Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa
File:                     E3F6B89CC8F711EF941DF45EC4F9AE02.roa (raw, json)
Hash identifier:          54RdxweRX3yzypnk9Ylo/0JchssGdKxPl1iSWESfex8=
Subject key identifier:   76:1B:67:73:9D:E1:19:94:8E:39:B0:FA:65:45:3E:28:B6:E6:EE:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE86
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:35:15 +0000
ROA not before:           Mon 06 Jul 2026 16:35:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133298
IP address blocks:        103.157.128.0/23 maxlen: 24
                          2402:45e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61062 (0xee86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:35:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd943-8669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:d4:97:18:83:3a:82:12:6a:39:f7:11:34:
                    39:4c:79:f3:b4:8f:48:0c:d9:bf:a3:bd:35:f2:6d:
                    0e:27:22:53:16:b8:1b:e0:87:58:0b:10:c9:a1:51:
                    0e:93:d7:bc:3e:70:f7:57:2b:5b:f7:6f:80:5d:1a:
                    8f:e5:05:b0:eb:71:f8:22:a0:55:33:5c:48:ea:6a:
                    ae:88:2d:b6:64:e1:21:e2:8c:06:d8:0c:51:b1:67:
                    90:d1:15:16:01:13:80:de:3e:a1:40:f1:04:f5:77:
                    20:29:35:bc:4a:4d:93:57:ad:70:7d:a6:46:22:41:
                    a8:b7:6a:65:a7:30:7b:ac:60:35:a2:d1:0a:ba:f9:
                    28:ad:89:7f:e1:17:15:24:e7:62:6a:34:c6:78:95:
                    ba:48:a0:76:5f:74:dd:93:c3:fe:c0:a6:00:0f:d1:
                    c7:1e:96:fc:83:44:87:78:ad:67:12:e9:ad:79:1e:
                    69:3e:c2:c3:54:10:d0:90:c4:17:93:b9:5e:e6:4c:
                    ed:11:e5:57:a4:16:0b:84:95:d5:4c:3d:40:d0:4e:
                    0e:c2:35:8e:fd:6b:3d:79:c6:63:3c:3f:b1:35:1e:
                    d1:cc:42:04:25:1a:20:92:29:96:a0:6b:69:32:0e:
                    09:4f:d0:89:31:45:b4:f2:0d:12:6d:05:f7:f0:2b:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1B:67:73:9D:E1:19:94:8E:39:B0:FA:65:45:3E:28:B6:E6:EE:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3F6B89CC8F711EF941DF45EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.128.0/23
                IPv6:
                  2402:45e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:af:39:06:fc:82:f8:1c:4d:4c:4f:a4:88:f8:72:36:b0:
         0c:da:d1:95:8a:77:51:a0:97:fd:a7:3c:9e:46:a5:ba:27:98:
         92:aa:c3:25:85:0b:0a:f0:c1:65:13:c8:3a:c3:f0:04:9f:8a:
         43:fa:0a:72:ad:90:95:8e:42:83:64:3a:6d:27:3c:37:f8:a6:
         55:0d:cd:67:37:12:44:01:8d:f4:c3:f9:d1:a5:8a:54:30:25:
         50:cc:39:3d:c6:96:74:2b:10:51:f7:a4:e1:f1:a9:c0:42:52:
         45:43:23:55:49:7c:da:e5:77:a5:cf:e7:24:10:28:2d:4b:1a:
         da:f0:07:d2:e4:d8:ef:41:21:1b:8f:6b:c4:73:cd:5b:a9:d8:
         b5:3b:27:4c:16:77:72:0b:b6:3b:6b:57:f1:da:b5:56:6d:78:
         62:ca:75:81:4f:0d:cd:d9:7d:93:fd:4b:cf:4e:d0:ab:22:1a:
         02:4e:fb:d0:b9:c1:8f:fd:2c:c2:1c:67:fa:94:9f:cc:1a:93:
         74:cb:0b:14:af:4b:12:f1:e2:d5:d9:68:3c:ef:0d:1d:15:f7:
         c9:2d:ab:71:df:42:7a:e6:85:09:94:0d:79:0e:6c:0c:42:6a:
         1c:94:c2:e5:e1:df:ae:d2:47:e7:23:68:a9:6f:01:1c:fd:70:
         d1:19:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:50 2026 by rpki-client