Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92C3A06011611EDABA1BB5BC4F9AE02.roa
File:                     C92C3A06011611EDABA1BB5BC4F9AE02.roa (raw, json)
Hash identifier:          c8ntbDUnKVnjVGIa+kSH8Xo5PE353PENGPQM1+e5LEk=
Subject key identifier:   64:A2:61:04:8D:0B:E4:9C:7B:BF:A4:6D:BE:94:91:D6:3A:E2:57:D2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F53E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92C3A06011611EDABA1BB5BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:32:01 +0000
ROA not before:           Mon 06 Jul 2026 17:32:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150051
IP address blocks:        103.190.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62782 (0xf53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:32:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be691-fc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:6f:09:1d:f4:a9:a2:48:35:d3:97:18:06:
                    5c:17:e5:29:30:b6:73:e1:9c:b5:d2:49:41:0e:eb:
                    14:c8:97:64:bd:70:56:6f:b4:18:b5:35:0f:34:e4:
                    56:cc:36:01:2a:06:e3:e5:78:4c:30:76:bd:c9:5f:
                    cf:8c:3c:4d:a9:68:f3:08:37:d7:f2:c7:97:47:1c:
                    41:0e:0f:45:22:98:ac:52:5a:60:60:e3:66:26:ac:
                    bd:93:32:7b:8d:d2:5a:d3:b4:e1:12:1b:95:19:cb:
                    e4:c6:09:66:3b:61:a9:ab:5b:1e:79:5d:b1:9b:b4:
                    e1:a1:4e:60:94:76:a9:a2:ea:3f:c9:d8:a1:22:c6:
                    28:2a:ac:f9:c9:d2:87:d0:52:87:a9:5f:01:8f:75:
                    3b:98:11:b6:0b:dd:f5:99:79:b2:71:c2:36:f4:0c:
                    32:a8:fa:25:f9:54:b5:5d:71:c6:99:46:6c:31:84:
                    f9:91:78:67:1d:e8:b8:9e:0e:c2:bc:7f:3d:58:b8:
                    9d:f5:3c:23:fc:87:55:ff:03:4a:af:b3:ba:c9:62:
                    d8:0d:61:52:96:3d:26:b5:d9:d4:65:77:e7:05:bc:
                    3b:ea:47:0d:f3:38:02:72:67:85:07:28:f2:22:45:
                    b9:fe:75:65:99:66:cd:a9:95:e3:15:e3:04:1c:38:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:61:04:8D:0B:E4:9C:7B:BF:A4:6D:BE:94:91:D6:3A:E2:57:D2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92C3A06011611EDABA1BB5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:51:17:f8:e5:5a:15:dc:ad:4f:b5:9c:ab:8d:11:97:e6:55:
         e8:a5:93:10:11:78:63:ea:3a:b4:8a:a1:b0:6e:d9:53:85:07:
         69:a4:9a:9d:13:12:55:f1:cc:18:14:2b:7a:02:cc:7a:a6:e2:
         49:02:01:9a:21:38:1b:f5:64:21:1b:2b:7a:a6:33:9c:d3:8b:
         73:35:23:b8:d7:1a:1f:99:cc:e6:b4:82:e5:c8:2f:8e:3b:68:
         fa:94:80:01:20:01:e8:3f:b7:cc:54:0f:1f:a2:6b:bc:72:1d:
         d7:62:53:b4:87:0b:0a:49:87:13:7c:85:8f:ea:3a:1f:82:fd:
         7f:ac:f8:b8:af:42:d1:d6:f4:fe:9b:e3:9c:69:59:e1:14:76:
         53:3e:57:4c:da:53:fb:42:bd:b6:fa:41:eb:2d:5b:bc:3b:3d:
         e5:da:01:7e:58:4d:4a:af:2e:71:b6:85:d5:af:31:8f:7c:14:
         e5:2c:b1:5f:1b:3a:e8:7e:d6:05:96:4a:7b:0a:1e:c8:fa:7c:
         d0:6f:b4:6e:39:9d:50:8f:e6:46:af:3b:26:f0:97:ed:20:39:
         f7:ae:04:07:45:48:6f:5d:59:9f:85:61:00:47:2c:08:3d:cc:
         4b:ae:0d:ff:b3:1c:7c:8c:68:e5:33:ed:3e:a9:27:35:77:27:
         01:27:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:45 2026 by rpki-client