Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa
File:                     B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa (raw, json)
Hash identifier:          nGspoBQSGtxEqcAjx8O1kUoqtCqFMoaO9usenrAbdTw=
Subject key identifier:   AF:6F:6C:B0:5D:C4:2D:90:4D:57:F9:3D:D0:7F:E1:42:02:43:C8:D2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F317
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:13:31 +0000
ROA not before:           Mon 06 Jul 2026 17:13:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141481
IP address blocks:        103.160.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62231 (0xf317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:13:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be23b-b08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:47:42:6a:60:38:e2:6a:82:08:2c:6c:51:
                    57:ad:69:08:cc:25:62:34:a1:88:6e:e9:7e:95:fe:
                    5c:4f:09:4f:c2:cc:36:df:79:6f:70:9f:9b:9e:a5:
                    41:2f:71:92:d0:c8:4e:79:21:6e:35:79:9d:db:90:
                    da:25:c5:83:7c:ef:f9:dd:13:29:3c:aa:53:bb:16:
                    b5:43:47:16:b8:86:ec:f2:c4:8b:18:e2:b9:34:eb:
                    89:53:0a:40:80:aa:91:a2:06:c7:74:93:11:ff:a7:
                    0e:fd:f3:be:6c:bb:11:bf:09:d5:8a:0c:18:fa:7e:
                    ad:61:97:4e:c6:76:74:59:33:38:8a:56:d2:b3:a2:
                    9d:fa:ca:af:82:51:5c:f8:05:63:73:9f:e7:c0:30:
                    63:f0:ce:89:98:c6:48:c5:7a:36:49:2b:9b:9f:af:
                    ae:6d:6e:dd:36:7c:02:eb:31:26:94:c0:49:f4:0f:
                    e6:21:f5:12:79:f6:51:6e:e6:20:f1:80:a9:d3:89:
                    24:6b:fd:e4:19:aa:28:b3:a0:c2:48:e2:72:be:a1:
                    b7:ab:ca:9e:ef:3d:cc:22:ce:7b:9b:0d:22:2c:c1:
                    09:59:6e:91:a9:b3:d7:98:5e:13:df:c0:86:6a:11:
                    c7:92:2b:f8:1c:ec:27:12:b0:e8:85:35:11:bf:25:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6F:6C:B0:5D:C4:2D:90:4D:57:F9:3D:D0:7F:E1:42:02:43:C8:D2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B2BC4E804C0B11EB8DA2FD26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:47:6e:57:44:29:95:fd:4b:60:f2:df:b1:c8:7a:cf:8d:43:
         b3:be:bd:5f:c6:57:77:b0:86:40:aa:02:a4:84:eb:b8:4a:c8:
         bb:38:d4:ea:86:ec:a6:16:7f:a4:7e:55:a2:46:31:11:80:8e:
         2b:7f:73:e0:77:71:37:19:34:5c:e5:84:d5:9c:7b:60:60:dc:
         eb:fa:ad:12:21:75:98:44:d1:c1:ca:e5:95:7d:96:1e:ae:17:
         1b:10:d5:e9:e5:e6:6d:73:a5:45:3c:5a:37:69:67:ee:c8:57:
         59:dd:89:39:03:35:52:16:e7:35:6f:16:ed:25:c7:f0:b6:2f:
         1f:82:35:88:58:54:94:2a:ca:ea:02:54:0b:57:fd:21:63:29:
         e8:1f:54:b1:44:1c:93:8a:a0:15:4a:32:d6:48:b5:f5:33:de:
         92:b6:91:df:5c:0d:36:cf:fe:3f:a4:a8:9c:05:b1:26:ff:1e:
         24:12:9b:7b:c3:30:f5:8c:80:a7:14:b1:91:8c:74:bd:6b:74:
         be:70:51:a6:ec:d8:29:77:f8:78:33:30:62:75:10:15:d6:9d:
         f6:3e:5b:94:c7:90:e8:db:9f:de:d8:1c:08:8b:0c:17:26:4c:
         b9:e7:73:26:45:af:cb:ca:0c:9c:04:c0:b8:5b:72:25:ea:d6:
         53:1f:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:50 2026 by rpki-client