Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
File:                     A7B1689E066411EDA7A8DF3BC4F9AE02.roa (raw, json)
Hash identifier:          b3+1LA52iKAZpJt7c6plTApxxibF/GvjrHhBHONH2as=
Subject key identifier:   61:AB:CC:34:B1:F4:AD:07:00:62:6C:A9:B5:C7:C9:16:C0:18:16:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:49:35 +0000
ROA not before:           Sun 31 May 2026 17:49:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     205544
IP address blocks:        103.173.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60189 (0xeb1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:49:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c74af-d659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:17:1d:77:3c:d8:7b:ed:03:7b:47:c3:ee:
                    a5:70:78:7d:94:cd:6b:47:ca:3c:05:4c:9f:3a:08:
                    75:05:95:56:40:6a:97:96:0a:93:eb:fd:87:b9:bb:
                    64:dc:36:80:4b:05:f5:1c:e5:03:00:c3:f9:29:21:
                    e8:c8:76:49:73:b9:91:56:86:17:dd:64:1f:19:0a:
                    5c:b5:e9:06:fe:c5:1a:e3:81:5a:83:7c:dc:55:bc:
                    e7:8f:3d:70:36:50:02:eb:8b:99:ed:4d:61:d3:5a:
                    2d:a0:06:39:13:70:69:f5:11:97:44:3a:2d:62:66:
                    d2:9d:a3:25:a1:ca:ab:53:ea:b1:8f:19:9e:78:75:
                    95:05:eb:cb:5f:39:e7:76:52:13:06:b9:bd:57:30:
                    4c:3e:46:93:02:99:9a:14:41:a4:b6:7a:9e:10:51:
                    ad:9e:2f:2e:12:3b:ea:ab:32:e7:5b:b2:36:90:6c:
                    c4:00:4d:37:0a:0b:c0:46:95:04:cd:42:51:df:d6:
                    99:1e:24:6a:e2:b5:21:b0:bd:9d:70:db:fe:ed:03:
                    cd:fe:b9:24:fd:09:5b:64:9d:a7:0d:bd:91:f6:d3:
                    73:e7:dd:47:b2:45:e3:70:86:04:d5:59:ff:06:f9:
                    df:a5:1a:55:f0:78:f3:7a:60:95:cb:a9:2e:74:cb:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:CC:34:B1:F4:AD:07:00:62:6C:A9:B5:C7:C9:16:C0:18:16:0E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:fa:54:df:6d:a8:01:34:8c:11:39:03:30:5b:10:17:b8:
         fc:e1:27:35:1a:f1:1a:6d:26:07:84:3c:15:48:76:ad:c5:f4:
         64:6f:3c:9b:35:c3:50:d2:9f:98:4e:75:8a:1b:10:7e:ac:84:
         bf:d3:b4:4e:b9:84:16:0b:01:67:85:d1:49:29:98:2a:2c:35:
         36:6e:4b:59:15:5c:c3:63:30:00:18:84:e0:d9:74:ba:e4:c0:
         49:ce:27:42:42:d6:81:5a:2b:15:d5:7f:5e:83:bf:4a:64:93:
         c2:a1:53:51:33:a4:0a:e8:08:1e:1d:7a:de:43:6f:d8:9d:b9:
         a6:05:2e:9c:15:ad:94:8f:b5:bc:73:d0:60:9d:46:8b:c5:67:
         95:d9:b5:24:41:33:39:6b:4c:77:de:22:d5:db:1e:a2:12:26:
         76:e3:99:6e:44:0c:2f:c4:0b:40:c6:37:93:4b:cf:d5:ae:2a:
         4c:53:3d:e2:42:df:72:1c:24:26:14:ad:77:a2:70:ee:b9:45:
         6f:7c:a7:3a:3d:74:d0:bc:c5:b8:54:5c:f4:bc:64:ff:38:32:
         3f:00:d1:af:6a:7e:85:2b:c5:1e:69:d2:42:e3:70:06:2f:54:
         cc:8f:32:7a:ee:89:80:a9:18:33:be:0c:8f:d6:e8:bc:07:8e:
         b7:30:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:46:52 2026 by rpki-client