Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFBB5F10989811ED8477E218C4F9AE02.roa
File:                     AFBB5F10989811ED8477E218C4F9AE02.roa (raw, json)
Hash identifier:          TL6Ap7g6TunNKiE2Fs/e26TPMPeMVlcwVNR+GPplUU8=
Subject key identifier:   18:A1:94:4E:FD:DE:37:EF:42:82:DC:97:6E:5E:5A:AD:2D:2D:E1:02
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F598
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFBB5F10989811ED8477E218C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:53 +0000
ROA not before:           Mon 06 Jul 2026 17:34:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150622
IP address blocks:        103.187.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62872 (0xf598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be73d-79f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:15:3b:ba:66:50:8d:00:94:8c:c5:20:b6:
                    51:9f:65:27:62:d3:b5:ab:ce:7d:ee:3e:5f:45:4c:
                    d1:d6:65:62:de:f7:42:0f:17:e5:74:6e:35:35:b0:
                    28:56:73:ef:d9:42:0e:70:eb:c1:2b:04:5f:9c:30:
                    46:67:4a:83:08:d4:09:4b:7e:20:a7:74:f4:b2:48:
                    47:cb:fc:ca:67:fb:71:cf:b6:f2:d6:d6:e4:7d:ab:
                    e1:85:0a:02:6f:40:e4:35:a0:b1:a4:b2:bb:1a:8d:
                    38:3d:fa:83:97:ec:27:d0:e4:5f:fc:e2:ff:a8:0c:
                    d0:4c:68:80:a3:78:67:93:a1:6f:74:ae:b8:f9:02:
                    2c:18:66:25:83:86:97:7f:be:2b:0f:67:72:61:6a:
                    48:81:87:37:7f:27:c9:df:25:cf:fb:51:82:58:6c:
                    3f:8e:25:62:c5:c2:b8:b0:69:11:3f:48:a3:05:1c:
                    15:8b:e9:ed:24:1f:d5:5b:94:21:72:a7:c2:44:fb:
                    c1:72:00:22:7f:5c:dd:29:45:eb:91:44:b5:f4:6f:
                    1f:8e:73:a5:cf:48:91:fc:fa:e9:88:69:2b:e5:1d:
                    2a:31:0a:d8:62:c7:4c:fa:2b:fa:4a:d6:81:21:6c:
                    d5:65:75:bb:59:9d:dc:ad:fb:e5:fd:9a:fa:58:5b:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:94:4E:FD:DE:37:EF:42:82:DC:97:6E:5E:5A:AD:2D:2D:E1:02
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AFBB5F10989811ED8477E218C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:80:16:fe:ba:05:a6:f4:84:8b:e2:fc:db:22:b7:be:e6:20:
         67:46:8d:42:83:8f:fb:e9:59:87:2d:50:e9:24:4b:e6:8c:68:
         c4:dc:62:99:22:26:17:01:49:7d:93:03:e1:d3:78:56:5d:9c:
         c7:64:85:52:29:e7:6d:15:d2:19:8c:05:1f:34:d5:cf:2c:c9:
         29:97:ed:67:37:b7:e1:29:37:77:ff:1f:4c:f7:78:ac:90:6d:
         fd:ab:02:36:c7:c7:2f:65:32:0c:e9:57:29:f0:99:88:ae:8e:
         f4:09:6f:a1:4c:06:53:3d:42:16:a5:a2:89:d6:9e:18:da:17:
         df:01:e6:ac:15:3e:dc:0b:c9:c1:2f:99:fc:91:5b:85:db:67:
         58:a5:ce:14:8d:55:fa:79:b2:85:b2:10:30:72:ed:f8:17:bc:
         c9:83:22:f1:a6:7c:38:d3:74:12:6f:24:53:2a:66:c4:71:91:
         19:e5:08:34:f4:23:d9:42:fe:77:29:61:ac:60:14:f1:b5:c7:
         02:51:79:50:79:4f:38:5c:8a:95:db:56:df:f2:43:36:f4:a9:
         be:a8:8e:73:e3:2f:4d:1f:81:4f:15:e3:e1:cc:2c:b1:5d:d1:
         9b:fe:4a:fa:a6:19:e7:36:91:46:90:f1:35:ac:ce:f5:fe:a0:
         4f:86:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:50 2026 by rpki-client