Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa
File:                     B70EEB82049411F08DF3FC11C4F9AE02.roa (raw, json)
Hash identifier:          ij6KXs0zA64IJ1QLl2iIf803OhWzgmfzqTycCjwUzQI=
Subject key identifier:   5A:99:97:9C:65:DF:45:03:E7:BF:E9:5D:81:82:21:5F:1F:56:B4:0D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EDE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:29:45 +0000
ROA not before:           Mon 06 Jul 2026 16:29:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132208
IP address blocks:        103.7.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60900 (0xede4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:29:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd7f9-155b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:a4:3f:31:9f:65:ff:84:32:58:b4:16:3a:
                    df:66:55:3b:d7:62:bb:f5:a1:7d:4b:71:50:d6:5f:
                    ab:d3:de:e9:7d:a0:4e:20:fa:3a:4a:aa:ed:3a:60:
                    17:6a:ee:c8:90:82:76:c7:e7:5b:1f:6a:45:63:57:
                    bb:fa:a0:0c:02:7a:4b:dd:5d:c2:24:47:dd:15:bf:
                    85:60:8a:ac:67:52:db:af:df:8a:b1:81:aa:77:18:
                    c7:e5:33:5b:77:35:13:bb:65:1a:09:b0:57:7d:5d:
                    60:8c:c4:73:45:8d:cd:2c:81:81:1b:76:c5:2d:01:
                    e5:21:b2:68:a5:64:75:62:40:54:6e:10:4d:fa:7d:
                    c2:c8:e7:5e:9c:54:6d:02:b4:34:aa:0a:54:eb:a8:
                    36:21:d2:d5:cf:ba:80:87:e7:ac:67:c2:75:0b:dd:
                    6a:e6:97:e9:c2:4c:cc:a2:00:b4:87:db:47:0d:f3:
                    9b:49:da:62:2f:98:24:bf:ea:23:06:44:78:22:4a:
                    52:3f:12:06:83:89:85:c5:d6:ca:84:95:fa:06:df:
                    ca:f2:f3:a6:d0:a8:c5:ad:f1:ca:59:99:b9:b3:f8:
                    84:d8:b7:c3:3d:0e:01:0d:58:8f:20:6f:f9:8e:b6:
                    4e:92:ca:e3:51:ba:b1:e2:b8:40:fb:85:5a:c5:b9:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:99:97:9C:65:DF:45:03:E7:BF:E9:5D:81:82:21:5F:1F:56:B4:0D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:81:de:db:91:ff:91:74:63:b7:34:9e:d1:1e:5a:05:e7:83:
         52:a1:43:ef:56:b7:12:6c:db:63:48:35:67:27:7b:25:f3:d8:
         d4:39:cb:33:d9:02:49:0c:14:25:e6:02:9f:28:1c:62:da:36:
         04:e2:85:12:aa:b4:80:cc:71:7b:1e:5e:2c:b5:1d:9c:89:b5:
         9a:b7:f6:84:f4:39:49:01:c3:0b:fc:a5:92:3b:03:02:84:ae:
         c8:40:c3:6e:61:d7:a9:bf:f2:cc:de:9b:27:ae:12:a0:bd:2b:
         fb:1c:04:0a:35:71:76:31:09:aa:63:58:a4:72:1e:12:63:51:
         a1:a9:4e:85:89:1a:74:f5:8e:bc:a3:3b:3f:00:d0:d4:16:45:
         f9:7a:aa:ec:77:e8:d1:c7:ab:42:12:78:8b:3a:5b:a4:e6:21:
         b4:cd:13:7e:fb:cf:a3:28:ec:ec:0e:db:e6:2e:ac:6d:45:67:
         85:66:c5:e0:14:39:72:42:67:6a:e6:bd:d1:b8:cb:c8:1f:f8:
         01:cd:62:03:7d:1f:b3:f1:0b:44:8d:2f:62:f2:a0:d8:48:52:
         17:9e:8d:32:a2:1f:90:dd:83:c1:1e:dd:53:ba:0e:52:2a:64:
         ca:dc:28:0a:2a:ce:28:d6:df:13:5b:3e:38:86:fc:5a:9e:23:
         90:4f:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:58 2026 by rpki-client