Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29C071039F511EFAAAFC240C4F9AE02.roa
File:                     C29C071039F511EFAAAFC240C4F9AE02.roa (raw, json)
Hash identifier:          DmSzUDG6nNaqo2nd1lfxO62FTTStrRyJjJz3VeCmglU=
Subject key identifier:   B7:5B:78:ED:6A:59:85:DB:1B:67:CC:D5:44:56:3E:21:71:4F:0A:0F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFC6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29C071039F511EFAAAFC240C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:45:37 +0000
ROA not before:           Mon 06 Jul 2026 16:45:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135209
IP address blocks:        103.213.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61382 (0xefc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:45:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdbb1-478a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:9a:c7:60:39:3c:ae:52:c9:99:41:3a:4c:
                    c5:18:30:09:c9:47:a3:cd:9c:6e:13:8f:a7:ce:09:
                    df:c7:81:e1:2a:4c:b9:0f:27:dd:46:d7:e5:f8:31:
                    94:43:37:13:4a:5f:1c:a5:7f:60:2b:9a:51:01:3c:
                    e1:bf:58:54:d5:bf:fb:88:78:7e:4c:86:f0:8a:ed:
                    a7:21:e3:95:c9:eb:1b:28:67:22:1b:0d:56:11:03:
                    1c:42:73:f5:df:80:69:f5:8d:7f:97:32:a2:78:45:
                    b6:2b:e4:df:75:1e:9e:b2:86:19:b2:cd:bf:13:8d:
                    14:9a:85:95:3b:80:4c:00:cf:34:1b:2c:f1:d7:f1:
                    58:7e:ad:c1:19:72:b4:26:e5:db:89:7a:68:83:4c:
                    92:69:85:38:fb:ec:5b:9c:8d:06:12:18:f6:ea:fc:
                    bd:e1:eb:2c:77:cf:c0:bd:85:57:5c:f0:a7:72:20:
                    41:9c:9d:15:66:db:b8:b6:b1:70:32:2a:5f:fb:ec:
                    b3:58:96:b7:0a:05:23:63:36:7f:6c:29:28:4e:02:
                    b2:3c:89:7f:dc:20:04:5d:a9:77:44:9d:b0:f7:7e:
                    29:b4:9e:95:b2:b4:70:f9:50:5e:c6:36:c3:90:7f:
                    85:94:3b:55:9d:00:0f:e7:cb:c2:b7:55:f3:5b:36:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:78:ED:6A:59:85:DB:1B:67:CC:D5:44:56:3E:21:71:4F:0A:0F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29C071039F511EFAAAFC240C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:bd:73:0e:f1:2d:4c:ff:fd:45:7d:fe:0e:3b:96:34:d0:
         d9:b4:27:2b:0a:83:ce:c7:5a:c6:88:4d:58:23:c4:1b:11:82:
         b4:8e:81:2e:ae:8c:d8:96:2a:fb:36:a8:e3:74:68:44:d3:b2:
         ab:0e:50:c7:77:31:e9:53:7a:f5:4c:d7:6e:34:fc:e0:73:b5:
         21:ae:b7:9d:c9:ea:88:03:4c:66:c5:3b:85:a0:dc:9f:bc:06:
         f9:59:f1:b8:33:51:0b:c5:00:90:55:1f:5c:59:d1:03:c2:2c:
         24:1f:20:a6:63:c9:87:24:e6:43:98:08:09:dc:21:4a:ef:e4:
         bf:80:08:fa:b9:55:bf:98:13:96:2f:16:d6:3d:14:aa:17:99:
         be:0e:eb:0b:d4:a5:29:f6:45:49:4a:5c:f1:59:81:d1:74:25:
         4a:83:3f:df:85:39:6c:25:c0:31:7b:0c:64:3b:e1:a2:3d:ca:
         51:42:b6:37:0e:b4:b6:6c:64:02:31:50:28:f2:23:2e:11:57:
         0f:11:76:4c:38:a3:5e:9d:fa:62:25:ea:e5:6e:c9:63:4a:f7:
         62:c8:81:6b:0f:77:62:6c:77:40:47:af:84:d3:d0:86:11:e1:
         4e:f2:40:fb:72:2f:90:3d:ed:b4:15:aa:6a:a8:c2:ca:e0:a5:
         98:88:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:58 2026 by rpki-client