Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5699AB879A811EF9CB7F540C4F9AE02.roa
File:                     D5699AB879A811EF9CB7F540C4F9AE02.roa (raw, json)
Hash identifier:          and86FrokvdkRqumBj/U9ijI6QKgYitZsDJXWAtxoQs=
Subject key identifier:   EF:9E:05:05:7E:E3:31:08:16:D1:A5:9A:8E:88:11:20:FA:3C:80:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F743
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5699AB879A811EF9CB7F540C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:49:14 +0000
ROA not before:           Mon 06 Jul 2026 17:49:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214369
IP address blocks:        103.170.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63299 (0xf743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:49:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea9a-e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:ca:50:9f:cc:9e:ab:bc:b0:ce:84:a9:75:
                    5f:98:48:a9:3b:46:b6:23:69:21:b6:be:79:7b:4a:
                    bf:4b:a5:e4:e9:de:77:ab:c0:e1:be:9e:ad:3a:68:
                    07:62:40:ce:98:d4:f1:ac:49:d8:61:72:4a:2e:b6:
                    74:58:0e:93:0c:87:7f:4c:d8:6a:5c:72:84:b8:9a:
                    de:57:fb:4e:ef:87:17:81:94:9b:5a:db:d3:46:c0:
                    e5:da:bf:2e:91:a1:ed:5a:45:72:4e:0b:d4:5c:40:
                    bf:19:f9:c6:e7:2e:d3:98:03:0b:6a:05:6e:c8:f6:
                    45:25:95:66:72:76:32:36:f9:29:43:7d:5a:2a:7a:
                    6a:65:73:5d:bf:45:b5:26:e9:57:b5:12:6c:9e:9f:
                    30:5b:9f:95:de:30:6f:cb:3d:73:d1:14:0d:f6:f5:
                    07:8c:c8:db:1a:3e:d1:1c:d8:7a:c1:59:87:eb:e4:
                    84:71:d4:97:70:66:bc:78:82:54:e4:9d:9d:41:92:
                    98:af:ef:6c:fd:91:5d:32:28:d9:bb:b3:a0:ba:a8:
                    55:f6:4c:2e:5c:db:31:a5:b7:6f:8c:5c:66:d3:02:
                    bf:d7:2b:6c:be:51:47:2b:2a:98:fd:e5:52:cc:68:
                    ef:04:83:5b:1b:29:df:99:3c:9e:d2:0a:c4:b5:b5:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9E:05:05:7E:E3:31:08:16:D1:A5:9A:8E:88:11:20:FA:3C:80:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5699AB879A811EF9CB7F540C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:55:de:d1:b7:13:86:60:86:17:d7:d6:5a:ab:96:1c:c2:f9:
         88:c7:b4:45:ca:af:d5:78:f8:bc:a0:61:49:42:47:4c:0e:29:
         d0:ec:19:64:60:8e:c4:62:e5:3e:11:cc:00:56:0c:36:07:ee:
         fc:05:5a:64:19:b3:f3:6b:42:8e:df:dc:fd:2a:fc:9d:38:0f:
         98:a9:9b:3e:f9:d0:5a:eb:d1:fe:e3:45:92:29:5e:27:ff:ed:
         55:02:f0:21:94:63:a9:7f:f3:3d:60:4f:0f:40:77:32:42:e6:
         70:e6:73:f0:df:c9:7c:d2:56:cd:14:34:08:ce:ae:4f:c1:bc:
         f1:6b:f3:df:9f:79:b6:c8:9e:de:d3:e3:da:70:72:bc:11:b8:
         e3:cd:ef:6e:d4:fc:2e:ac:3e:86:45:d0:c0:ca:75:52:08:ec:
         80:6e:4c:7a:09:0e:7a:5a:59:a1:03:b7:34:9e:04:a1:04:4f:
         6a:97:cd:fe:07:e1:74:a5:b6:e5:5a:fa:8b:6a:78:d9:6c:df:
         75:c5:29:98:6d:aa:f7:d0:3a:e9:9b:5f:53:0d:1e:ac:46:64:
         ac:69:1e:12:3d:e7:1d:31:c8:8d:76:f1:13:0f:6f:3e:92:aa:
         e6:a0:40:8d:dc:e3:fe:30:f1:2a:d2:7e:05:b1:3b:bc:fc:19:
         4b:2a:f2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:24 2026 by rpki-client