Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa
File:                     E857D1623ABB11EE80089656C4F9AE02.roa (raw, json)
Hash identifier:          itA+hhxh4/46yzaO/G0LUD1a2txcrbLhWsp4am0UJSI=
Subject key identifier:   37:1C:2E:F2:89:C5:42:EC:33:A3:C4:66:F7:CB:13:4F:72:96:11:DA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:29:17 +0000
ROA not before:           Mon 06 Jul 2026 17:29:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149570
IP address blocks:        103.186.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62703 (0xf4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:29:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5ed-9cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:be:57:62:6c:13:2f:b3:aa:1a:9a:97:a3:
                    c2:38:e1:2a:8c:93:ec:20:c9:0e:a5:31:b4:0c:70:
                    46:47:ad:7e:f9:af:42:70:bb:bb:42:28:4e:dd:be:
                    09:37:2c:3c:16:81:27:d3:29:0b:43:b6:d8:84:a9:
                    68:57:7f:6d:73:2f:52:ae:d7:bb:00:c9:09:73:b0:
                    c5:8c:a0:93:1d:72:73:f8:dc:fe:7c:e2:fd:2b:b4:
                    b5:4e:89:55:92:13:2c:2c:6f:82:c5:1a:29:b5:c0:
                    fd:3e:68:dc:05:d8:9c:d7:aa:cf:47:43:77:00:ee:
                    c7:37:17:8c:b8:66:f8:89:69:e8:a9:aa:d9:07:f8:
                    5a:17:e0:91:de:53:c7:3b:b2:6d:4c:85:d1:7f:55:
                    e8:c7:bd:f5:42:f0:79:a2:ab:cc:1d:9f:eb:24:e1:
                    92:71:8c:cb:b6:f7:9c:be:2a:75:8f:c1:d2:e8:39:
                    2e:bc:43:a1:1c:33:06:fd:d5:96:88:91:b2:b3:fc:
                    34:6f:4b:68:1c:72:20:f4:9d:60:6d:d9:cf:eb:36:
                    46:35:6d:94:e3:da:5e:00:d5:13:c4:b4:11:f1:dd:
                    f9:d7:53:ee:f8:8b:e6:4e:10:55:c3:da:e1:30:05:
                    cf:a6:b6:dd:67:46:1e:79:5e:b7:ff:b1:2c:23:81:
                    7b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:2E:F2:89:C5:42:EC:33:A3:C4:66:F7:CB:13:4F:72:96:11:DA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E857D1623ABB11EE80089656C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:40:e2:81:9d:12:9f:ee:65:c0:16:fc:57:2d:c4:3a:39:
         22:67:cc:72:02:15:6c:f8:43:64:32:38:f2:5d:6e:5d:3c:91:
         7d:16:c0:8a:0e:a9:2f:9e:7f:ae:a6:9c:64:43:63:c3:0c:32:
         32:c6:ca:26:5e:d8:36:af:3f:a0:c8:46:4a:ef:95:c2:2b:73:
         c2:e3:8f:e1:60:7b:0f:7b:a6:7a:2e:fd:68:f7:58:54:ee:c5:
         42:97:d3:fc:39:f0:00:06:aa:96:2e:d9:0e:1b:59:e7:4e:2f:
         54:98:60:25:7e:68:1f:d8:d5:1e:aa:24:2d:6a:a8:07:c0:8e:
         36:d7:3f:59:5a:d5:70:ef:02:0e:ea:80:3f:e0:6f:98:02:c2:
         8d:d8:61:a2:50:b1:6f:ba:9a:dd:e7:ae:f9:dd:7b:b6:a3:d7:
         36:26:d9:95:fa:83:aa:e2:c0:f0:fd:2d:ee:9f:cc:51:11:68:
         51:39:e9:08:3b:7b:e7:32:eb:ca:07:eb:5d:21:3e:9a:5d:88:
         1e:15:d7:0a:bd:8d:74:49:f6:3d:a6:4b:2c:2a:8b:6f:27:c8:
         5b:c2:50:62:90:8e:0f:1c:3f:c5:ca:09:d9:30:f9:bb:c5:c9:
         cf:34:57:45:25:2f:98:38:0e:94:a0:83:24:d7:5e:81:77:1a:
         b8:62:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:51 2026 by rpki-client