Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5F41E1625AF11ECA3AE8F70C4F9AE02.roa
File:                     A5F41E1625AF11ECA3AE8F70C4F9AE02.roa (raw, json)
Hash identifier:          4BUAqRDIw3ccVYmavx5f8pvS0UJmVznCOIOeEek87Lo=
Subject key identifier:   52:98:66:68:61:78:7E:2F:A1:57:99:0E:B5:F2:D8:A1:DD:E5:F3:EE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5F41E1625AF11ECA3AE8F70C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:19:04 +0000
ROA not before:           Mon 06 Jul 2026 17:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142455
IP address blocks:        103.170.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62393 (0xf3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be387-4669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:41:be:09:e6:61:48:6a:ea:b8:56:1c:ec:
                    45:bf:f7:42:c1:54:7a:b5:e5:4c:53:97:e5:de:b2:
                    a0:de:48:77:16:51:44:7a:3d:84:f6:39:b8:29:1a:
                    c1:17:b7:35:d6:10:26:9d:87:8a:26:88:4f:85:12:
                    f9:23:f3:8e:b0:ee:12:32:2b:2f:fe:42:9a:5d:3f:
                    32:e7:64:a2:d3:eb:b7:a0:c9:3e:b7:e6:92:40:0d:
                    2e:47:0e:b0:22:76:b7:36:11:97:56:d4:60:bd:ae:
                    ba:4a:7b:1e:09:24:10:ab:e9:4b:b3:fd:f3:77:12:
                    34:08:a2:40:c0:f9:18:c5:a4:1e:f5:97:9f:06:d5:
                    be:24:cd:4b:52:91:b7:96:23:97:c6:00:df:12:7f:
                    0a:04:76:4d:82:af:99:59:ef:a0:d6:78:63:fd:88:
                    e6:8f:7d:99:45:65:7c:8b:ab:d3:f4:0a:3c:da:9e:
                    58:65:38:a5:53:6a:75:33:40:b1:68:1b:55:8f:a3:
                    c4:ce:76:9b:c4:8a:83:2d:9f:32:8d:47:68:21:51:
                    cd:8c:b2:7a:1f:ce:d8:8a:57:64:37:9a:c7:bb:e9:
                    8a:e6:00:54:7b:76:b5:31:67:9a:49:c4:33:52:fe:
                    c6:9e:ab:5a:e5:ca:ea:9c:5c:55:ac:73:c2:f9:aa:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:66:68:61:78:7E:2F:A1:57:99:0E:B5:F2:D8:A1:DD:E5:F3:EE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5F41E1625AF11ECA3AE8F70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:91:2d:5e:e8:1c:9b:01:19:f7:b3:57:ef:3a:fa:23:6c:
         56:d2:c2:f7:36:d3:d5:ad:69:cb:af:88:a9:a2:16:a4:0f:e9:
         2a:a5:5d:75:b2:5a:3f:20:b7:9e:00:3c:30:9c:3b:34:ac:ec:
         a7:75:f3:05:12:65:0b:6a:c1:fd:29:4e:4e:e9:c6:fd:2d:3a:
         00:e3:66:e2:1b:14:95:00:7d:50:53:e1:dd:0c:fa:13:28:d3:
         cd:64:fc:fe:20:cb:78:93:8a:bf:c6:6e:02:2a:24:07:72:be:
         55:2e:14:b3:88:56:d7:a1:48:bc:c9:d5:f4:86:27:73:be:11:
         ce:1e:e0:2f:72:23:83:ca:84:88:4d:ad:0d:ef:b5:9d:b0:45:
         53:65:de:0d:d4:d4:63:06:df:4a:77:2f:bf:11:46:ce:5c:ad:
         87:1a:fb:24:b0:6c:a8:db:4b:72:9f:ff:db:11:90:c1:54:5d:
         ef:cf:80:81:68:45:c8:b1:69:de:38:87:77:d1:f1:3f:5a:51:
         0e:8b:b4:4b:63:03:51:e8:50:ac:73:79:9d:5e:15:2b:8c:df:
         14:77:e3:a4:95:c5:44:20:0b:76:2e:cc:e1:fd:cb:32:10:e9:
         69:1d:5b:90:38:09:f6:55:7d:29:2f:d4:b9:56:66:ab:6a:9a:
         60:9d:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:03 2026 by rpki-client