Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa
File:                     E68A4C6AAC3811ECAB9D0940C4F9AE02.roa (raw, json)
Hash identifier:          R9KadE74iu+4LSZhMzf1vwbvlIHu56JFtOpcKjYIXCo=
Subject key identifier:   0C:8C:A8:72:82:86:44:8C:05:EF:9B:84:E4:4C:4E:65:96:FB:C8:20
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4D5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:28:30 +0000
ROA not before:           Mon 06 Jul 2026 17:28:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149538
IP address blocks:        103.184.40.0/23 maxlen: 24
                          2001:df1:a240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62677 (0xf4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:28:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5bd-bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:5e:f2:5f:64:0f:86:5f:6a:f6:79:2c:62:
                    e2:0c:65:7b:73:2c:17:d8:ec:4f:c4:a2:38:5d:2d:
                    53:3d:b2:5c:9f:6b:4c:00:d0:11:8b:cd:34:d8:16:
                    1f:53:e7:89:e2:86:f4:b8:ac:e6:b5:c1:b7:a2:39:
                    4d:12:8d:e7:0a:37:37:f6:ed:ef:d2:bf:78:ee:91:
                    67:66:e3:26:08:0a:31:41:c5:18:24:b6:c6:36:c1:
                    d8:bb:11:02:0c:97:d9:0e:e7:87:a8:72:51:29:a4:
                    44:68:cc:97:ca:01:41:95:4f:e9:1f:e9:8e:ad:50:
                    d8:83:02:48:ec:de:b8:22:a4:ef:dc:e8:85:43:50:
                    a5:e1:2c:c6:3f:23:68:ba:4d:52:0a:c6:a7:d2:88:
                    64:50:f0:ff:8f:de:c5:0b:4a:6c:5e:8b:ff:a4:4e:
                    3c:d9:f8:b5:f6:c3:cd:f9:59:8d:cd:ad:6f:43:2a:
                    31:dd:e1:ce:b4:fb:45:02:c7:ea:87:c0:91:f2:18:
                    70:cd:7a:93:27:4f:10:69:3d:eb:34:b7:be:33:34:
                    4c:6f:b4:61:d2:87:18:e7:3a:1e:a5:be:39:02:d1:
                    6e:dc:e9:20:77:c2:d4:d0:61:94:da:f9:e4:a7:d1:
                    f4:bc:72:df:c7:e2:47:f7:64:dc:5e:3d:40:c1:66:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:A8:72:82:86:44:8C:05:EF:9B:84:E4:4C:4E:65:96:FB:C8:20
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.40.0/23
                IPv6:
                  2001:df1:a240::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:33:1e:5a:56:b0:ac:b7:fa:6f:69:ba:d0:04:d6:e0:65:17:
         9c:55:ca:91:ed:68:42:f3:38:b7:73:9b:e6:47:61:77:01:5a:
         68:88:b7:1e:64:8a:bd:4c:ab:23:8f:aa:f9:d8:59:7c:93:a5:
         ce:a1:95:8e:f2:ee:09:49:b6:19:27:54:1e:27:7a:b7:2c:68:
         48:f2:20:c1:b5:e0:7c:ee:d2:83:5d:c4:c1:54:97:ca:42:23:
         ae:57:ce:08:be:e3:0f:ad:67:c5:40:4d:74:26:07:9e:dd:e3:
         1b:97:36:d1:5a:7b:0d:45:ab:2b:ff:a6:11:39:d1:f4:0c:22:
         40:2d:c2:7d:42:c9:ae:55:91:2d:5c:47:60:4d:a5:76:5b:f3:
         48:be:e8:08:32:54:2b:bc:5a:8f:24:19:f4:34:96:a8:2f:17:
         34:0a:f8:f2:01:82:8d:33:05:2f:70:07:61:e1:09:fa:e0:21:
         fd:54:0b:2a:c1:fb:b7:16:b0:44:ff:f9:87:05:78:61:4b:66:
         5b:ba:4f:56:f5:de:fb:69:e8:24:51:20:51:2c:0e:7f:c0:23:
         dd:e4:be:0b:06:16:c6:be:35:85:d6:48:fc:20:57:a1:ea:9d:
         d1:9c:71:ab:77:1a:2b:f1:38:51:41:e3:a1:7a:dc:22:a0:8e:
         5b:d6:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:17 2026 by rpki-client