Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C716FA52D19911EFA12E1135C4F9AE02.roa
File:                     C716FA52D19911EFA12E1135C4F9AE02.roa (raw, json)
Hash identifier:          /7siXbkZHS0jPTfrpB6p76gcLrKzrWrAzjirufOTFVg=
Subject key identifier:   26:E2:38:49:BD:8B:D0:60:C7:6C:E0:81:B7:46:D0:7B:B6:C9:BF:7D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EDED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C716FA52D19911EFA12E1135C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:30:03 +0000
ROA not before:           Mon 06 Jul 2026 16:30:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132441
IP address blocks:        103.21.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60909 (0xeded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:30:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd80a-d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:25:16:3f:7e:db:6c:fc:83:59:d8:6c:44:
                    3c:7e:a4:9f:c3:de:ea:0f:64:af:49:5c:b5:a1:c8:
                    c5:8b:d3:0b:b5:ba:ff:88:ad:bb:1f:c5:d5:16:26:
                    b9:ab:2f:94:0a:da:2e:59:87:2e:f1:88:6b:d7:19:
                    ef:8e:44:64:6a:e9:4d:73:87:b7:ac:7d:86:eb:e0:
                    51:ce:e6:c7:bc:75:6b:fe:4d:c3:86:87:1b:3f:29:
                    c4:5f:86:36:98:7f:78:00:1b:d8:c3:d9:ee:cd:f1:
                    50:b7:92:92:b6:41:ea:7f:07:2e:7a:75:87:91:9a:
                    f8:4c:c3:57:8f:b7:f9:13:8d:bb:8d:53:f4:f7:3f:
                    4f:44:cc:cd:2c:a9:80:96:57:64:ee:28:66:a2:32:
                    db:16:ba:f3:94:f8:08:16:3f:4d:1e:00:ed:80:70:
                    ca:54:63:bd:96:52:db:7e:8f:59:e1:87:4d:2f:af:
                    62:52:8c:19:68:a8:1c:87:5b:16:2b:57:ce:42:db:
                    5b:90:55:f8:50:03:b1:d6:2a:7a:ff:a2:fa:36:bc:
                    2d:43:56:9d:3a:af:8d:3c:fc:1f:c5:90:5a:80:89:
                    38:24:29:13:a8:68:17:63:f9:5c:d5:aa:b8:f4:94:
                    88:ba:e7:c7:d4:40:78:e2:9e:6a:d6:c2:37:7c:56:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:38:49:BD:8B:D0:60:C7:6C:E0:81:B7:46:D0:7B:B6:C9:BF:7D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C716FA52D19911EFA12E1135C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:1f:2b:22:d6:2d:08:9f:24:e8:4f:bd:7a:b7:b2:79:61:
         fe:c7:62:fb:44:c0:11:70:5c:d7:78:e3:fb:c4:8f:06:ff:47:
         cc:dc:71:cf:86:4a:9c:08:ad:65:fc:e2:7c:99:ec:a5:25:d1:
         66:d7:b5:af:fd:c3:b6:97:34:e0:b4:bb:2d:b3:2d:87:08:ca:
         23:c2:1d:38:c7:d3:62:cf:db:84:ec:13:b7:b4:1a:37:c3:1b:
         bf:00:ba:47:a9:5d:d4:3c:33:1c:22:ba:db:41:83:c4:9f:c7:
         89:3e:4f:fd:e8:7e:aa:2f:72:02:1e:bc:e0:25:20:17:63:f5:
         b6:3e:40:78:76:f3:92:7d:0d:b8:77:a7:20:aa:86:8f:a9:17:
         ac:36:c2:5c:42:20:c4:e9:f6:f5:16:4c:57:d3:9f:36:34:44:
         53:c3:21:6f:5b:77:a9:d4:39:75:7e:d6:7e:8c:ab:e5:5c:5f:
         57:bb:a3:00:68:ee:9b:03:a9:26:36:45:c0:5c:bb:2b:55:57:
         75:54:43:1b:88:26:5f:43:17:7f:8a:6c:43:f1:cc:7a:27:50:
         ab:d3:4b:37:57:02:0f:5a:89:5c:6f:60:0a:20:5f:20:c7:08:
         44:4f:82:d3:5d:af:82:90:f1:2e:bc:25:45:e1:d6:c8:18:e7:
         87:eb:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:04 2026 by rpki-client