Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa
File:                     E8195170EE1E11EC8758DF47C4F9AE02.roa (raw, json)
Hash identifier:          juMaL7iZ19S/U9oeb+WyjDhBvlu9hJ8cGhRng/KStMA=
Subject key identifier:   13:1A:3C:23:FF:5E:94:30:80:0C:88:EA:75:BF:A6:78:AB:29:8A:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4FC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:29:43 +0000
ROA not before:           Mon 06 Jul 2026 17:29:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149586
IP address blocks:        103.186.236.0/23 maxlen: 24
                          2001:df1:27c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62716 (0xf4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:29:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be606-6b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:d4:0a:82:5f:9b:59:53:25:1c:71:8b:a7:
                    9c:6d:ea:e0:25:e9:3d:11:15:49:c3:8f:31:da:75:
                    19:20:3a:e4:cc:f1:c6:08:f5:4f:a9:8f:d8:f7:e2:
                    c0:bf:a3:9f:3b:0b:d2:01:31:7b:5c:db:46:02:8f:
                    35:ac:dd:bf:e3:fb:0f:25:9a:7c:38:10:a0:92:00:
                    c5:f1:1e:6e:d3:14:98:ff:1f:89:0c:52:31:51:ef:
                    5d:ba:af:2f:5a:57:55:79:78:3d:cf:24:c5:3d:2d:
                    05:a7:10:6f:10:c1:68:d1:22:78:1e:1a:a5:d8:bb:
                    8a:89:33:93:9a:9b:59:cd:d9:9d:7f:16:6e:98:34:
                    f4:9b:ad:33:28:fb:02:36:ec:bb:42:31:c2:7a:d5:
                    af:a2:2a:f8:88:33:9d:c7:6b:d2:13:6d:8a:a5:f9:
                    87:1f:40:b7:67:8f:d3:20:9d:36:16:f9:cf:23:a4:
                    ee:77:29:31:22:17:3f:78:99:5c:06:48:ff:f2:4d:
                    1f:5e:ac:51:29:71:e9:88:18:2e:da:1c:49:27:10:
                    51:85:51:6c:08:fa:37:e4:bc:dd:4b:38:b2:44:12:
                    2f:ee:f5:c8:3f:2f:e5:f9:f6:a2:b6:30:76:2d:f9:
                    93:47:93:6c:9a:9e:71:19:c2:ee:ac:60:e7:06:bb:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:3C:23:FF:5E:94:30:80:0C:88:EA:75:BF:A6:78:AB:29:8A:F2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.236.0/23
                IPv6:
                  2001:df1:27c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:b6:31:40:36:8c:35:ed:07:44:b4:a0:fb:3c:04:bf:5e:
         94:47:10:af:4b:a6:3b:55:fe:e6:df:36:af:3a:7b:0c:0f:d1:
         86:1c:c8:1d:77:f2:04:18:69:38:00:bd:7a:f2:d6:40:93:75:
         37:eb:0d:81:09:78:a9:61:48:d4:94:53:eb:45:34:78:de:94:
         2a:89:30:65:cf:72:22:ca:61:9c:6b:19:be:f4:56:62:8c:3b:
         a6:61:5d:d6:99:b6:72:5f:b9:ad:24:33:14:69:80:91:30:1d:
         a1:00:ad:31:7a:5a:11:ca:e0:d9:41:50:dd:ad:52:68:3d:54:
         81:a4:5e:8f:dd:7d:11:85:47:ef:6c:af:ba:71:82:66:66:40:
         08:29:51:28:2f:cd:8b:f7:52:99:f0:bc:b9:86:e3:e8:f3:a8:
         07:77:22:1e:0d:75:2a:d3:8d:34:66:7e:e6:53:fb:8a:38:22:
         c0:f0:4b:95:f1:b3:08:8a:60:4d:98:77:1e:be:05:88:22:bb:
         fa:56:9d:ff:b0:bb:d9:03:db:32:16:03:97:ac:3e:94:fe:66:
         f8:2a:ff:7a:26:5d:5f:16:84:99:d0:25:ce:e2:fc:09:2c:bd:
         4e:12:98:0a:a9:a0:fd:d4:73:6c:56:4a:6f:43:55:44:78:ef:
         9a:da:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:40 2026 by rpki-client