Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
File:                     CE68E3FE803B11ECA8F12731C4F9AE02.roa (raw, json)
Hash identifier:          APhzcjMlgW+g990uUkBAuXqK/pZaY6aiD6/vb1d1wMw=
Subject key identifier:   36:8B:E9:F0:83:11:1A:74:43:5F:A4:10:D9:9E:4B:2C:00:40:00:5D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F378
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:16:53 +0000
ROA not before:           Mon 06 Jul 2026 17:16:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141820
IP address blocks:        103.164.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62328 (0xf378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:16:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be304-869c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:8c:75:5d:17:d6:28:77:98:4e:1c:14:94:
                    86:25:3f:2c:93:78:52:83:a3:ec:2d:dd:18:85:20:
                    3d:ad:11:29:46:21:ab:fa:c8:04:0d:d9:ee:e2:12:
                    11:30:f2:ea:7b:bc:61:e4:9a:9f:6b:93:a1:b1:50:
                    26:11:73:e5:f8:aa:c9:a1:7b:92:e3:b7:9d:2c:07:
                    62:26:69:dc:ff:97:82:88:07:79:ef:85:32:52:5b:
                    1d:d8:21:c6:04:94:fb:81:96:bf:81:ef:c0:6f:a9:
                    b1:2e:51:87:44:97:29:8f:5d:a1:21:2e:bb:ef:95:
                    10:4a:e9:88:21:9e:7b:37:75:fc:ab:82:7b:0a:64:
                    40:59:8e:d4:11:f6:ba:23:35:e9:65:b2:27:ea:26:
                    6c:c6:2c:b1:8c:be:3e:86:1e:3b:a6:80:f0:11:6f:
                    b7:d9:2e:a1:7f:b7:10:d0:25:a9:76:13:9b:0f:04:
                    e2:e9:4c:40:39:52:b0:c2:6b:2a:be:56:4f:27:72:
                    6b:15:b9:64:11:3f:ab:53:f8:a3:14:ba:08:36:c6:
                    0f:10:d5:d9:6a:81:bc:16:4d:78:88:28:a3:94:2a:
                    17:ee:be:57:25:87:b6:cc:91:e1:7b:f5:55:a7:71:
                    f1:a2:4f:e0:ff:a0:d0:68:f3:85:f7:1a:8c:18:07:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:E9:F0:83:11:1A:74:43:5F:A4:10:D9:9E:4B:2C:00:40:00:5D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:f2:ea:5c:54:81:1a:22:6f:5c:cb:c1:0f:15:99:27:7e:
         26:42:d2:55:03:b0:c8:a8:e9:1f:3d:cd:3a:9a:2e:12:7f:88:
         67:4f:c9:4e:7a:45:b6:cc:02:a2:61:fc:54:7b:06:8a:bc:47:
         e0:0f:33:25:88:ec:83:d5:a8:67:03:4c:88:48:8c:43:71:b2:
         e6:e0:dc:ea:80:14:7d:c3:6c:a7:41:53:b1:a3:66:26:c8:31:
         e5:25:88:d9:57:c3:ea:08:03:74:b1:72:6e:d8:4b:89:1b:d8:
         d7:44:1e:cd:40:64:7d:08:63:1c:53:9b:0f:e8:ee:74:c6:ac:
         d4:20:ee:f3:f3:6a:38:93:a1:a3:d6:f3:d1:96:9b:55:04:d6:
         6a:3c:f7:fe:da:28:81:1a:97:1b:70:d0:dd:64:6e:b3:85:bc:
         5d:ef:c4:d2:fa:32:59:ea:e1:d1:43:11:8f:45:06:1f:fc:1c:
         af:2f:27:16:ae:e5:5e:40:0c:33:da:d4:89:fd:fd:f3:1b:10:
         2e:b2:15:0c:d4:98:34:08:96:47:b4:00:f8:9e:d4:5d:10:b4:
         5b:11:e2:ba:25:fb:c0:aa:96:0f:d7:4a:9a:5e:81:c9:08:e9:
         06:4a:f6:ab:2c:d7:00:2b:5d:cf:57:92:b0:f8:f9:93:d3:48:
         56:de:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:01 2026 by rpki-client