Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3777BE0DE3811EBB42ADE16C4F9AE02.roa
File:                     C3777BE0DE3811EBB42ADE16C4F9AE02.roa (raw, json)
Hash identifier:          9yauv21bkRaMY6n5e/dqa0wp2srtuSKg3qFGw0xvXeI=
Subject key identifier:   75:02:8F:3D:54:C1:9E:20:57:60:77:F0:C9:4D:A5:32:F2:E3:09:77
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F381
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3777BE0DE3811EBB42ADE16C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:17:11 +0000
ROA not before:           Mon 06 Jul 2026 17:17:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141831
IP address blocks:        103.167.184.0/23 maxlen: 24
                          2001:df3:b5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62337 (0xf381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:17:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be317-091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:af:56:09:bd:1f:ff:89:c8:80:4c:80:80:
                    c8:4f:40:a8:28:35:1a:64:27:04:87:c8:20:63:83:
                    bf:8e:9e:8a:df:79:7b:c6:83:9e:01:9e:f5:c4:67:
                    ab:31:5d:de:09:cf:a8:46:e0:63:9a:62:de:2e:85:
                    f9:fc:90:e1:ae:b8:66:a4:63:9a:fe:49:53:0b:c9:
                    81:20:c5:e3:d5:f5:9f:d0:b5:0f:3a:fa:e0:30:e3:
                    71:13:44:56:95:ba:a9:cf:9e:e1:b4:ec:97:ee:c3:
                    9a:e1:78:92:e0:7d:83:74:96:f4:37:f2:8d:6b:18:
                    aa:36:8f:04:81:4c:9f:43:7b:f4:d9:83:f9:87:12:
                    ef:bc:89:2d:3c:a5:99:06:3e:5b:24:51:61:fd:a3:
                    a0:92:ec:2d:ef:28:d0:8a:bf:72:67:61:d7:f5:77:
                    85:b4:ca:8e:77:b5:98:9f:94:fd:ad:70:e1:d2:41:
                    0f:a8:3e:e2:8b:aa:7a:1c:88:cd:54:2a:3b:27:0f:
                    cb:7b:ba:bc:bb:6e:12:02:25:47:e9:a8:b3:b7:eb:
                    46:5f:71:2f:97:8b:14:8e:db:59:0c:99:38:45:08:
                    ae:ee:d2:59:1e:57:97:b5:db:b5:db:02:87:a0:52:
                    5b:6f:85:1b:15:4e:10:b2:dc:41:bd:0d:ae:62:ed:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:02:8F:3D:54:C1:9E:20:57:60:77:F0:C9:4D:A5:32:F2:E3:09:77
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3777BE0DE3811EBB42ADE16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.184.0/23
                IPv6:
                  2001:df3:b5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:4d:91:13:04:1c:d3:f9:5f:9e:d5:3f:fc:bc:9b:c9:47:
         7d:3d:9e:de:e3:fc:23:19:13:41:22:56:5a:31:7c:49:13:71:
         be:c2:d4:f7:ef:33:cb:b9:3f:fc:c0:1b:61:16:6b:90:98:5f:
         2b:e6:8d:f9:0d:bf:b7:5b:67:d9:77:6f:d6:e0:55:e0:41:65:
         d8:81:ca:8c:4a:00:63:7b:cc:0a:f0:aa:f3:79:a8:c8:c6:6d:
         b6:56:da:dd:30:63:ca:48:53:23:f8:5e:23:d2:d0:44:70:d0:
         bf:10:7b:ec:73:fa:7d:6d:62:99:75:da:0b:7c:95:96:11:6c:
         f8:e0:fb:77:4e:d5:df:d1:58:5d:4d:46:89:bb:fc:b8:f3:a8:
         b4:00:48:ee:7d:c9:2e:79:12:3e:4c:07:f9:fb:7b:6e:3e:23:
         c9:d7:11:31:c8:da:70:3d:04:13:ef:2c:d1:d0:c9:d6:98:81:
         9c:2e:7d:bb:1f:6f:5c:99:72:f3:ac:0a:86:c9:76:2d:03:bd:
         03:a4:c1:e2:b1:91:45:f6:0e:77:81:43:b0:e5:91:6a:73:e8:
         72:97:d1:c6:c3:96:63:3b:14:2c:12:ec:d2:fe:b2:2c:a6:8f:
         29:f7:0a:1a:d7:58:b9:a6:64:bc:5f:08:1e:de:e4:18:de:28:
         3b:cb:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:42 2026 by rpki-client