Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa
File:                     F5C7D0AEB27B11EDA534877FC4F9AE02.roa (raw, json)
Hash identifier:          K3/f86B6MpnFX4TpPbrjztDH7JZDQRuL56ALxLRYfWY=
Subject key identifier:   3C:7E:5D:7A:9A:E6:47:4C:71:63:13:6A:16:38:30:65:A4:4C:44:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F56B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:33:29 +0000
ROA not before:           Mon 06 Jul 2026 17:33:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150570
IP address blocks:        103.91.224.0/23 maxlen: 24
                          2001:df2:2c0::/48 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62827 (0xf56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:33:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be6e9-378f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:e3:9b:b4:ed:e0:a8:fc:ce:26:0a:50:06:
                    2c:de:3d:58:59:ac:97:7a:ba:5c:d2:06:45:74:2a:
                    ad:0c:7e:41:45:f7:f8:bb:d2:2e:0a:f0:4a:1c:90:
                    69:e5:a3:68:d5:61:29:90:9d:0f:38:67:9d:d9:e9:
                    5c:ba:f7:82:5e:db:6f:a7:57:c0:e6:74:b1:06:fa:
                    56:f2:c1:7d:d8:ab:2d:eb:c9:7c:ba:ef:81:a0:a6:
                    83:b5:07:e7:1d:70:3c:63:de:d2:57:8f:60:7b:58:
                    5e:0a:10:e8:2f:0f:2f:36:d0:77:0e:33:b5:44:bd:
                    c2:81:80:f4:e5:37:9b:5b:aa:2f:a2:80:84:03:18:
                    e7:1f:b1:0b:8e:2c:63:c8:65:cf:26:a3:49:7f:25:
                    b7:bd:1c:31:1b:b9:a9:99:08:d5:fc:6c:34:f1:21:
                    72:66:1e:6a:34:13:41:73:9c:09:55:34:f8:0a:d7:
                    0e:c3:0f:43:87:35:1f:4e:8f:49:15:e8:9d:e8:99:
                    ec:f8:c7:0e:af:f3:0d:26:68:f9:00:48:25:17:f7:
                    99:41:b6:ab:03:0a:05:6d:5e:57:c5:23:01:c7:46:
                    67:f6:dd:a5:2f:7f:39:6f:bb:1b:51:61:36:8a:db:
                    bc:b9:06:53:6b:fb:fe:c0:e7:c7:87:56:f5:8a:b7:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:5D:7A:9A:E6:47:4C:71:63:13:6A:16:38:30:65:A4:4C:44:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.224.0/23
                IPv6:
                  2001:df2:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:9c:b6:53:e8:2e:24:b6:3e:f1:3a:2f:36:32:31:91:4c:d0:
         e3:45:84:2d:ee:50:61:53:fc:7a:cb:2c:58:13:a1:09:63:ca:
         43:c8:22:9f:80:3d:d0:fc:55:0d:80:a8:6c:ef:ca:de:50:79:
         81:a6:9e:3e:c8:59:af:27:93:30:6d:f0:cc:df:11:34:d3:3b:
         9a:85:39:b0:be:9d:66:ea:78:c7:35:d0:62:24:35:7d:be:c7:
         b5:ee:25:93:2f:52:c4:4f:4a:8e:78:49:e1:4d:f5:ca:fb:89:
         bd:fe:b3:bb:2d:c9:38:57:fe:0f:61:9c:e8:aa:f8:28:3a:18:
         19:4e:1b:6b:ec:e4:4d:78:3e:72:6c:70:a5:f5:52:e7:fc:f8:
         22:6c:2d:05:35:35:b2:7c:d8:24:e3:92:e1:2d:47:ff:aa:fa:
         3e:d8:c5:e0:79:03:30:8a:f4:bb:0d:12:c5:67:ba:44:fb:1a:
         cd:87:5f:57:38:33:63:d3:94:6e:ea:8d:45:b6:b9:bf:7e:be:
         f8:3f:78:23:84:85:91:2a:18:be:a0:79:ea:e3:63:e9:45:d6:
         7d:af:0e:f2:db:de:81:ba:66:86:60:55:7e:ab:ae:74:2f:fe:
         18:3b:15:71:e4:a1:ac:e6:e8:c3:27:32:da:40:fc:39:7f:13:
         2c:36:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:10 2026 by rpki-client