Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F89B6C3EFE6611EBB771CF1BC4F9AE02.roa
File:                     F89B6C3EFE6611EBB771CF1BC4F9AE02.roa (raw, json)
Hash identifier:          mjjEhnKhPEWHnAyVamX9OkQaziCAJJ4EJCAWgdDdyrk=
Subject key identifier:   DA:34:DE:9E:F9:03:CF:03:98:7F:15:B2:45:4F:84:71:8D:44:E0:BC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F15F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F89B6C3EFE6611EBB771CF1BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:58:53 +0000
ROA not before:           Mon 06 Jul 2026 16:58:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137164
IP address blocks:        103.112.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61791 (0xf15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:58:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdecd-8ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:82:c5:21:9c:20:f0:f8:7a:b6:1d:2b:76:
                    bd:e5:9d:63:6a:6e:37:bc:d6:78:97:05:61:1c:09:
                    96:5b:23:4e:a1:96:5d:42:1e:eb:a7:02:02:5f:2b:
                    95:d5:4e:26:21:63:74:84:eb:53:08:c5:92:6b:c0:
                    05:d7:42:60:40:4e:be:36:a1:fc:6d:a8:65:76:e6:
                    4e:9b:95:7d:ae:7a:ac:7a:fa:08:c4:12:20:8d:52:
                    b4:9a:26:97:a3:9a:20:f2:c0:f1:6f:7c:b1:e0:71:
                    16:b8:19:a9:ff:ed:84:8f:4c:e0:57:dd:d6:4a:f6:
                    10:0a:4d:ee:e9:a6:88:f5:5a:5b:84:02:c2:5f:13:
                    e2:c5:28:3e:27:b3:d1:da:c8:85:99:d1:3c:80:70:
                    12:0d:9f:93:a4:72:4c:c9:b6:f8:79:41:d8:41:f2:
                    72:79:ee:25:b6:77:38:74:66:4c:ce:5f:e6:5c:79:
                    ef:0e:5f:d2:44:ed:cc:2a:b6:ee:b4:92:82:a1:96:
                    c8:d6:a4:48:a5:bc:6d:6a:53:d0:09:26:74:45:44:
                    6a:67:9d:63:9b:b8:db:5d:e5:2f:55:d1:15:c2:9c:
                    c0:36:f2:d4:2d:17:8a:12:bd:83:15:f4:b3:b6:3a:
                    bf:03:8e:3e:51:0d:0d:4a:51:09:46:61:f9:15:c2:
                    4c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:DE:9E:F9:03:CF:03:98:7F:15:B2:45:4F:84:71:8D:44:E0:BC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F89B6C3EFE6611EBB771CF1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:81:2e:1d:eb:dc:5d:1e:1f:53:3b:0f:76:0c:8c:16:c9:
         12:0c:a5:5d:77:fd:da:85:35:a5:35:87:a6:9e:10:c2:5d:2d:
         51:61:4d:f0:23:ee:20:93:44:18:db:03:79:b8:9f:e6:96:0c:
         36:bd:f5:fb:ae:f0:2a:fb:bf:76:e7:f9:5e:87:b5:ef:b6:ce:
         ae:fa:54:25:71:6f:4f:42:96:a9:2a:03:0a:33:97:31:a8:85:
         da:f2:b9:cc:9c:2d:cb:a7:c6:48:3a:20:c1:a0:7f:1f:70:be:
         2d:fd:e5:69:f5:2f:ca:fb:68:06:66:39:dd:1f:d8:ed:bb:fd:
         b8:f7:02:69:8f:04:2b:a0:4c:f8:54:d3:81:17:90:b3:d6:db:
         49:ca:6f:0c:17:dd:b3:fa:35:96:3d:d1:b1:91:b4:50:bb:41:
         d1:74:30:3c:ac:52:4d:94:1a:bd:ce:3c:bd:81:5d:71:34:f7:
         f3:0b:d8:66:dd:ff:07:fe:38:f3:21:25:68:5c:59:9a:1b:83:
         c3:25:98:98:10:9e:89:2f:ec:71:1b:f5:97:f9:3b:b8:bd:78:
         88:cd:c2:db:6b:d7:ba:cb:f8:21:ca:c9:a8:f5:2a:19:0c:09:
         40:ca:98:4f:4b:3b:9d:11:10:f5:e6:bb:16:1e:8f:1e:25:13:
         44:d8:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:34 2026 by rpki-client