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:18 2026 by rpki-client