Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa
File:                     B6042062D89E11EABECC1778C4F9AE02.roa (raw, json)
Hash identifier:          M/CgnI92QYF5XmNkw3UVOjaJm/hyS2oFSmSjRdpZLw4=
Subject key identifier:   D6:FE:F5:F8:40:40:94:E4:A0:43:5C:E5:62:4A:B3:1E:78:BD:63:07
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F14A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:58:12 +0000
ROA not before:           Mon 06 Jul 2026 16:58:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137133
IP address blocks:        103.110.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61770 (0xf14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:58:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdea4-f7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:e4:38:da:22:5b:9e:60:8b:73:ff:8b:9b:
                    79:2a:e2:38:96:65:e0:22:4a:43:84:1f:59:fd:e4:
                    36:cb:fc:d3:92:a5:5b:94:a7:13:69:1f:d0:48:db:
                    f8:0a:8a:ad:1c:0e:22:02:1d:29:bd:54:5a:f4:99:
                    8d:01:89:f0:93:62:03:7e:a3:f2:ed:5c:41:8e:e7:
                    04:65:07:80:42:31:52:ee:95:26:78:30:17:b4:69:
                    78:66:f5:c7:b7:25:3f:24:b0:0a:42:2d:0f:6b:51:
                    37:08:4b:50:3a:fa:6c:af:59:33:72:39:80:30:99:
                    6f:5e:f2:18:c5:4a:ce:38:56:45:7c:83:c3:92:80:
                    0a:46:ca:69:91:48:69:cc:cd:9b:fd:cf:9b:05:8c:
                    3e:f2:22:21:f6:e7:ba:7b:f5:bb:9b:29:05:66:d8:
                    76:0a:8d:7f:98:09:d1:c9:f5:98:2b:5a:e9:32:75:
                    78:18:5a:75:1d:d8:42:19:3f:7a:56:76:4b:54:df:
                    27:a6:59:bd:b2:f9:e8:4b:36:1f:93:96:5e:41:63:
                    41:4d:fa:00:01:f6:39:62:87:8d:15:66:75:ea:02:
                    a1:d4:1b:89:52:c7:31:d0:e7:e6:ad:71:14:ba:7c:
                    02:29:20:b9:04:e3:4a:9c:ec:e3:c2:f3:b8:42:e3:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FE:F5:F8:40:40:94:E4:A0:43:5C:E5:62:4A:B3:1E:78:BD:63:07
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:62:65:39:e7:af:7f:30:e8:b8:80:2b:66:4e:4b:16:bd:
         cc:cc:f0:06:c5:98:5e:17:24:b0:0d:c8:cb:d9:ab:73:c4:02:
         7c:00:75:7e:12:ce:b2:bc:06:c1:45:2b:66:57:9f:ac:f7:e7:
         e1:6a:33:98:a6:5b:fc:05:74:05:90:69:92:24:3b:15:b7:8a:
         a4:9d:ba:e0:c7:cf:9d:fe:84:ce:49:09:3e:55:38:cb:82:a3:
         b0:34:6b:59:16:a2:0d:b9:41:7b:7c:d4:c8:58:92:62:08:55:
         f5:bd:ab:03:77:70:96:f9:e8:2b:15:08:fd:3c:fb:9e:da:4b:
         e8:97:b7:5c:25:dd:3d:0e:07:b8:c9:dd:ae:0c:10:bd:f1:1c:
         a6:05:81:98:58:0a:1c:93:6a:ce:49:00:95:66:d4:19:41:d8:
         37:f8:a2:fb:a6:7b:fa:d1:84:6d:a0:a3:84:24:37:71:9d:22:
         06:3c:ae:9e:b0:d5:c6:e5:a7:f9:5b:79:1d:2d:6e:eb:95:fd:
         ba:71:a2:55:21:89:77:6a:8b:5e:fd:4c:a4:29:ec:7c:cc:48:
         28:9e:e3:b2:4c:da:75:85:63:f3:a3:87:66:c3:44:93:41:c3:
         92:02:f0:77:b5:fc:92:d0:8d:a0:ac:ae:b7:c9:aa:3d:e3:06:
         1d:13:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:52 2026 by rpki-client