Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
File:                     FAD6E7AEB67411EDA32C9C33C4F9AE02.roa (raw, json)
Hash identifier:          R6in3ieOkpIHdrKMDRMFLRiWy1G+Pt2aIN4xRVrBPWU=
Subject key identifier:   87:9A:C6:AD:58:AF:CB:4B:7F:71:A6:D5:D1:3E:85:24:38:94:97:A1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:35:08 +0000
ROA not before:           Mon 06 Jul 2026 17:35:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150633
IP address blocks:        103.83.28.0/23 maxlen: 24
                          2400:dba0::/32 maxlen: 32
                          2400:dba0::/40 maxlen: 40
                          2400:dba0:100::/40 maxlen: 40
                          2400:dba0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62880 (0xf5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:35:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be74c-f694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:d7:a8:4e:87:70:10:d6:bb:ef:b3:75:3d:
                    a3:58:9f:a5:4d:3b:3b:4f:4f:1e:80:b1:cf:92:ae:
                    29:bd:f7:8d:f8:41:be:29:26:6a:e4:f4:04:88:30:
                    29:3c:0f:d0:bd:ae:64:38:73:0f:6f:2d:52:9c:13:
                    27:49:cf:13:f4:a9:83:89:4f:e8:5e:15:5a:1d:28:
                    ee:a7:6d:1b:fd:e2:29:5c:86:58:5a:e6:4d:66:5a:
                    34:5f:0f:35:2a:a8:be:bf:d4:05:d7:37:46:a8:fe:
                    ab:1b:6d:13:9f:67:5c:ea:73:00:44:2a:f6:17:c4:
                    b3:42:fa:2d:e4:16:bf:96:93:88:42:71:5e:ac:e2:
                    d5:0d:69:86:d0:bc:3d:5a:94:62:69:60:10:6e:f4:
                    b5:f0:2a:89:42:95:27:7f:f6:ad:e6:52:f0:e1:55:
                    7d:fc:7e:ff:39:1f:8f:5f:50:89:64:17:75:7b:b3:
                    cc:e2:08:0e:88:d8:b5:57:af:23:1a:16:51:cc:14:
                    f8:91:1f:d4:a6:62:df:67:93:4c:1d:e6:eb:bc:bc:
                    62:fe:ee:8c:17:7f:25:43:80:9f:9e:da:f7:57:07:
                    16:e3:e7:30:1d:1c:e9:38:14:fd:f4:74:dc:61:7c:
                    e4:5c:8b:0b:79:3f:55:ff:5b:75:07:fd:13:83:c0:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9A:C6:AD:58:AF:CB:4B:7F:71:A6:D5:D1:3E:85:24:38:94:97:A1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.28.0/23
                IPv6:
                  2400:dba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:16:ad:14:0e:06:6c:4d:81:59:0d:f7:02:9a:84:8b:fc:f7:
         b0:4a:53:b9:5c:23:84:7e:ef:ed:78:47:cc:a9:41:74:29:ef:
         2b:58:8b:d4:a4:7a:11:7a:3f:d5:25:3f:4d:55:3b:14:c0:4b:
         30:0c:35:3c:57:a3:80:b6:f3:3e:17:c7:a2:46:8c:44:43:9b:
         4f:2b:23:28:ed:3a:27:71:bb:51:6b:90:c3:db:b2:47:7c:83:
         c3:b1:f1:f5:56:64:8c:7b:79:aa:58:29:32:82:6e:04:77:64:
         de:6d:3f:e1:d4:f0:76:72:34:41:0f:73:a5:fc:40:db:1c:84:
         46:ad:75:16:d9:c9:b3:86:a3:cd:e5:33:54:c2:58:80:18:5e:
         39:ab:5a:25:e7:0a:d5:02:f9:35:b8:59:9c:fb:e6:9b:70:33:
         fb:98:28:c7:ab:1d:c5:fc:b4:57:ad:8f:6c:89:54:88:62:f5:
         9b:9b:64:71:66:61:51:da:ef:11:79:a3:27:41:af:c3:96:de:
         24:35:08:69:e0:7b:ac:de:96:5e:36:c3:d1:68:db:85:61:9a:
         9a:09:bb:72:fc:6a:0a:06:3b:c4:3f:dc:2f:b3:9f:c1:c3:18:
         55:94:76:f6:ec:7a:5c:d9:f2:bf:64:fd:dd:f2:ad:0b:32:58:
         6d:92:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:44 2026 by rpki-client