Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC555064D5B711ECB09BCC49C4F9AE02.roa
File:                     AC555064D5B711ECB09BCC49C4F9AE02.roa (raw, json)
Hash identifier:          FoYM5TVCYdKeo/I94ActU2OqYA2HgeLJ2MD5UKU7Qk0=
Subject key identifier:   72:06:B4:5F:EB:54:2B:7D:66:D4:1B:FB:19:E4:90:75:26:82:81:1E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F46D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC555064D5B711ECB09BCC49C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:25:10 +0000
ROA not before:           Mon 06 Jul 2026 17:25:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147268
IP address blocks:        103.176.254.0/24 maxlen: 24
                          103.176.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62573 (0xf46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:25:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be4f6-c1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:d2:4d:78:70:4e:cc:a5:f9:19:57:41:f3:
                    68:9e:fa:82:22:47:fb:ef:61:fe:f7:69:51:9b:d9:
                    22:f2:3f:85:a7:1c:70:02:95:76:80:fc:5b:b8:1e:
                    d4:73:2d:a1:f1:c7:8d:da:95:44:b3:f1:c5:e8:9a:
                    3a:94:18:59:28:8b:bb:b1:45:82:44:e0:12:c3:6f:
                    96:47:8b:6c:6b:21:4e:4c:87:85:71:c9:84:d1:7e:
                    fb:0f:cf:11:b9:a1:d5:db:a1:9f:d5:6f:98:14:3f:
                    46:01:70:f5:9f:33:9a:8c:a9:53:c7:05:e3:f6:0f:
                    62:09:3a:c6:8c:89:f5:82:c8:d8:e6:1e:75:c1:c1:
                    15:78:8d:7d:b9:72:38:a9:9d:a9:f0:f2:cb:fd:42:
                    07:23:df:26:b7:22:41:da:96:87:23:b7:44:ce:f8:
                    80:9c:6e:3a:98:47:a1:d7:23:2d:19:a7:24:9d:c5:
                    ca:17:e3:19:57:70:f1:5c:1c:15:79:fa:c7:cc:ea:
                    a8:90:23:72:64:46:37:e4:51:3b:27:99:20:60:af:
                    da:5c:dd:85:91:83:17:d2:5e:8d:3e:4b:86:27:18:
                    6d:b4:f7:e8:a0:54:97:d7:3d:dd:29:45:40:35:0c:
                    e7:e3:2f:78:10:05:18:ab:d8:4b:7d:50:79:d0:4f:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:06:B4:5F:EB:54:2B:7D:66:D4:1B:FB:19:E4:90:75:26:82:81:1E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC555064D5B711ECB09BCC49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:1a:8f:18:98:e1:03:d7:4e:19:c8:23:82:8a:1d:62:94:
         c2:f7:22:a0:a1:08:3d:7f:7d:3f:6c:24:7b:98:04:a5:99:41:
         96:0e:04:2a:b6:5a:b6:c0:9a:ea:75:b2:88:ae:bf:56:ca:87:
         28:d2:ee:04:f7:21:ab:b8:a1:6b:aa:53:b0:89:07:ec:0c:4f:
         bb:c1:2a:58:2a:9b:bc:be:f1:19:0d:7e:de:09:f5:47:ba:a5:
         9e:11:e4:91:e2:1a:0f:ef:dc:c3:8f:a7:63:7b:4d:7e:ce:3b:
         b7:80:53:b1:5d:83:38:22:39:db:82:7d:79:65:5f:ce:d5:00:
         25:81:47:7d:e7:97:03:ad:67:0b:17:5f:b9:d8:b5:e6:25:08:
         72:cc:6a:50:71:c5:72:ed:a3:44:24:38:6c:bd:9d:09:14:30:
         a3:33:fc:30:90:fa:3c:c5:d6:db:3c:32:dc:99:ad:09:36:a1:
         80:9a:3b:ed:62:e8:9d:d6:b1:bf:03:ee:1a:61:53:ce:f0:e2:
         e1:6f:27:08:5f:f5:e1:11:9a:2b:b7:fd:35:c4:45:b4:72:24:
         b5:76:b2:cd:83:f2:5f:ad:20:a6:d8:be:47:7a:ba:76:36:45:
         a0:41:68:4a:02:9c:b1:80:25:81:cf:ed:cc:7a:97:58:25:46:
         e3:60:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:02 2026 by rpki-client