Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C135D3000A1511ECB091271DC4F9AE02.roa
File:                     C135D3000A1511ECB091271DC4F9AE02.roa (raw, json)
Hash identifier:          ZaMT/Lnhhpf8nPJIQAPPlLkGhVHkP40tyByZNW5lWV0=
Subject key identifier:   E3:EA:67:A8:D1:C9:1C:7F:E9:94:97:A2:7D:FF:AB:FF:7C:BD:C5:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F426
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C135D3000A1511ECB091271DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:22:49 +0000
ROA not before:           Mon 06 Jul 2026 17:22:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146929
IP address blocks:        103.172.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62502 (0xf426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:22:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be469-a655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:a4:7f:32:f0:74:d5:24:2f:5e:cd:1a:24:
                    e6:b1:a5:8d:c0:bf:05:4f:97:a6:ab:1d:a9:40:7e:
                    d3:2f:fd:3a:9e:c2:d7:1d:52:64:ef:5c:a3:b5:81:
                    07:d3:ad:37:dd:9e:4b:6f:c9:b5:0c:b7:2f:2a:b9:
                    63:27:2c:ff:8e:aa:30:f2:6b:8a:bf:d2:c7:0b:2c:
                    12:52:1a:a4:6f:7f:44:98:38:bd:42:42:03:d8:0f:
                    be:f1:5b:b8:f5:25:0f:9e:5d:ca:8d:8a:92:f7:a2:
                    8a:c0:70:44:b3:5a:33:23:53:c3:41:82:db:fa:0d:
                    b8:82:00:bd:2c:3a:e3:26:67:d9:0b:54:46:09:8f:
                    95:93:c8:e7:7c:c9:5c:69:9d:b1:ef:9c:6f:24:0b:
                    3d:67:27:11:8f:99:8d:47:a7:fb:54:50:57:bc:3e:
                    6c:ca:68:47:46:02:9f:35:56:f8:30:fa:e9:f9:14:
                    69:b2:65:4b:1a:b8:bc:b6:61:82:d6:ea:97:30:ef:
                    d1:32:5b:8d:a4:70:67:c3:aa:1c:a4:9f:04:3b:49:
                    38:6b:51:10:8b:69:ce:be:47:c6:1a:cc:66:37:b5:
                    6a:60:12:c7:73:fe:bf:71:d0:39:01:93:f6:b0:7e:
                    3b:d9:71:7e:7f:9b:a1:eb:1a:bb:59:fc:00:7b:c8:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:67:A8:D1:C9:1C:7F:E9:94:97:A2:7D:FF:AB:FF:7C:BD:C5:4C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C135D3000A1511ECB091271DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:39:95:ca:42:6a:91:29:79:6d:39:1e:21:0f:34:ee:ec:
         ae:bb:4a:66:e6:6e:e0:11:2d:b7:6d:06:2a:90:e7:b7:e6:9c:
         ca:76:a6:6e:ee:f1:2f:d1:3e:81:c1:a1:36:cc:b4:d0:f9:3f:
         e7:1c:7d:9c:40:3d:07:7b:89:5e:31:22:97:7d:da:c7:01:a2:
         9f:91:f8:16:13:cc:3e:a7:ff:92:e8:63:3e:22:c9:12:ea:2a:
         ab:6d:e7:a9:f9:da:71:69:00:86:c2:20:09:26:6c:da:0f:34:
         24:0e:29:a8:fa:8e:f3:12:63:59:16:6c:7e:4f:39:f2:c3:b1:
         72:19:2b:47:5a:8b:c0:64:59:93:fb:ea:96:bb:d8:c2:2f:7d:
         7e:9d:3e:61:81:ca:aa:0b:81:6d:83:b2:59:08:f2:2a:f8:e8:
         6c:3e:6f:eb:06:fc:74:28:58:03:69:b0:84:ed:83:94:73:29:
         bc:fe:b1:ae:10:d0:33:6a:22:47:ed:1c:7b:33:4e:b0:91:69:
         b1:4c:12:9d:51:2b:fd:a9:71:55:7b:7b:7b:77:c4:79:f1:dc:
         47:9c:ce:25:74:4f:a7:a1:50:ff:a8:ab:9c:ee:f4:79:14:dd:
         46:c3:fd:6f:76:0a:22:e9:e9:53:87:3e:7f:8f:ab:f8:9b:ed:
         f2:9a:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:09 2026 by rpki-client