Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBB24A04525711F0A53F4D14C4F9AE02.roa
File:                     DBB24A04525711F0A53F4D14C4F9AE02.roa (raw, json)
Hash identifier:          yADRwUyfBftKMo1tqXapTLEI/WRIEUbMhTQ99hx7d2o=
Subject key identifier:   C4:99:19:9A:55:C5:7A:27:B6:39:65:3B:3F:D8:50:5B:92:D2:7D:97
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F39D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBB24A04525711F0A53F4D14C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:18:07 +0000
ROA not before:           Mon 06 Jul 2026 17:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141873
IP address blocks:        103.165.70.0/23 maxlen: 24
                          103.176.46.0/23 maxlen: 24
                          2001:df6:6180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62365 (0xf39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be34f-c428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:c7:16:55:9e:eb:76:3b:a1:8e:d9:bc:3e:
                    79:55:5a:6e:27:19:7b:e7:25:d1:4d:9a:c7:98:7e:
                    55:55:ba:f2:7f:9e:60:cf:bf:6d:38:2e:4a:b4:c6:
                    b1:f2:6e:69:4d:66:e7:5e:9d:a7:4c:2c:b4:ba:33:
                    b6:6b:b1:35:b6:1b:d6:2e:d8:7b:34:fd:0f:c2:e2:
                    77:68:64:65:cf:e8:2c:d1:cf:f0:8c:b0:24:ec:de:
                    ad:33:62:22:b7:7c:a9:e5:84:25:7c:a4:3f:f5:89:
                    68:6d:0a:62:aa:9f:7f:4a:ea:77:74:f7:fc:95:a6:
                    5c:37:d1:c9:f8:1a:bb:df:a9:33:62:0c:a3:46:6a:
                    8d:d5:60:41:5b:bb:35:9e:2a:38:a7:e8:d4:2d:d1:
                    24:da:78:ea:d0:56:b0:13:11:81:66:e7:d8:7e:42:
                    a7:f5:b6:76:01:7f:24:c5:57:49:72:ed:58:f5:0d:
                    8d:13:96:64:2c:0f:d7:32:3c:0c:02:77:64:c5:99:
                    e4:77:b3:eb:fe:c8:65:1b:54:f6:dd:d1:06:19:d3:
                    b9:4e:8c:2e:e4:00:4c:75:19:55:ad:fd:81:dc:9e:
                    65:54:73:68:4e:8d:5f:33:51:5c:0c:e3:d1:7f:06:
                    9b:6f:1b:40:84:25:9c:b7:db:6e:1b:17:bd:4c:12:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:99:19:9A:55:C5:7A:27:B6:39:65:3B:3F:D8:50:5B:92:D2:7D:97
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBB24A04525711F0A53F4D14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.70.0/23
                  103.176.46.0/23
                IPv6:
                  2001:df6:6180::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:ea:ec:9e:bc:d8:87:25:18:cd:c5:58:95:cd:b0:35:a7:
         df:77:87:d6:34:52:16:b1:19:41:22:06:a4:3c:81:83:65:f7:
         3f:26:67:0e:7a:01:85:cf:bf:dc:e3:f8:7f:5b:2a:b3:e0:36:
         b8:ed:13:75:df:67:0c:7a:27:a7:c1:4b:e0:e6:a1:fb:df:56:
         84:44:55:34:a3:c8:ae:fa:e2:24:c6:0e:f3:7b:dc:9c:f7:9a:
         08:d4:fd:2f:c6:74:e2:a1:91:ba:57:fd:87:6f:28:f1:12:64:
         ee:84:1d:41:a3:86:7e:f8:24:c7:63:90:e4:4c:5f:c2:21:55:
         27:c1:16:82:2d:cd:03:46:de:a8:10:5d:91:59:78:46:47:33:
         11:27:c3:98:3b:9b:42:c7:d1:30:f8:1e:ea:94:25:11:9b:f6:
         7b:29:5e:ff:42:59:c9:8a:05:2d:36:ed:eb:8a:5e:04:3c:94:
         3f:25:b1:ab:88:8f:80:96:84:11:57:8f:87:af:6f:a8:0d:30:
         3c:87:52:dc:54:1f:db:8d:42:37:af:de:49:3e:fe:32:dd:1d:
         8f:87:3e:bf:02:36:39:d4:f0:e8:0e:bb:ff:d1:ae:ab:1b:39:
         d7:f9:b6:03:5f:ca:07:84:15:1f:27:1c:5d:bd:93:96:42:22:
         df:4c:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:44 2026 by rpki-client