Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C47C9A0EAE2111EFB6877365C4F9AE02.roa
File:                     C47C9A0EAE2111EFB6877365C4F9AE02.roa (raw, json)
Hash identifier:          7gLrm6tU5a+m1yTHe+WrXiJx9mXmjD+C/e5B1mS9d0Q=
Subject key identifier:   47:A2:06:59:C0:D1:BE:36:08:7D:9A:18:85:1E:B1:4E:F1:43:6E:15
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F042
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C47C9A0EAE2111EFB6877365C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:49:35 +0000
ROA not before:           Mon 06 Jul 2026 16:49:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135783
IP address blocks:        103.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61506 (0xf042)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:49:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc9f-5aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:16:95:93:ed:53:b9:0e:6a:8c:b4:4f:88:
                    88:ec:f4:98:51:ab:78:72:78:59:7b:fc:d2:4b:35:
                    f5:42:be:f0:dc:26:f8:2b:26:95:94:4f:db:58:bd:
                    53:68:33:8e:66:f0:97:18:16:c8:6e:45:4b:c9:f2:
                    24:d0:61:7a:f4:7f:00:63:10:bf:f3:13:94:a0:48:
                    e5:d4:a5:7c:a5:0c:2d:3b:fb:32:e5:e2:b7:aa:fa:
                    5c:6d:37:69:39:b7:ea:fe:84:fe:7f:7a:7d:e5:d4:
                    dd:fc:c2:e8:7b:c0:f8:e8:63:52:5d:52:d8:f6:d4:
                    54:73:67:6e:4b:cc:c6:a0:d1:bf:70:44:7d:fd:54:
                    27:49:c0:ae:96:73:2f:58:10:aa:66:d4:80:ff:e0:
                    aa:43:cb:6e:ae:21:c6:31:ea:66:dc:d2:90:38:ef:
                    f3:da:6d:1e:f2:a3:cb:77:c2:77:db:11:9b:e1:e5:
                    6f:d0:67:5a:ec:84:74:b0:95:64:95:a6:6f:0c:03:
                    f9:ff:97:7a:42:d9:25:a8:1e:d1:d0:b5:23:59:b3:
                    63:f0:44:b3:a2:52:e9:e1:3e:b4:4d:59:ba:cc:03:
                    7c:6e:da:d9:04:b4:94:57:37:31:d9:5e:19:bb:17:
                    1f:a7:a4:9c:84:d4:21:72:08:2a:25:f5:d4:6b:fb:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:06:59:C0:D1:BE:36:08:7D:9A:18:85:1E:B1:4E:F1:43:6E:15
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C47C9A0EAE2111EFB6877365C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:a7:6e:a5:47:dd:18:e4:dd:73:f9:5a:6b:d4:63:bb:c5:
         ed:e3:30:5b:94:6a:9a:58:0f:5a:d1:95:e6:df:52:21:9d:a4:
         3f:e5:1e:67:05:fb:9a:d0:ab:94:6a:d6:64:9e:31:dd:92:51:
         d1:ed:bb:5e:10:4c:52:bf:89:3f:d5:d6:cd:65:17:bc:67:a6:
         92:45:93:34:35:1a:96:31:eb:09:0a:03:12:d3:aa:94:db:39:
         f2:b1:ce:dc:ef:01:f1:60:f7:8c:cc:da:7f:06:52:70:f1:54:
         9c:4c:2b:76:2e:66:28:e1:e0:1f:45:ea:37:63:22:d0:da:f0:
         d2:cf:93:3c:57:46:d4:e9:68:72:dc:ea:a9:75:b8:06:fb:f6:
         69:59:fb:f4:d3:a9:5d:d3:38:34:8f:82:2e:95:c3:ad:3d:e1:
         fb:77:47:8b:7e:a1:df:2d:36:82:96:ea:bd:41:0e:53:cf:43:
         6d:b8:b4:5e:d1:86:46:31:be:3c:e9:54:58:2d:da:32:14:6f:
         f0:b5:44:65:f7:71:28:80:7a:68:7e:5b:d1:af:47:cc:0c:7b:
         1a:a6:2b:24:39:7e:a1:a4:b0:fe:36:0f:02:0d:9b:bb:07:3b:
         34:13:fe:63:32:a8:cd:cc:ec:fe:4b:c4:2e:cc:81:b6:dd:8c:
         90:ef:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:15 2026 by rpki-client