Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9ED5484FD8E11EA884D0443C4F9AE02.roa
File:                     D9ED5484FD8E11EA884D0443C4F9AE02.roa (raw, json)
Hash identifier:          E1gd7j62V5tje8tjcujO2lT1EJJdqDVO8fkcpRX3ipg=
Subject key identifier:   16:E0:36:71:E1:9F:31:89:9E:24:2F:4B:E3:96:E8:BA:F5:DD:9A:F8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F249
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9ED5484FD8E11EA884D0443C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:06:36 +0000
ROA not before:           Mon 06 Jul 2026 17:06:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139494
IP address blocks:        103.144.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62025 (0xf249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be09b-023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:83:df:60:28:9a:55:3c:60:d5:50:54:51:
                    9e:9a:e9:8a:87:1e:17:88:0f:61:0a:e5:a1:26:58:
                    09:de:4d:48:f9:d1:37:26:a8:71:af:7a:28:bb:78:
                    a4:e9:1c:84:72:b6:41:c9:9a:00:ed:16:de:d2:6d:
                    48:fb:71:ad:72:6e:19:7b:d1:3d:f5:57:03:0d:1d:
                    1b:d9:09:ec:55:89:5e:f1:ca:70:9c:89:16:13:c8:
                    bf:74:09:c9:1e:cc:e6:e6:7d:13:b1:15:25:18:31:
                    3c:30:5d:1b:54:9c:42:46:d7:ff:3b:a2:51:5d:df:
                    46:c3:b6:d4:cf:d8:1a:41:79:9f:f2:09:e4:c6:08:
                    34:57:1f:2a:4c:bc:ac:c7:64:3f:b9:0f:00:a6:88:
                    d6:c4:c4:78:26:6e:78:c7:06:8e:71:c8:24:af:07:
                    05:cd:64:81:7f:48:18:a3:7d:41:9d:81:b5:e7:b6:
                    e2:17:cc:dd:d2:e0:60:76:49:ef:2a:c9:8b:08:3d:
                    a0:43:0b:e2:c4:7b:60:3e:31:d7:88:89:ce:46:4a:
                    69:ee:aa:f8:79:6d:80:00:95:55:b8:21:53:90:99:
                    70:67:d6:62:dc:82:37:35:48:4b:9a:2d:79:8b:23:
                    45:5c:a6:a8:50:32:54:1d:f0:9a:e3:e1:76:3f:ea:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:36:71:E1:9F:31:89:9E:24:2F:4B:E3:96:E8:BA:F5:DD:9A:F8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9ED5484FD8E11EA884D0443C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:dc:c9:20:8e:98:da:08:95:b8:38:13:c5:ee:b7:d1:03:
         e2:b6:da:5d:89:06:68:07:6f:e3:43:e0:e7:62:1d:82:cc:2e:
         a1:3d:35:8d:c7:79:67:7e:d9:b5:47:f7:10:d0:a9:c0:db:9c:
         42:60:f0:b2:de:3b:2f:59:ed:47:6b:75:d3:6a:e5:5c:94:f3:
         c5:83:b2:ae:78:4e:b2:54:61:ca:8b:20:15:bc:39:2e:73:71:
         2f:1d:8b:5c:e5:66:1e:72:f3:df:90:9c:7f:c9:69:cb:30:53:
         50:4a:59:12:52:d3:ce:c4:0d:1f:84:72:a3:a7:13:35:ee:03:
         c6:ea:b5:12:e2:2b:a8:94:2b:0a:71:b0:7a:89:67:1b:2e:15:
         dd:2f:23:fe:50:d6:1e:43:b3:ce:ba:b4:a2:5d:bf:56:bd:53:
         1d:e6:8c:3a:26:e0:24:a8:6b:f3:c4:3a:07:dd:b0:2a:6f:47:
         fa:16:df:47:c9:5e:7a:d6:b5:7d:df:73:d4:68:23:38:c7:0d:
         23:b7:6f:bb:64:4e:c3:3d:6e:61:c8:2c:f1:ef:4a:b3:0e:3c:
         d6:ad:1b:42:e6:93:d6:4b:50:ae:20:ff:06:af:83:ea:c2:6d:
         39:73:41:bd:4d:b5:41:fb:24:a7:33:b1:22:7e:87:b9:b0:9a:
         1c:75:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:01 2026 by rpki-client