Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa
File:                     A60940C24BAD11EE8EF6480CC4F9AE02.roa (raw, json)
Hash identifier:          dNd+DFQYdaBMVXHB8aHupQ4D+xrriq719qERY96FCMQ=
Subject key identifier:   C2:8F:37:10:8A:31:CF:9A:C4:EB:F8:A3:C7:C5:BA:8C:91:F4:F4:0F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5EA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:37:28 +0000
ROA not before:           Mon 06 Jul 2026 17:37:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151154
IP address blocks:        103.122.204.0/24 maxlen: 24
                          103.122.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62954 (0xf5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:37:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be7d8-59f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:c1:8a:69:88:3f:e3:01:95:b5:9e:90:5d:
                    03:9f:ed:83:29:51:3e:5d:88:27:46:f2:f9:ac:62:
                    31:11:c9:0a:24:4d:4a:0c:d7:5a:00:85:11:b8:bb:
                    6f:d0:d9:f0:e0:7b:05:48:81:88:23:68:16:c8:1c:
                    3d:0c:34:ca:1f:3a:d1:1b:43:fd:d6:c7:b2:d3:08:
                    66:67:02:59:c2:a1:37:90:99:fc:8e:3a:ad:9f:01:
                    09:43:e6:e0:64:8f:69:bc:3c:71:56:7a:f9:63:30:
                    49:aa:02:88:bc:56:36:39:01:e2:59:e9:6e:88:aa:
                    ee:98:1a:9b:cd:9c:8f:fa:9e:12:10:74:25:c9:fa:
                    09:e8:e3:22:2f:b2:1f:41:bb:c8:58:41:2f:63:d9:
                    aa:ee:44:ab:be:65:1b:69:0b:94:80:80:b2:09:08:
                    42:b9:f4:c7:24:af:17:02:a4:80:35:03:8f:94:28:
                    44:cf:b6:31:b8:40:b2:1e:16:7c:0c:61:08:b8:1a:
                    af:72:50:1d:bd:cc:e5:29:d8:82:62:66:d1:04:1c:
                    f1:7a:fe:0e:07:9e:54:bb:96:4d:cf:38:18:b0:8c:
                    93:fb:fd:4e:71:98:78:dc:7a:a2:bf:94:e0:3b:37:
                    6e:c0:c7:b0:2c:e6:28:63:66:ea:07:d2:b3:f5:20:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:37:10:8A:31:CF:9A:C4:EB:F8:A3:C7:C5:BA:8C:91:F4:F4:0F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A60940C24BAD11EE8EF6480CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:90:89:46:fe:d6:19:e7:bb:c8:5b:73:ca:d4:52:79:1a:
         3f:61:bc:8f:7b:60:40:af:4d:73:c9:e6:36:86:30:28:06:86:
         bc:7e:2f:e9:3a:a5:bb:e3:fe:fe:88:ca:e1:bd:dd:63:f4:44:
         fd:58:5d:1b:ed:14:1a:c1:d4:cc:c5:a1:46:a5:46:f0:6e:1b:
         73:49:df:06:18:c2:02:5a:eb:c2:8a:a1:9a:e3:af:ed:32:90:
         5e:5a:bb:96:d4:98:35:37:ed:cb:8e:99:37:37:b5:ab:5d:2c:
         86:c8:e8:5a:47:c1:dc:5e:38:50:b6:07:5a:a2:8c:54:51:12:
         84:01:26:06:29:b1:af:6f:b2:23:6e:98:41:ec:e2:de:91:ae:
         76:41:2e:ab:ad:47:99:0f:fe:3a:cb:7c:63:f0:5b:77:3f:b5:
         88:24:d1:78:6a:0f:c8:ca:e7:f7:be:74:9a:2f:f1:ef:70:86:
         48:02:6f:a8:71:7f:f4:e2:58:bd:be:a7:c9:ae:fe:54:e2:64:
         13:4f:42:2c:00:26:b2:55:69:cf:8f:07:2f:27:44:96:01:d3:
         f2:02:05:58:24:f7:c3:09:7b:16:a9:17:d3:5e:ac:9c:ee:00:
         7c:29:6b:02:b5:58:01:7e:e2:22:36:93:8e:36:9d:bf:cd:a5:
         e1:22:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:51 2026 by rpki-client