Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAFAFD3643BF11F19EBC49529D833773.roa
File:                     DAFAFD3643BF11F19EBC49529D833773.roa (raw, json)
Hash identifier:          fFeWBI0lYW5vzy1/7oeg/z9i8b9B26PZn0j8uvG4T4Q=
Subject key identifier:   A9:2E:B7:BA:88:F7:4B:A9:E7:0A:43:3A:BC:97:2C:9E:DD:DF:70:06
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EDD6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAFAFD3643BF11F19EBC49529D833773.roa
Signing time:             Mon 06 Jul 2026 16:29:18 +0000
ROA not before:           Mon 06 Jul 2026 16:29:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     131181
IP address blocks:        103.247.104.0/22 maxlen: 22
                          203.114.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60886 (0xedd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:29:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd7de-2d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:11:fd:8a:45:87:73:6e:e3:7d:5d:d7:9f:
                    ca:ba:aa:0c:2a:79:65:f8:2f:ba:0f:f1:b3:ca:82:
                    29:50:23:1b:68:3f:3c:e3:c5:96:5c:3f:59:a8:c5:
                    92:9c:cb:a8:68:ba:db:06:61:60:5e:f1:0e:b9:77:
                    9b:e4:66:4f:31:6e:0a:5a:2d:a5:f7:01:52:3f:e2:
                    25:24:0f:23:0f:bd:50:6d:95:e2:97:60:4b:b3:5e:
                    6e:61:15:a9:cc:12:6d:83:67:1f:7e:b6:a4:b0:e6:
                    f5:4a:03:74:3f:71:8c:78:e5:07:6a:df:ca:e2:71:
                    d1:20:6a:37:70:33:ec:e8:af:29:3d:e0:11:76:4c:
                    28:63:72:29:ba:d2:d4:c7:88:ef:c5:b5:78:60:fb:
                    1c:3c:d3:9b:90:a5:74:80:b5:72:6d:ba:be:44:73:
                    8a:1d:cd:0a:38:30:62:f2:9a:e8:bb:25:3e:0e:62:
                    c2:db:ee:83:a7:a6:c2:40:5b:15:82:04:86:f7:34:
                    1d:08:97:4a:87:c6:83:77:38:90:c5:c3:85:5f:84:
                    24:6c:b2:5f:8a:33:a2:72:26:2d:ae:9b:bd:e8:c9:
                    c6:32:ca:89:da:ec:4c:f9:37:c8:42:de:e7:43:2a:
                    63:94:a1:ed:38:45:1d:59:2a:a7:3e:14:72:f1:bc:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:B7:BA:88:F7:4B:A9:E7:0A:43:3A:BC:97:2C:9E:DD:DF:70:06
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAFAFD3643BF11F19EBC49529D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.104.0/22
                  203.114.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ca:54:a5:cc:13:a1:0e:ad:17:15:71:92:38:6d:4d:ca:40:
         8c:a2:80:ba:f5:c3:25:49:c3:0e:23:9f:96:39:43:29:38:e1:
         cd:b4:c8:ee:95:f1:81:3b:28:cf:d7:51:60:27:ee:19:08:d8:
         f6:71:c4:3e:94:0b:52:d6:01:b2:72:43:2c:b3:a2:2d:c0:69:
         54:5e:4d:5b:06:fa:ff:94:56:5a:5c:a4:47:2d:16:a0:2c:ca:
         25:0e:84:a8:f5:d9:f6:9b:bf:8f:53:25:d2:97:0e:38:1d:60:
         d7:40:34:39:70:13:18:27:85:27:86:77:a4:51:f7:3b:0f:89:
         ed:d1:e3:52:c4:3e:73:f0:17:e6:89:7b:d4:f2:81:9c:80:98:
         9d:9f:10:fe:90:6a:ef:c1:e0:71:be:43:aa:f7:96:d1:6a:72:
         78:cd:6e:41:8f:84:d7:58:b0:9a:dd:fb:37:2e:62:73:a3:b3:
         09:33:e2:50:d7:69:69:ea:8d:c5:55:72:37:45:0b:95:4a:0c:
         41:57:d7:a7:99:56:a5:b3:c6:66:97:c8:38:a9:37:c0:a6:e1:
         6e:9f:ed:8a:2a:87:9f:f0:31:e3:1e:40:a5:9c:6a:b9:c2:c1:
         ea:c5:9b:e9:0e:34:5a:dd:ed:e0:a6:e3:84:d7:31:a3:ae:24:
         09:59:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:27 2026 by rpki-client