Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8B8CA942D3D11EF804C966DC4F9AE02.roa
File:                     C8B8CA942D3D11EF804C966DC4F9AE02.roa (raw, json)
Hash identifier:          rQF2ivcZZHghLjcBXMgk1WXcY55pngP3448VyGORe80=
Subject key identifier:   41:CA:FD:C8:7B:1D:B3:85:43:3E:FD:83:D5:61:EB:C9:65:4E:20:2F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F0E0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8B8CA942D3D11EF804C966DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:54:42 +0000
ROA not before:           Mon 06 Jul 2026 16:54:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136650
IP address blocks:        103.100.12.0/24 maxlen: 24
                          103.100.13.0/24 maxlen: 24
                          103.100.14.0/24 maxlen: 24
                          103.100.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61664 (0xf0e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:54:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bddd2-8a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:05:06:43:ef:21:f9:40:cd:91:dd:d3:28:
                    59:7e:03:67:60:ab:98:2d:3c:9d:83:65:d0:ca:3f:
                    04:bd:90:02:26:25:bb:38:f5:23:e2:09:3b:4e:8d:
                    98:0a:08:55:56:10:28:50:e7:f1:10:13:b4:1f:ca:
                    d3:22:16:15:43:b8:41:8c:70:ae:41:0b:9e:8d:e2:
                    ba:31:1f:f7:b0:c3:a7:48:cc:7c:c9:08:1a:01:b3:
                    90:d9:a1:65:fa:c2:58:c5:88:75:c4:4c:70:9e:49:
                    0b:e8:9c:94:51:ee:5a:9e:19:bc:f8:96:81:5c:81:
                    95:a2:7d:40:3c:4e:77:7a:55:00:0b:a3:73:2c:14:
                    62:4f:f6:28:d0:6f:94:f2:6a:31:61:bf:fe:7a:38:
                    92:70:59:73:6d:3c:1b:ee:ba:37:21:ba:af:ee:5f:
                    74:33:f1:52:db:13:ec:a8:1f:58:95:ed:dc:58:67:
                    95:51:f2:37:6c:d7:f3:93:d4:49:97:32:28:58:5b:
                    52:28:fc:8e:26:b3:ba:0d:6e:7c:3b:3c:b1:fa:da:
                    f8:30:46:9e:f3:85:ab:6e:04:38:3e:9a:00:2c:6f:
                    de:57:6e:75:1b:46:ab:0d:30:b0:6a:00:a6:19:da:
                    93:96:7c:c1:10:5b:0d:4f:04:c2:05:c8:ac:08:e7:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:FD:C8:7B:1D:B3:85:43:3E:FD:83:D5:61:EB:C9:65:4E:20:2F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8B8CA942D3D11EF804C966DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:59:86:1e:59:ab:b8:f4:b3:fe:df:b2:59:99:83:c9:6b:f4:
         85:37:bb:d9:4f:21:e3:c5:29:f5:02:d3:e3:0f:1f:4b:25:38:
         b7:83:6c:fc:41:d3:9f:23:28:58:a5:46:d1:ce:da:50:87:65:
         ca:27:63:0c:75:c7:ba:c1:6f:f2:40:24:2d:a7:34:83:a6:79:
         00:1a:40:d4:6e:be:c3:8a:c2:72:38:15:dd:15:70:1a:f1:53:
         67:6e:63:99:e2:29:37:42:e1:bb:16:43:d8:a7:a7:04:a7:d7:
         a7:f3:ad:0e:0a:f0:24:5a:81:b4:df:a1:2e:a8:d2:ea:d0:0f:
         fc:d1:bf:9a:45:05:70:3c:ab:58:ae:77:8d:52:cc:38:f7:a4:
         0a:f8:46:59:35:b0:34:76:09:46:e3:1e:04:51:e1:b6:b2:72:
         c9:61:44:61:e6:1e:49:eb:fa:62:2c:90:e2:b4:00:97:ad:e5:
         6a:e7:af:94:b2:f9:ce:59:0a:8d:8e:ff:d3:9d:4d:39:60:e1:
         74:ec:1e:e9:9f:97:c4:42:95:59:20:57:11:ef:eb:9f:e8:f0:
         45:43:2b:42:f2:74:4a:62:00:2e:31:b5:dc:6a:74:9e:f2:86:
         b1:95:c0:eb:37:a8:b6:ad:c3:1b:ad:1f:9c:ea:28:fe:33:8f:
         fc:b9:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:18 2026 by rpki-client