Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E230CDE0BDD011EA9702FC12C4F9AE02.roa
File:                     E230CDE0BDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier:          Uub2IH8yjGmrzX665iFUsZ/5PyCopn1A8oeEjwRVafs=
Subject key identifier:   A7:1E:52:3B:49:33:59:2F:C7:95:BC:26:C4:BE:6C:59:D2:33:3A:57
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F270
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E230CDE0BDD011EA9702FC12C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:53 +0000
ROA not before:           Mon 06 Jul 2026 17:07:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139552
IP address blocks:        103.147.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62064 (0xf270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0e9-8045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:4c:6e:95:8a:9a:b7:1f:26:d4:e3:40:b5:
                    f9:09:9f:57:c7:5e:85:a1:f3:56:df:85:d4:7e:92:
                    93:b0:0b:03:22:d4:93:b5:91:c8:01:6f:27:6a:a1:
                    53:cb:aa:72:07:e6:c2:39:cc:3d:0b:b2:67:c2:21:
                    dd:0c:e0:bd:70:97:ed:03:46:f9:7d:11:11:61:8d:
                    94:e2:a1:ad:d9:75:16:33:81:95:5c:f8:13:9e:bd:
                    97:06:60:42:b1:9a:e6:a1:ed:4d:c9:2e:24:1c:47:
                    32:dd:69:18:52:fd:71:76:f8:e1:63:31:e5:0e:87:
                    38:94:22:86:9d:8f:48:e7:a6:a0:38:54:6c:b0:06:
                    6f:a0:e3:c6:f7:44:3d:0f:88:b0:b7:f2:64:f0:8b:
                    1c:c2:41:1e:30:a1:c6:57:1d:c6:97:54:6b:c9:9c:
                    8c:e8:a5:14:6e:70:f6:f1:72:aa:20:43:86:34:c3:
                    66:28:71:60:b7:7b:dc:2d:f2:ac:7f:3b:9b:76:79:
                    52:04:db:3e:52:43:e6:0f:70:e4:7c:4b:6e:51:35:
                    14:ed:86:8c:10:52:a7:14:5e:81:5a:db:9f:67:a8:
                    1a:94:13:52:0e:96:51:6a:70:72:b3:17:57:f5:eb:
                    e7:e7:51:8f:8a:0b:8d:1c:6c:d3:b2:c1:ce:5a:21:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:52:3B:49:33:59:2F:C7:95:BC:26:C4:BE:6C:59:D2:33:3A:57
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E230CDE0BDD011EA9702FC12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:15:f7:aa:85:27:de:1d:35:7a:ae:ae:ee:f2:06:71:20:
         d6:78:76:d7:e7:dd:d1:cd:96:a8:34:df:bd:a4:c2:d3:e4:df:
         ca:f7:3d:a0:a1:a6:87:dc:e0:7c:1c:8e:b8:f0:ff:86:84:c1:
         97:08:df:a8:71:50:6f:f9:41:ad:da:39:8a:31:68:99:d0:0e:
         ad:3e:5b:5f:0e:06:bd:ee:01:f2:50:c3:8a:c9:b2:bc:34:64:
         4b:8c:a7:27:73:31:fc:6a:03:12:92:49:e6:c2:fc:b4:e7:52:
         5e:ac:45:57:6f:d6:d8:c0:c3:8c:1d:1f:1b:31:38:f3:4e:88:
         7a:da:e5:d6:74:a3:94:ec:68:be:8e:7a:bf:3d:8d:85:01:e5:
         c8:1b:b4:0d:bc:75:df:81:d7:0b:5e:00:51:8d:11:73:27:68:
         32:79:3c:09:57:04:41:5f:4f:d3:84:4b:d0:3a:ae:e5:44:63:
         74:34:b4:e4:f0:14:fc:25:14:6f:40:c6:d9:97:ad:9e:c8:a5:
         73:e3:52:f5:da:a3:4e:59:2b:d6:57:22:35:8e:f8:29:37:89:
         4f:35:c0:36:c6:2e:37:35:30:0d:53:aa:91:37:f1:60:d7:ad:
         17:c7:f8:16:3b:a2:2b:d2:21:f8:84:80:3c:36:5b:85:4f:74:
         71:76:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:39 2026 by rpki-client