Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7FC13D2A03211F089B75D1DC4F9AE02.roa
File:                     B7FC13D2A03211F089B75D1DC4F9AE02.roa (raw, json)
Hash identifier:          NPoePuyQrY8Np+CP8+eKBYFQX6y8Lv1YdnZW4yEYCnY=
Subject key identifier:   25:E8:09:51:0E:BE:9A:CA:89:10:F4:77:F9:7F:D5:20:A3:51:73:B5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEDC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7FC13D2A03211F089B75D1DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:38:00 +0000
ROA not before:           Mon 06 Jul 2026 16:38:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133974
IP address blocks:        203.31.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61148 (0xeedc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:38:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd9e8-f27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:52:f9:75:6d:de:0e:05:80:90:c4:cd:c3:
                    78:24:7e:16:bd:3b:7d:09:d3:01:bd:5f:71:98:d4:
                    db:4b:2d:e3:f4:73:30:85:4f:3e:05:5a:c7:e7:2a:
                    dd:9a:14:2d:71:66:19:aa:f0:9d:6d:97:12:a7:df:
                    70:79:05:09:d8:9b:ee:09:c5:b7:f9:ed:aa:46:17:
                    63:44:fc:cc:d3:b9:35:ef:9a:e5:81:98:89:32:9d:
                    aa:05:ec:ab:5d:08:2e:0c:b0:33:09:35:1f:c8:dd:
                    1f:09:b6:e2:68:c7:19:59:eb:aa:33:ad:a1:16:75:
                    60:9e:4b:b9:75:e3:12:4b:36:40:4f:81:9f:4b:ed:
                    a0:83:2b:a9:7b:06:64:dc:25:0a:64:ee:72:01:dd:
                    a0:9f:7a:15:b4:dc:f6:e7:9a:8a:92:58:39:e8:20:
                    37:0d:c6:1d:37:d3:2d:30:a2:db:df:30:f9:cb:bf:
                    b3:27:ca:d1:ed:ec:28:c8:48:48:c1:13:61:c9:23:
                    5c:be:17:ee:21:e4:cf:69:a1:97:ea:91:7a:8e:35:
                    71:97:91:fb:ff:12:99:fb:7c:e9:89:7f:72:ed:43:
                    f9:8d:80:63:48:97:d1:37:27:da:78:01:c6:f6:a4:
                    42:34:8e:89:ce:12:a3:f4:bf:83:d2:7c:22:73:a0:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:09:51:0E:BE:9A:CA:89:10:F4:77:F9:7F:D5:20:A3:51:73:B5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7FC13D2A03211F089B75D1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:76:f0:4b:e4:04:6d:54:1e:90:0b:bf:ab:02:6a:27:ba:
         3a:0f:ea:e3:ee:21:0e:a8:80:e5:fc:7b:01:3d:66:8d:8e:60:
         73:6b:9a:0a:dc:3e:94:fc:92:f0:a4:2b:53:d5:1f:63:db:f4:
         0b:38:5d:b1:b3:8e:04:5f:4b:f8:4e:41:e9:ef:19:09:29:b2:
         6f:a3:ea:61:eb:0e:af:93:c3:3a:69:25:54:61:93:38:d3:77:
         a5:a8:78:f4:6b:78:58:6e:08:9a:71:ef:e6:cb:54:81:15:ea:
         75:b5:15:7f:4f:0e:04:73:61:6c:45:35:f1:9f:d5:6e:30:f0:
         41:e6:52:f5:48:6b:ba:d4:81:c0:83:f4:1d:cc:56:a7:76:aa:
         9f:a2:96:24:a7:24:46:38:8c:28:8b:56:3c:8a:2c:ae:60:11:
         13:8c:ad:ff:6d:55:64:c0:9a:ba:03:9e:2c:4e:fe:76:aa:c9:
         b6:bf:0b:1b:88:c6:1d:3f:5d:d1:3d:fd:05:43:11:0b:1c:de:
         e0:ab:08:53:2e:83:3a:f8:2f:e4:cd:c2:53:78:11:04:80:fc:
         1f:8b:b1:3b:c9:69:a9:e6:4d:96:07:86:d5:8e:cc:33:0e:fc:
         cb:65:99:99:07:96:3f:a6:25:cc:b1:00:19:86:14:31:a3:3a:
         d1:30:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:48 2026 by rpki-client