Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA382BD6F95A11EDAB130133C4F9AE02.roa
File:                     AA382BD6F95A11EDAB130133C4F9AE02.roa (raw, json)
Hash identifier:          AcRVZvK4L2nyWXP1JtrG+i4lNhElexU7elNP9J8zojs=
Subject key identifier:   88:28:CA:35:F3:1E:59:35:BA:F2:3B:AB:60:47:36:BF:F6:19:6E:42
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5A1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA382BD6F95A11EDAB130133C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:35:11 +0000
ROA not before:           Mon 06 Jul 2026 17:35:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150634
IP address blocks:        103.160.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62881 (0xf5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:35:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be74e-8938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:9d:cd:d5:01:da:f9:80:07:61:cd:06:11:
                    40:0f:08:db:8c:83:9a:50:7d:ee:92:de:15:7a:27:
                    4c:f4:9f:e3:fd:cf:e6:de:4c:2c:e2:a8:83:8f:95:
                    08:b1:25:45:a5:ac:76:bd:16:99:de:9d:f4:e0:79:
                    06:f1:46:ca:90:9b:3f:85:e8:26:0e:13:ec:3d:68:
                    78:59:97:6c:32:7a:60:4d:c2:30:4e:69:23:a7:84:
                    5f:1f:72:bc:6a:65:18:1d:73:f7:c7:3d:6d:6f:60:
                    e1:55:27:55:b4:93:e4:08:17:66:a2:ca:ad:7c:13:
                    b6:31:a7:5e:a3:0b:e3:d8:bf:09:94:f0:fc:d9:03:
                    8f:7e:e2:41:fb:d8:03:59:b4:cf:c9:a6:ad:5e:7a:
                    be:a7:41:b7:69:27:26:17:23:a5:5a:b5:13:71:00:
                    5d:75:93:94:40:dc:48:c0:e6:41:97:b6:e7:f6:4a:
                    f1:43:c4:7a:bb:99:1b:df:6e:b0:1b:39:f1:cb:53:
                    8e:d0:82:39:e0:e9:8d:80:00:55:c5:99:9f:ea:1f:
                    1d:1d:c5:3b:f3:da:17:1b:65:9a:96:7a:9d:a8:c8:
                    ef:d4:21:7b:d4:80:59:64:75:41:6a:2b:67:7c:af:
                    1c:4b:0e:b7:de:21:75:25:62:38:bc:a0:6b:20:7d:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:28:CA:35:F3:1E:59:35:BA:F2:3B:AB:60:47:36:BF:F6:19:6E:42
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA382BD6F95A11EDAB130133C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:f1:ef:fb:5e:46:a6:b8:fd:5b:cf:4f:3f:3f:b0:98:46:
         c7:90:95:64:a3:cc:ec:9f:2f:9f:3d:be:92:fe:fa:4f:7f:88:
         ae:66:c9:cb:86:7b:e9:e2:60:7e:16:68:70:12:a7:d5:b8:57:
         5a:cf:d2:05:85:09:3a:9c:e3:29:9b:63:49:3f:e2:5e:e2:cb:
         c9:a4:fb:e2:35:6d:11:b4:98:49:47:d9:95:29:3c:c3:a8:cc:
         4a:d7:02:a4:55:2a:60:ae:56:ae:85:7b:b1:39:bd:45:92:1a:
         d0:b6:0d:9a:2e:8e:60:2e:51:54:89:f2:d9:ef:b0:9c:c3:d7:
         f4:a9:31:c6:9e:91:d0:24:ad:e4:64:b8:f6:3c:60:54:13:2e:
         45:22:03:d0:bc:c0:0d:f7:2a:6f:fe:4e:0b:bf:7c:89:c6:61:
         13:2f:bf:65:39:f2:4c:ef:f4:f3:83:6c:6f:cf:4b:b5:72:7f:
         03:00:07:6b:79:00:2a:5f:a6:25:b1:97:6a:97:44:56:cb:76:
         04:b2:91:57:4e:5b:8a:71:f5:5a:5e:85:9e:f6:1b:42:30:b7:
         b5:dd:0b:5a:49:83:66:56:64:e1:45:0e:7c:e6:4f:4f:2c:59:
         29:8b:67:58:20:9e:52:01:ee:77:56:48:8c:0d:17:35:c0:2b:
         bb:11:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:06 2026 by rpki-client