Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B976E1BA2D0211EE9ADD331CC4F9AE02.roa
File:                     B976E1BA2D0211EE9ADD331CC4F9AE02.roa (raw, json)
Hash identifier:          E3tkHlz0tRv0f93MdiDtzWq8WGqzbnfIVFo8pAEA3Qc=
Subject key identifier:   CE:F6:7D:2A:97:4D:97:03:F4:36:78:42:D0:8C:1F:1C:0C:1F:D5:17
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F73B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B976E1BA2D0211EE9ADD331CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:48:57 +0000
ROA not before:           Mon 06 Jul 2026 17:48:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18718
IP address blocks:        103.244.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63291 (0xf73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:48:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea89-a6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:5a:33:e3:c0:cb:43:74:a8:74:45:f3:db:
                    57:10:bf:b5:cb:77:e8:74:b8:a2:23:17:d2:a9:55:
                    b4:5a:e0:0f:75:a7:85:1c:06:4f:10:ee:bf:f2:8b:
                    38:75:02:f3:47:b6:82:ce:3c:d5:39:47:d9:f5:d2:
                    7d:bd:87:54:0d:cc:f9:c7:bb:1a:0e:8a:d8:66:5f:
                    3a:71:4a:03:69:d7:f8:97:f9:01:71:6e:60:85:ba:
                    07:d5:c6:6d:d6:a2:b4:35:53:b7:90:db:e3:74:bf:
                    29:52:e3:fe:d6:f7:79:5b:7d:2d:2a:54:7c:63:e8:
                    93:0f:76:f5:d3:5b:d3:97:33:e0:5c:47:db:e2:6e:
                    6a:16:c6:33:42:b2:fe:c2:38:c9:d9:89:bc:da:dd:
                    1c:f4:bb:52:5b:cc:61:98:b7:4f:45:61:df:9b:46:
                    7b:a5:b9:c5:9a:92:1f:d1:5a:47:ec:cc:b4:f5:ee:
                    89:88:f6:64:34:fb:1b:8b:eb:8f:6c:a5:bf:ae:39:
                    f0:80:5b:45:64:41:38:c4:05:dc:6a:ca:45:8a:e0:
                    ce:7c:35:86:cd:16:bb:c9:24:39:43:ef:47:1a:93:
                    b1:31:ed:2a:ca:9a:47:b2:78:a8:98:9f:47:ee:9e:
                    4d:69:b2:ed:ee:9f:77:3b:67:ca:0e:64:9a:76:6e:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:7D:2A:97:4D:97:03:F4:36:78:42:D0:8C:1F:1C:0C:1F:D5:17
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B976E1BA2D0211EE9ADD331CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:17:32:03:ae:f1:3c:08:14:be:4a:b0:f2:37:c6:ab:6f:
         88:94:aa:76:50:17:d3:11:dd:67:1e:0e:40:b6:d5:5f:85:8d:
         b8:a7:e1:0d:dd:1f:69:1d:83:06:14:54:65:6b:7c:1b:0d:4a:
         ca:19:e2:61:78:39:43:8c:f3:ca:03:6a:a2:49:51:3c:80:8a:
         16:db:49:4f:49:b4:38:97:cb:af:cc:68:50:ac:71:6b:0a:18:
         b9:e2:08:af:45:44:f4:29:1f:53:a2:f4:ae:77:df:e4:63:d4:
         e0:e6:ed:60:cb:af:1e:2c:9a:3d:9a:0b:f0:b3:dd:1e:1f:bf:
         2d:ad:77:33:74:f3:5a:30:c9:3f:e9:3e:63:18:e5:23:2a:b7:
         17:6c:6a:12:1c:47:46:a8:51:67:af:1f:11:23:46:21:53:90:
         13:3e:a1:c2:86:d9:6a:19:ad:4f:6a:1c:cb:a0:f0:8f:ec:8a:
         b0:4d:c5:ed:87:ad:18:f0:c5:d1:fe:1c:13:24:4a:73:db:e6:
         ed:b1:08:a5:7f:18:af:bc:bd:f9:9d:c0:26:66:fa:0b:df:e7:
         eb:6d:82:95:e9:fe:f7:0c:98:7c:6a:b4:4b:9f:f7:0e:72:59:
         b1:08:5f:ad:39:82:86:66:bf:8a:6a:5b:96:c9:31:50:52:5c:
         4f:92:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:51 2026 by rpki-client