Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa
File:                     DE539DAA20FE11F1A384548E1D3D8C67.roa (raw, json)
Hash identifier:          6oHSpASN78zK7ZTV8fKzIbxlDEFTs2OCHMZkmAjPycs=
Subject key identifier:   25:0C:DF:CB:E9:EF:BE:9D:5B:88:CC:2F:44:76:14:F6:C4:E6:25:8B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F379
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa
Signing time:             Mon 06 Jul 2026 17:16:55 +0000
ROA not before:           Mon 06 Jul 2026 17:16:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141821
IP address blocks:        103.166.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62329 (0xf379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:16:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be306-6dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:ec:da:7d:8b:2f:b4:7c:c5:e6:29:47:a5:
                    46:a2:76:3d:60:5c:23:05:aa:fe:d0:93:ff:ca:c9:
                    6e:8d:52:4a:e9:c8:55:ef:b7:69:82:65:c1:a0:f0:
                    c3:7a:b5:e2:8b:78:02:b9:c6:41:2d:b2:94:f6:12:
                    4a:09:6e:83:b8:ec:af:62:1a:58:b7:bf:37:da:5b:
                    88:95:03:85:7a:40:b0:77:a5:1d:0b:2e:fc:e1:5e:
                    3b:6d:16:92:91:e6:49:40:11:f5:6e:d9:c8:ad:48:
                    85:4c:6c:83:b7:3a:74:25:76:3e:f1:a7:5a:42:6c:
                    70:39:01:e8:36:7e:fc:18:43:6c:b9:8b:86:84:4f:
                    0a:fc:68:4a:96:51:6e:5c:72:cc:29:08:1a:a0:5b:
                    a3:69:7c:44:2f:64:2a:96:63:25:d3:36:98:db:7b:
                    c1:73:54:48:86:6f:2c:1a:0c:0b:df:d5:26:d8:9b:
                    f8:f7:2a:a0:39:68:64:1b:80:df:cc:59:a7:df:c8:
                    7b:fb:00:2b:7b:72:ec:78:f9:ea:b5:51:20:47:14:
                    6c:73:fe:8f:f6:ce:dc:59:31:82:58:ca:8a:aa:28:
                    9a:b3:45:aa:ac:93:06:09:64:08:cb:cd:a2:8d:b5:
                    9e:6b:9e:e2:b1:5a:2b:4f:9b:95:09:eb:15:d1:e4:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:DF:CB:E9:EF:BE:9D:5B:88:CC:2F:44:76:14:F6:C4:E6:25:8B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:39:32:dd:6c:64:fa:6d:85:d1:27:98:61:f7:02:1b:3c:9c:
         cf:cd:8b:08:12:73:3a:c6:41:4e:bd:07:74:54:08:ba:17:c3:
         24:28:7c:f1:df:2b:24:54:48:b6:33:e2:27:c1:e2:a2:d9:b1:
         87:c2:39:f5:77:b0:e3:5c:3e:7a:8e:cb:10:aa:70:c7:ca:b0:
         4e:fe:95:91:c9:3d:f5:c1:39:49:26:5d:72:3e:a0:1d:30:de:
         87:60:2f:69:c7:81:68:65:f3:04:7f:84:78:39:e9:97:48:58:
         32:f5:f4:73:a0:91:c9:92:f7:b0:d8:32:51:cc:b6:86:00:97:
         cb:9d:a2:aa:79:8b:9a:7d:c9:0e:ad:2b:63:19:88:bd:6f:83:
         98:95:28:32:61:1e:a2:c4:5c:91:b1:cf:d9:88:2c:5d:99:b5:
         a6:5c:7a:5e:09:a2:89:68:c3:02:f9:6e:2b:e4:7d:3e:59:6f:
         44:aa:47:fe:f7:3c:0e:46:2c:ce:00:08:dd:14:19:04:aa:e6:
         f8:be:5a:1e:06:94:83:47:0a:12:13:ea:e5:34:c0:3e:bb:b5:
         8c:49:e4:03:86:30:3b:c8:bc:41:0f:9a:c0:bd:1e:7b:62:3d:
         90:af:3b:ba:f8:3b:49:7f:f6:7e:81:91:b4:02:dd:72:62:3e:
         72:91:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:31 2026 by rpki-client