Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
File:                     F3301DF6D28411EC9C3B000EC4F9AE02.roa (raw, json)
Hash identifier:          hgEP+qWKXVo6gaJ8SmPL/6H2NzaLVQ9CLdfC7FkQ244=
Subject key identifier:   CF:6E:D0:29:0B:18:56:FF:15:6F:CF:C5:0A:40:24:29:C7:39:D5:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:28:17 +0000
ROA not before:           Mon 06 Jul 2026 17:28:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149531
IP address blocks:        103.182.164.0/23 maxlen: 24
                          2001:df2:a4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62671 (0xf4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:28:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5b0-576b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:91:b3:53:22:79:47:21:4d:df:25:55:59:
                    8c:08:4d:0a:1e:f2:e5:2f:19:45:47:d5:e9:2d:33:
                    66:27:a2:3d:ce:ac:68:6d:b0:ae:bb:dd:81:8e:43:
                    a0:83:19:8a:9c:93:07:86:b9:63:2b:4e:85:35:83:
                    ab:d3:5a:3b:15:36:f5:7a:00:cc:90:2d:a6:02:53:
                    b0:eb:ac:88:41:a3:4f:e9:89:a2:fe:a3:3c:42:3e:
                    cf:ee:36:c8:64:c0:61:2e:99:00:2b:40:15:c3:a9:
                    91:6a:61:6b:5e:e2:f0:fb:fd:fa:cf:6a:b9:4c:f1:
                    78:eb:f4:b5:9f:56:5e:56:36:01:e0:1c:1b:bb:e1:
                    8e:0a:7e:4d:da:89:63:dc:ba:93:11:4b:3b:02:74:
                    78:2b:00:35:48:ef:ba:90:98:93:ea:25:33:a8:4c:
                    d7:c3:b2:ec:01:2d:35:83:f9:73:1e:e6:ef:f6:45:
                    8b:49:25:8d:a7:f3:1d:6b:90:cc:78:6c:02:b6:f6:
                    0a:38:39:53:2e:63:2e:23:c9:c4:06:5b:cc:ea:e3:
                    8e:37:b6:ca:87:23:f8:21:29:bc:f0:12:3c:d3:4b:
                    69:e1:dd:ea:ae:b7:7b:6b:70:ea:10:ed:0e:67:4e:
                    87:d2:7e:07:af:2b:0e:7f:4b:fa:c5:be:a5:d9:51:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:D0:29:0B:18:56:FF:15:6F:CF:C5:0A:40:24:29:C7:39:D5:C9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.164.0/23
                IPv6:
                  2001:df2:a4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:ca:0d:cb:d0:6a:98:d9:0f:a5:ca:1a:34:05:32:05:48:
         31:c5:dc:28:e7:6f:0b:1e:26:4d:29:21:6d:34:6f:96:6c:59:
         87:93:40:0f:fa:2e:50:4a:22:66:d6:ba:7e:58:eb:02:fb:b2:
         7b:6c:f1:d0:77:3e:b7:75:e5:eb:5f:4f:d3:da:4c:5c:26:59:
         61:7a:a2:3a:de:c5:94:6a:23:ab:6b:da:04:2b:56:9e:c6:67:
         15:57:81:e9:04:fd:8c:26:b8:d4:c4:d8:8d:d5:96:8c:95:55:
         2b:fa:1d:1a:6a:18:77:49:ed:76:28:36:08:e5:18:9d:43:9a:
         78:bc:3e:75:77:fb:c9:5d:bf:06:e6:79:67:22:f7:75:28:dd:
         80:44:91:14:c0:c1:a2:e3:bb:36:bb:ea:8c:3c:1c:9b:f7:f5:
         d6:ac:5f:48:ae:bd:84:ca:00:0f:a0:9c:f2:0c:8a:98:2e:67:
         78:cb:cd:c9:f3:42:7e:15:4c:ea:2c:51:ef:a9:40:56:58:be:
         9a:06:b4:57:28:fc:83:14:e3:e8:99:21:35:2a:12:84:a1:43:
         34:a6:99:85:a6:db:04:ee:6c:b3:82:29:1a:3b:2b:b5:23:9f:
         4e:90:d9:0c:05:f9:a2:06:40:93:88:f1:d7:9e:68:dc:a6:8f:
         76:3b:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:19 2026 by rpki-client