Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa
File:                     DA91C60CBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier:          t7IAGhafypigUjHvRyoyN1pBAj6w9gtlYmc/I+UVlIw=
Subject key identifier:   85:71:C9:3D:EC:45:19:A1:7D:33:2C:E3:89:E2:2D:CF:E3:30:DC:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F251
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:06:51 +0000
ROA not before:           Mon 06 Jul 2026 17:06:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139509
IP address blocks:        103.146.228.0/23 maxlen: 24
                          2001:df5:6340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62033 (0xf251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0aa-706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:20:fb:07:e0:89:1b:35:4b:80:40:ee:df:
                    c5:25:95:f7:e4:a6:78:68:1b:3a:d0:da:36:cd:26:
                    77:b5:25:91:43:c4:68:ac:b0:b7:cc:0b:8d:ed:75:
                    d5:54:e8:b8:5d:fd:3d:4f:5c:e6:f8:9c:83:a9:b6:
                    04:87:0d:0a:33:28:84:c3:11:69:5d:9f:bd:86:bf:
                    78:1a:8e:69:45:a0:09:0e:ff:74:a9:de:87:1f:85:
                    3d:ca:13:5f:c0:d9:a7:be:00:15:9d:89:75:58:e6:
                    e4:52:ed:ab:ac:33:fd:45:c7:5b:23:fb:80:21:81:
                    75:ab:5c:be:1a:98:b8:b7:88:64:4c:24:1c:12:01:
                    a2:c2:0b:0e:62:88:49:71:7a:78:fe:63:89:e5:05:
                    5e:bd:63:50:1d:e6:51:a6:d8:d0:77:a5:41:60:a6:
                    a5:b7:93:dd:aa:98:9a:af:b9:27:ec:85:eb:df:b6:
                    33:d8:a2:b5:c8:b4:c9:33:d0:a1:67:3d:e6:6f:c3:
                    83:b1:b9:83:94:4e:cc:a5:d3:6c:52:c7:ac:0f:28:
                    d6:19:5a:5a:98:78:85:43:eb:bb:94:e6:cb:1e:27:
                    d3:d5:d0:91:a1:2b:9a:11:3b:63:0d:25:70:f6:9f:
                    00:7f:c1:02:5a:5e:50:e9:e8:69:c4:81:b5:96:81:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:C9:3D:EC:45:19:A1:7D:33:2C:E3:89:E2:2D:CF:E3:30:DC:EA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.228.0/23
                IPv6:
                  2001:df5:6340::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:2a:d6:e4:85:20:e3:52:8e:a4:16:dd:57:87:31:37:59:
         ce:2e:b8:5b:1e:f8:4c:ec:81:e0:ba:5e:7d:49:11:78:55:60:
         00:b4:25:11:d8:aa:ed:be:e7:1f:ca:1e:fb:ab:4a:7c:b0:83:
         43:8d:4d:6a:ec:53:96:05:1e:d3:ab:4c:4a:30:2b:12:85:97:
         09:87:47:54:2a:83:be:02:7e:a4:c6:f6:02:1f:55:99:26:b1:
         f4:88:f8:30:32:9a:20:26:d8:6a:36:db:58:7c:07:ab:bb:6f:
         7b:07:88:28:14:2e:eb:e1:04:aa:b6:25:24:83:7d:0c:f5:27:
         c8:cf:0e:fa:0c:63:b2:17:a9:cf:a5:23:01:01:6a:6f:31:a6:
         b4:ad:bd:b6:03:df:b1:16:e1:28:d2:54:50:15:12:48:46:be:
         a0:49:2b:98:64:1e:f5:d9:1f:dd:45:58:56:8f:d5:48:46:ad:
         8c:a8:d0:40:c9:c7:1a:bb:d0:8c:44:d3:41:d8:b2:ec:f8:65:
         c0:e6:5c:50:48:1f:6e:f4:ea:bc:24:a9:a4:4c:bf:75:e1:1b:
         af:fd:5b:bd:db:77:86:02:61:cd:1f:5d:f8:2b:5c:7e:d5:bc:
         c5:d2:66:da:e3:34:fa:a4:bd:c4:9c:5a:c0:98:43:6d:8f:3f:
         e2:3e:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:18 2026 by rpki-client