Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B840C8E2561511EEA58CC57FC4F9AE02.roa
File:                     B840C8E2561511EEA58CC57FC4F9AE02.roa (raw, json)
Hash identifier:          DxS518wwYRdgKbVmC58FOnfHyYyjCWS5YMJToWwwKTE=
Subject key identifier:   DC:CC:B8:71:D3:AB:2A:62:6E:E4:0E:95:AC:06:54:21:92:B5:27:52
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F635
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B840C8E2561511EEA58CC57FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:39:59 +0000
ROA not before:           Mon 06 Jul 2026 17:39:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151762
IP address blocks:        103.155.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63029 (0xf635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:39:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be86f-709a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:4e:38:0c:18:61:ce:f2:d0:81:97:91:7e:
                    b6:1e:c7:0d:b9:7e:ce:60:1c:b2:16:1b:75:9e:49:
                    74:70:f8:a0:f1:27:ad:1c:ef:14:00:99:20:4a:96:
                    5e:f7:99:51:6e:6f:50:8d:60:2d:c3:33:dc:f6:16:
                    0f:04:0c:7e:e1:1b:7f:89:fa:8b:aa:cb:f4:4e:11:
                    78:09:32:44:20:05:9c:a2:27:e8:d9:7a:db:59:71:
                    de:fa:bb:5f:2d:65:37:fa:4a:96:c3:26:86:a1:73:
                    c6:93:16:76:6d:d0:56:07:96:89:e3:03:c4:86:aa:
                    8c:4d:b0:50:d2:5d:88:4a:f1:01:ea:a6:40:1f:7f:
                    63:2e:df:a1:27:26:d1:70:83:af:0c:9a:00:78:4a:
                    c8:73:ab:2f:aa:bc:1c:39:97:fe:c4:26:53:85:39:
                    5b:d3:5c:be:43:b3:1b:3c:3f:f6:cd:bf:c8:fa:08:
                    98:3e:6b:33:cf:af:86:92:7b:4b:a2:9e:92:e9:c5:
                    14:45:7c:66:92:dc:59:05:ea:77:cb:f0:d9:67:b3:
                    6f:1a:a0:dd:de:0a:71:53:73:b1:ae:c2:94:26:3a:
                    85:dd:1d:3a:37:61:89:c5:cb:a4:3d:dc:cc:cd:54:
                    71:87:a1:8a:31:f4:7a:99:37:79:7e:5e:3b:29:b6:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CC:B8:71:D3:AB:2A:62:6E:E4:0E:95:AC:06:54:21:92:B5:27:52
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B840C8E2561511EEA58CC57FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:68:2a:3c:3d:ac:92:08:f4:16:ab:d4:21:04:d4:18:6a:
         40:b8:15:fa:76:18:0e:a3:c1:93:90:08:58:35:a5:71:8c:1c:
         d0:dd:ac:37:d5:43:ff:a4:29:af:fa:d5:f0:17:d7:d2:d8:09:
         eb:35:43:28:30:0a:4a:0e:e8:ec:6f:7f:2f:ed:ae:92:fa:77:
         a9:e3:b2:db:c9:14:c7:73:d7:ff:ca:b0:ac:6c:95:84:2a:6d:
         04:f0:a2:f6:a8:5e:35:a5:a4:e0:58:4b:aa:31:d6:8f:06:25:
         a2:7d:ac:8c:ab:3e:8e:ef:f1:9f:13:0b:a6:63:bd:e6:31:71:
         89:ab:da:b3:29:84:0b:5d:f6:71:32:88:f5:91:0b:71:52:87:
         65:99:2b:3c:26:05:ca:96:22:02:ea:23:e8:d4:94:f8:76:c3:
         44:d9:6a:85:af:73:c3:4e:ba:7d:67:cf:12:37:d6:85:41:32:
         7d:84:fd:10:36:2b:0c:b0:62:ef:1e:71:36:39:0f:f6:93:38:
         14:5c:3d:3a:8a:b3:bc:a1:dd:e8:1a:7f:22:01:82:be:78:24:
         03:3b:74:fa:aa:51:22:b4:c5:29:4a:4a:4a:71:15:5b:fe:e4:
         5d:de:3a:25:38:f3:95:a1:1b:0c:3a:61:0a:95:b4:e2:ee:e9:
         30:9b:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:56 2026 by rpki-client