Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa
File:                     B5D3C33AB0F211EC8875227FC4F9AE02.roa (raw, json)
Hash identifier:          pBsAY2k2PHjOe221d5rglKw/OyXoMeJVI7sv4GB1KEA=
Subject key identifier:   5A:48:1D:8F:C0:AC:FF:7E:A4:2F:A1:96:07:E2:F3:2F:24:3D:C8:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFB0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:44:54 +0000
ROA not before:           Mon 06 Jul 2026 16:44:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135173
IP address blocks:        103.215.208.0/24 maxlen: 24
                          103.215.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61360 (0xefb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:44:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb85-e41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:76:0d:90:c0:e4:bc:16:97:0d:36:68:24:
                    f2:9a:ec:65:74:dc:9f:c9:78:4f:5a:78:25:a3:de:
                    66:6f:33:43:94:7a:44:bf:08:e8:80:1c:ad:8b:28:
                    6d:54:05:40:31:9d:0d:74:13:7f:f1:ed:c4:d4:ba:
                    43:07:0a:51:bc:f8:b8:ec:2b:ac:94:d4:16:48:33:
                    82:1e:aa:99:63:ab:fb:e5:ae:41:c0:2c:54:c6:7f:
                    cf:6a:65:ed:32:1a:31:11:1d:44:db:1d:b5:83:6e:
                    71:46:ef:2a:96:ed:a4:bf:77:ab:e8:d8:b3:69:22:
                    aa:bf:00:3b:31:33:04:97:28:e8:ee:89:f6:14:93:
                    46:08:c6:df:17:75:3c:fe:32:b0:30:2e:10:ef:cb:
                    30:ea:16:63:88:f9:bf:aa:75:8f:c4:a7:36:55:ca:
                    1c:06:cd:42:5e:b8:b0:5a:3e:4c:c2:a8:50:cd:99:
                    b4:fc:77:85:ee:83:b7:e4:2b:e1:bc:e6:aa:c9:b7:
                    49:f1:bc:81:b6:d8:5e:8d:72:cb:eb:fc:3d:29:65:
                    7d:b3:40:4e:97:5b:e3:bf:4d:26:ef:ce:88:dd:fb:
                    7d:bd:e1:14:37:ac:ec:8b:8f:44:04:f3:be:1d:ce:
                    a0:1f:37:97:19:d5:87:8a:ec:bc:29:d7:05:bd:55:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:1D:8F:C0:AC:FF:7E:A4:2F:A1:96:07:E2:F3:2F:24:3D:C8:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:22:05:8b:56:20:d2:93:c2:e8:94:f1:d1:1c:fa:9b:a0:6e:
         5d:96:99:4e:39:99:13:81:f4:8d:62:3c:3b:e8:ee:d0:ee:17:
         2e:18:f0:23:49:80:9c:f2:2d:4e:0c:71:dd:ea:af:3f:d4:b4:
         c7:c8:1e:4a:3e:b0:b4:96:24:01:a9:29:b4:e5:67:fd:46:8d:
         8a:39:b1:9a:bc:97:47:65:5e:c0:ac:95:3b:bb:26:6c:3a:56:
         6b:f7:f9:1d:67:ef:62:5c:29:e9:09:b9:22:ff:c5:bc:ec:07:
         6f:40:b6:e4:5d:d3:e3:8b:b8:70:6f:8b:32:84:bd:66:d5:1a:
         45:93:dc:14:ca:99:bf:89:40:20:b6:61:e5:6b:1a:06:ca:fb:
         3c:f1:ef:b6:c0:f6:92:39:66:59:98:4c:9b:f6:82:bb:6d:a2:
         b9:5f:32:86:50:b6:cf:b4:5f:93:de:d2:57:e4:58:13:e5:39:
         35:44:66:02:41:73:45:97:2f:90:51:b3:a4:c9:a5:16:70:c9:
         f7:2e:48:ee:51:6b:78:e5:64:d1:03:47:38:6b:30:88:44:89:
         ff:64:ab:61:e2:75:37:78:d6:9d:dc:fd:01:67:5f:a0:8f:9a:
         63:5c:b3:fb:bd:e5:db:20:07:31:87:14:2d:d2:6c:5f:c7:3a:
         8b:84:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:44 2026 by rpki-client