Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE392FDEBDD011EA9702FC12C4F9AE02.roa
File:                     DE392FDEBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier:          QlR3NnEO1ATFR29cmOjPrkJKZgSvFm7xQtvDkknBPXs=
Subject key identifier:   3A:76:75:03:A0:9D:94:AF:E1:C8:10:C4:7B:A1:76:F4:EE:DE:02:C0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F262
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE392FDEBDD011EA9702FC12C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:26 +0000
ROA not before:           Mon 06 Jul 2026 17:07:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139529
IP address blocks:        103.146.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62050 (0xf262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0cd-9335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0b:51:8d:81:e7:28:a9:4a:92:cf:65:4d:30:
                    4f:e2:7a:bf:a5:d4:16:20:bc:cb:3b:5d:02:32:92:
                    38:fa:53:77:2b:3f:5a:dd:a5:7a:79:98:27:95:7a:
                    00:a2:94:18:b3:0f:c1:8b:cf:a6:d7:e8:18:8f:29:
                    80:0f:9d:02:6b:97:3d:54:70:bd:ff:3b:56:7e:be:
                    a6:a2:96:26:e0:e1:94:85:a0:5d:20:f6:af:dd:a8:
                    1b:90:4c:e6:7c:f9:85:e4:2e:a8:96:0b:fc:78:92:
                    53:88:a3:a1:f6:2f:8f:ec:04:4e:07:21:86:cf:af:
                    7f:11:e6:f4:28:4d:09:09:38:ae:48:70:a8:59:44:
                    90:df:8b:0a:e3:be:ad:d6:45:1e:f2:4c:fa:65:79:
                    64:d2:f9:0c:49:1a:92:90:1a:46:86:a1:6c:e6:2f:
                    6b:d5:af:53:80:88:1f:77:22:cf:c1:46:05:8d:0c:
                    85:bb:f1:a0:f5:59:5d:6d:20:44:b4:b5:23:09:1a:
                    16:e7:59:fd:36:77:71:bd:55:99:13:6c:8a:7a:88:
                    18:4a:ba:ca:c8:24:71:b9:c8:5c:06:3d:d1:56:d6:
                    05:6f:8c:4b:d8:77:cd:2a:fc:b4:fe:0f:bb:6d:ff:
                    43:95:7a:3d:3e:73:f2:73:7f:17:6a:a9:87:9e:8b:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:76:75:03:A0:9D:94:AF:E1:C8:10:C4:7B:A1:76:F4:EE:DE:02:C0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE392FDEBDD011EA9702FC12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:79:05:ce:a9:fc:2a:d0:75:9a:b2:37:63:1d:95:ef:f1:22:
         14:c3:02:0b:af:2c:e3:1e:3f:b2:d4:6c:97:72:92:53:0d:b6:
         e1:00:f7:47:78:c7:9a:54:42:d9:f8:67:85:7b:07:64:81:e0:
         d8:5e:59:d1:10:e1:9c:0d:8e:a0:46:eb:88:65:49:d5:ab:e0:
         10:3c:e0:07:1f:b6:2d:cf:45:68:ac:e6:a2:24:1b:dd:4c:2c:
         44:66:93:27:cb:78:4b:97:a9:1a:92:5e:d0:12:14:f1:21:38:
         44:12:71:c3:75:c8:b5:ba:58:f5:ef:54:c7:e7:cc:74:34:b8:
         9d:d6:d3:9f:b5:a9:7b:13:5d:1e:89:35:04:ab:36:11:3a:cb:
         d3:a6:14:41:d0:ce:88:e0:f5:3b:0f:9d:6b:57:c8:1c:bc:ef:
         aa:70:35:e9:8f:bb:12:48:40:02:82:d8:76:67:eb:dd:3d:99:
         31:3a:01:11:02:ea:b6:7f:5f:dc:b3:13:9e:d8:43:41:77:a8:
         b1:6d:4f:4b:6e:01:39:03:16:9b:2e:2d:3a:3d:e8:54:d2:ee:
         d5:9b:65:79:93:9e:a5:5e:c0:1d:44:84:90:01:d9:75:3d:ea:
         f4:34:84:88:21:36:8c:25:cd:fc:2c:36:f2:79:3f:bb:8e:4a:
         bd:ee:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:38 2026 by rpki-client