Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa
File:                     AEF723E4413B11EC87AB0687C4F9AE02.roa (raw, json)
Hash identifier:          flzze96VatUk67f/izrjWBZhjm/7FF6sWoDNslM97AU=
Subject key identifier:   1F:53:5A:AF:D7:94:3B:B1:1B:F4:C8:7D:0E:79:5D:C5:C8:5D:F1:82
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F01C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:48:22 +0000
ROA not before:           Mon 06 Jul 2026 16:48:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135731
IP address blocks:        103.174.76.0/23 maxlen: 24
                          2400:10a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61468 (0xf01c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:48:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc55-50a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:19:f7:93:38:11:bc:b7:2c:ab:b6:33:9b:
                    5b:9d:e2:93:9b:b6:7f:6f:b3:35:ad:b6:18:a9:52:
                    cb:6f:d7:1e:1f:db:e1:c8:b6:a5:29:7c:35:55:99:
                    53:90:f6:ce:3b:d4:94:4a:1f:1c:53:42:24:e8:f5:
                    08:61:40:f8:4b:e6:29:5e:c1:2a:d0:24:f7:92:6c:
                    14:6d:a4:f1:74:6b:cf:c7:bf:65:37:37:a4:f4:26:
                    96:57:8e:d3:e7:48:d1:71:1b:7a:c1:0b:8b:b0:fc:
                    88:68:6e:8a:ad:41:1f:f0:c0:45:12:0d:3a:1a:40:
                    65:0b:c3:d2:ea:d7:43:87:15:59:87:4a:4b:d5:e9:
                    1a:89:f0:aa:4a:80:77:28:45:a2:dc:f7:68:95:86:
                    fa:54:9a:4e:f2:f1:f1:0e:5c:c3:18:f0:41:88:33:
                    07:88:e3:fb:51:35:58:6b:58:8a:0d:b8:0a:0f:ad:
                    c1:c6:6d:35:e5:d5:fe:8d:2c:55:a9:60:70:eb:ab:
                    a0:a9:45:e9:1e:e0:6e:f9:7d:21:85:d8:a6:00:c1:
                    fd:4b:82:27:cf:25:61:37:0e:3d:19:74:5a:c3:2b:
                    f5:34:42:6a:0e:6c:4a:b4:1a:52:55:3d:a3:fe:19:
                    8b:42:fb:fe:b0:42:1e:6f:24:2c:50:5d:7b:3b:dc:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:5A:AF:D7:94:3B:B1:1B:F4:C8:7D:0E:79:5D:C5:C8:5D:F1:82
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.76.0/23
                IPv6:
                  2400:10a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:10:74:42:c2:bd:8e:13:89:c5:6d:5b:65:40:d5:ff:65:24:
         87:e8:eb:d2:68:d3:10:d8:ba:ba:bc:d9:f0:a4:04:f7:28:e3:
         6d:04:3f:ae:a7:0a:59:9f:88:53:19:82:fa:33:59:c7:39:bf:
         63:27:04:29:6f:f5:4b:d5:e2:26:8e:c5:7a:6c:c3:78:92:76:
         e2:b1:58:00:e4:00:50:f6:f7:20:e9:6f:50:b6:18:75:96:bc:
         f0:b8:6d:2f:24:b5:89:aa:25:e1:81:aa:db:b6:1e:d3:9b:70:
         95:28:00:67:35:07:65:a1:0b:e6:6e:f0:ab:fb:9f:13:47:7d:
         9d:1c:b0:1f:9b:30:24:8b:9e:03:6f:1f:9f:e9:e4:3a:dc:72:
         dd:2c:a7:ee:e3:6c:dd:4f:26:e2:bc:64:ab:ca:8f:ce:c3:77:
         ba:3b:0e:28:48:fb:51:08:60:3e:9b:58:a0:24:34:a7:83:cb:
         68:fc:3a:12:22:1b:50:c9:d8:02:a5:29:e3:3a:67:f1:00:e6:
         9d:21:36:77:44:8c:21:81:c4:79:a2:8a:59:06:2a:ee:30:d0:
         92:22:4c:98:1f:b8:33:64:fa:49:77:5b:bd:ab:5e:b0:3c:88:
         21:4c:ed:be:b1:ff:0a:b1:1f:76:ed:5e:8e:0b:3e:1c:ce:ea:
         68:dd:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:51 2026 by rpki-client