Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa
File:                     BA6244022FDE11EC90799967C4F9AE02.roa (raw, json)
Hash identifier:          MGDgaN3UaROxqlEvEv24DJTT8caPXB6XO5l7oM8UaW8=
Subject key identifier:   C8:F3:C4:CC:C9:81:7D:34:06:A2:A2:57:77:E7:09:3E:DE:86:1C:2C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE51
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:33:28 +0000
ROA not before:           Mon 06 Jul 2026 16:33:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133010
IP address blocks:        103.251.228.0/23 maxlen: 24
                          103.251.230.0/23 maxlen: 24
                          103.253.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61009 (0xee51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:33:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8d8-906d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:85:b7:5a:c3:60:72:86:5b:e2:f6:a1:07:
                    9d:14:8b:7e:f7:9a:e2:f8:b8:7b:0b:72:8f:99:36:
                    33:3d:d1:fd:de:be:60:52:61:c8:03:a6:48:5c:43:
                    41:43:9d:f5:50:34:7a:83:56:78:b0:cf:cc:93:57:
                    cb:eb:20:41:1f:f5:e7:31:11:e5:05:07:c4:a1:c7:
                    a0:a4:fb:16:f2:51:c5:b0:28:c3:f2:01:f6:6a:8b:
                    aa:fd:d8:9a:e5:17:bd:24:40:ff:8b:53:df:2f:45:
                    fc:c0:cd:61:ab:97:b7:13:bd:1b:e1:1e:91:57:ee:
                    3e:8a:6d:cd:dd:3b:95:6e:d5:bd:df:16:88:50:1c:
                    e2:8d:41:c9:28:ca:1a:73:d6:f7:2f:33:e9:b3:4a:
                    f0:42:b7:9a:a9:a8:59:58:c3:4f:16:83:0d:7c:08:
                    86:5a:fb:d9:2c:fb:b5:64:43:28:07:de:9f:95:4c:
                    1c:97:9a:44:e8:c4:58:77:0e:31:38:d5:ea:62:1a:
                    81:08:b7:bf:bc:ee:5d:1a:c8:ac:03:c4:7e:68:68:
                    34:b3:f0:d8:9c:7e:8b:76:1f:8c:a4:92:a8:31:78:
                    f0:1b:bf:ef:41:a1:b4:55:ee:d9:77:b1:07:3c:09:
                    52:dc:5c:fb:69:4e:c6:b8:f4:c3:ac:0e:a5:da:67:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:C4:CC:C9:81:7D:34:06:A2:A2:57:77:E7:09:3E:DE:86:1C:2C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.228.0/22
                  103.253.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:cb:34:93:86:8f:d1:2c:11:71:43:6d:8e:a8:56:a4:f6:
         8f:1c:0f:1e:43:02:56:fc:84:70:29:b4:01:a9:76:a0:36:13:
         b5:92:1e:9b:41:f5:64:0e:de:5f:be:73:13:70:68:42:47:89:
         c8:4b:b5:2f:e5:46:4e:52:a6:7b:5b:56:6f:46:b2:ad:43:00:
         af:86:02:df:52:2b:01:05:eb:2c:d9:2e:e6:1c:fc:7f:0f:c9:
         66:39:96:21:c5:ca:c0:bb:f5:e6:4b:16:63:19:35:64:7a:c7:
         d7:e9:22:f6:99:58:50:5e:d8:b6:04:6e:6c:04:99:2e:6c:f6:
         c5:a6:a0:c3:b3:63:31:10:e7:7d:16:8a:12:3d:3b:09:9b:6d:
         9e:ba:89:2f:f7:36:70:1b:13:a6:23:3e:fa:8d:86:48:3f:63:
         ee:ee:1b:fd:69:89:3c:b7:df:ac:b2:7d:a3:64:6f:04:bb:9e:
         22:d4:ea:46:61:28:27:c5:00:2e:2c:6d:4d:c7:5c:b9:83:dc:
         53:09:c1:88:4f:2e:89:e4:b8:42:d9:3d:9e:33:98:c7:fb:3b:
         52:e0:c2:bc:4c:1a:eb:3d:bc:3b:36:2c:d3:51:87:58:a4:e4:
         21:cd:2a:cc:d9:12:54:bf:88:84:94:ce:df:cd:b3:26:07:32:
         5c:a4:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:11 2026 by rpki-client