Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa
File:                     B8645BF291A011EDA6B67334C4F9AE02.roa (raw, json)
Hash identifier:          Di29NzD4HWhOA+QfKXjzfBOSo6Q6bk7ukkTKjam073k=
Subject key identifier:   E3:B6:C3:FB:0D:ED:32:3F:35:C6:8F:7F:C6:AB:A8:B5:59:BB:FE:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F566
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:33:19 +0000
ROA not before:           Mon 06 Jul 2026 17:33:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150562
IP address blocks:        103.85.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62822 (0xf566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:33:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be6df-211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:b5:18:74:fa:e2:91:32:d2:ea:58:ee:a7:
                    fe:20:5c:e4:aa:52:c9:91:2e:ae:9b:b7:9c:61:03:
                    a3:21:e1:8f:7f:b0:5e:aa:23:4d:41:dc:ab:68:9e:
                    d2:a1:88:1e:7f:29:33:79:66:23:7b:b4:46:99:4d:
                    3f:8a:09:d0:95:4a:c9:97:af:ca:e3:12:56:f6:c8:
                    6f:43:32:26:91:00:42:2d:8d:a4:93:9d:a6:52:a4:
                    36:15:f8:ac:7a:34:e7:84:6e:7e:83:8d:9c:0b:e2:
                    b4:e3:df:3b:f9:ad:c6:7d:4b:21:88:7f:d7:e1:c9:
                    2d:93:0b:4a:08:f0:43:ab:00:99:3b:b9:96:89:2c:
                    c0:f1:60:40:fc:e6:d5:e3:fa:2b:53:f6:24:c0:48:
                    d2:61:b3:60:96:25:bc:cf:15:14:cb:16:c4:5c:68:
                    a4:08:47:fa:4b:e2:cb:28:c3:c6:f9:ab:e5:45:c3:
                    cf:e4:06:e1:0a:11:03:1a:ea:fd:4d:15:b3:1c:d6:
                    c0:b2:4a:81:20:9d:47:39:ee:6e:df:c4:52:6c:c3:
                    26:6d:fa:a6:ba:88:43:79:0f:76:5d:30:94:24:c7:
                    9e:6f:fb:68:9b:ac:5e:bd:b3:b5:14:59:dc:de:2b:
                    80:09:b1:1b:85:0d:f5:b0:ff:84:44:65:b2:79:d9:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:C3:FB:0D:ED:32:3F:35:C6:8F:7F:C6:AB:A8:B5:59:BB:FE:1B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:4f:0e:7f:39:81:0e:0b:0e:c1:7f:0d:26:ef:a1:17:f8:
         ff:21:cb:4b:35:56:05:40:39:8e:79:06:91:bc:6f:59:fe:41:
         b7:7f:89:f0:1f:91:ef:5d:5a:3a:c7:2f:33:66:dd:56:48:67:
         0b:92:29:61:02:32:6a:75:fe:56:71:b9:20:03:49:c6:29:78:
         ac:e2:cc:76:97:29:28:82:2b:9d:71:69:16:b7:6e:d9:5b:bf:
         c9:2c:d8:3a:ce:3a:c5:a5:29:04:9d:1d:13:41:93:90:c4:9c:
         c6:ba:6a:25:ab:19:25:02:a4:37:1f:a0:df:0e:d5:e9:77:82:
         8f:b6:de:1c:d6:14:96:a9:98:dd:e3:b0:62:01:31:42:31:d3:
         7c:17:87:be:53:85:42:67:e1:3a:97:8f:9b:46:34:95:fa:dc:
         19:e9:82:15:b9:db:d1:3a:05:8f:15:2a:38:a1:37:21:a1:c0:
         89:fd:37:55:68:d7:4f:b0:4f:6e:12:2a:cd:4b:b6:11:0d:34:
         c9:81:6a:26:13:c2:dc:10:35:2d:5f:02:97:71:c0:0d:b7:fe:
         47:2b:7c:19:b4:5a:29:5a:36:a4:db:b3:d2:df:ac:78:fd:ee:
         32:ff:79:06:5f:7c:c9:4d:78:64:d1:39:6b:4d:80:14:d4:e8:
         67:a1:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:43 2026 by rpki-client