Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A1F28E50211ED8E119159C4F9AE02.roa
File:                     A41A1F28E50211ED8E119159C4F9AE02.roa (raw, json)
Hash identifier:          kMHdh645evGwL/m2zf0iSQ2opXuRPfDXpmAU7LVWxes=
Subject key identifier:   70:56:24:86:7E:2E:CE:39:E1:F0:64:FB:41:01:EA:4A:91:10:26:13
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F16E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A1F28E50211ED8E119159C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:59:23 +0000
ROA not before:           Mon 06 Jul 2026 16:59:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137191
IP address blocks:        103.95.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61806 (0xf16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:59:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdeea-924b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:81:58:a9:3c:a3:f4:41:c9:47:cc:58:34:4a:
                    02:0a:f8:86:57:61:6b:45:03:a8:a6:81:64:9d:8f:
                    84:f6:71:a3:2f:24:ef:18:ab:9b:f7:b4:d7:e1:cb:
                    dc:c2:ef:92:df:dd:36:c6:eb:35:30:2a:95:2a:87:
                    a6:91:2d:76:0c:4c:8f:7e:76:b5:67:6b:a7:f5:d7:
                    bf:a6:bd:4d:f4:5d:04:33:24:68:75:88:12:86:08:
                    ec:0c:aa:6d:34:31:b4:51:cd:2e:6c:ae:22:07:ba:
                    d6:ea:9b:ea:cb:2b:c1:14:82:9c:f3:dd:1c:54:b9:
                    67:a6:2d:e5:d4:0e:e6:d0:d7:24:fe:f2:3c:1e:52:
                    9a:35:d2:39:c5:da:6f:98:31:45:fc:55:de:99:9c:
                    cf:2a:91:59:66:b0:b2:3c:b4:a6:b8:c8:21:b8:0a:
                    d0:2b:3d:df:95:a9:db:65:88:5a:d8:68:3d:db:6c:
                    32:fa:07:34:2b:ca:e2:42:0d:8e:b7:bc:c0:8a:a8:
                    ae:e9:ff:80:ed:fb:c9:43:96:d0:d3:85:dc:9e:1a:
                    ff:45:44:81:2e:8c:55:0d:36:e1:5e:8e:80:70:e8:
                    2c:23:c0:f8:55:43:50:87:61:c4:63:4d:16:40:92:
                    f2:e5:7c:a1:3b:00:12:c0:32:a7:72:c9:ba:28:09:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:24:86:7E:2E:CE:39:E1:F0:64:FB:41:01:EA:4A:91:10:26:13
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A41A1F28E50211ED8E119159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:87:ce:a1:e7:3a:3c:fc:2f:c2:36:71:08:b8:ca:2a:93:d1:
         d5:68:2a:9f:b2:a3:e7:0a:a3:c5:e1:a6:88:f4:af:36:4f:b9:
         90:d2:7a:af:10:f8:d1:9c:ad:3b:fd:c9:7d:af:69:bf:ee:56:
         4e:a3:55:5e:39:d1:ff:20:d6:5d:74:87:25:59:04:ec:2e:13:
         7c:ca:b9:f4:30:e2:e4:9a:d8:1c:18:d5:74:1d:40:c6:7f:85:
         95:09:e2:0a:c2:9c:61:44:c2:c4:89:91:f1:50:ce:f2:9e:d1:
         7b:ae:68:96:c3:87:4b:a3:a8:0b:8d:a9:3e:65:fd:85:7a:06:
         82:0a:a2:a2:e3:b6:9b:5b:21:cf:03:b6:f5:18:32:dc:33:ab:
         d3:76:26:ed:04:3d:0f:5d:a1:ff:f7:7a:99:a1:48:fd:1e:77:
         fd:16:cc:72:2a:ca:b0:b6:f1:32:35:85:e8:04:23:d3:73:f7:
         ef:df:48:29:60:3d:43:be:b0:84:01:aa:ab:87:1c:e8:4c:d5:
         ff:0a:8b:55:3b:6c:29:a8:ac:4c:d3:ab:85:a9:f6:e7:e6:36:
         65:fa:5e:af:eb:06:4f:09:5f:2f:ad:16:38:a6:13:c9:e0:02:
         90:a1:d0:25:09:00:47:e4:f7:69:c2:2e:dd:9b:07:6e:76:6f:
         0d:ec:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:12 2026 by rpki-client