Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/3329AB14860611F188D398BD79A30FBC.roa
File:                     3329AB14860611F188D398BD79A30FBC.roa (raw, json)
Hash identifier:          s9MG4AtqSHdsd3gX5TM+FCq3eB5Ek6aWf3JSkbBd0xo=
Subject key identifier:   20:B0:94:A1:37:BF:42:92:BF:EF:10:B2:9A:AD:25:53:BE:EF:9E:4F
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       036C
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/3329AB14860611F188D398BD79A30FBC.roa
Signing time:             Wed 22 Jul 2026 19:55:12 +0000
ROA not before:           Wed 22 Jul 2026 19:55:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        103.7.4.0/24 maxlen: 24
                          103.7.5.0/24 maxlen: 24
                          2400:ac20:3000::/36 maxlen: 36
                          2400:ac20:4000::/36 maxlen: 36
                          2400:ac20:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Jul 22 19:55:11 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a61201f-825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:2f:39:9a:ca:6e:aa:57:52:b8:c9:07:82:
                    42:6e:1f:a5:89:c2:39:23:0b:d8:a6:94:0a:e1:79:
                    0e:d7:88:ab:34:30:0a:5f:49:38:97:ca:e1:cf:19:
                    2b:da:c3:af:f0:be:fc:01:d8:08:8b:0d:aa:2b:67:
                    45:87:7d:e1:f5:9c:62:f5:93:65:d8:ad:54:03:f8:
                    c0:cd:dd:e9:0e:e1:9c:5c:9a:50:fb:f3:68:ee:cb:
                    b8:4c:88:77:7c:01:ea:81:1a:3f:2e:2a:87:ef:b7:
                    57:c2:af:46:4e:c4:39:9e:00:6e:d1:f5:69:a0:63:
                    33:73:5f:bb:cd:d2:7b:de:0b:70:49:2e:e9:63:40:
                    4f:7b:fa:21:19:c2:33:cc:d9:03:46:82:c3:72:f2:
                    64:9d:09:fc:b7:00:44:4a:1e:61:38:12:64:a5:d5:
                    ba:13:89:51:b8:67:82:3a:10:0b:6f:a5:ec:69:e9:
                    5a:de:08:17:87:cc:fc:33:92:45:88:b8:ce:26:0b:
                    9f:80:a6:83:e7:ca:d4:0b:8b:fb:0e:42:96:37:16:
                    e2:49:dc:17:6b:64:c3:1b:32:14:9f:cd:e8:da:e8:
                    27:77:54:0b:2a:30:91:eb:7a:d6:01:8f:91:c5:24:
                    e6:9a:13:36:29:f6:d4:f1:d3:29:f8:48:82:d3:6d:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B0:94:A1:37:BF:42:92:BF:EF:10:B2:9A:AD:25:53:BE:EF:9E:4F
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/3329AB14860611F188D398BD79A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.4.0/23
                IPv6:
                  2400:ac20:3000::-2400:ac20:5fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:ee:64:1f:ee:b7:64:41:3a:98:1e:29:05:90:78:f8:b5:
         d9:56:af:b7:42:5d:d6:63:10:3e:74:9b:ae:fd:ee:13:73:2c:
         10:e3:35:6a:04:02:6f:10:10:8d:12:36:82:f2:16:92:be:d2:
         89:bd:d1:38:78:0d:64:73:10:76:47:98:7e:00:4c:d1:59:f7:
         68:f2:ac:83:6f:85:51:3f:3c:07:8b:40:2e:a7:c1:d9:a2:db:
         81:e6:82:47:8c:03:41:0d:87:5f:8a:53:15:dc:55:c0:d2:14:
         fb:55:be:ef:cd:39:36:55:f3:5f:7f:cd:36:a6:cb:41:e1:99:
         fb:13:00:77:c7:79:db:51:d0:5f:1f:37:02:58:58:cc:0c:a1:
         01:51:34:a2:4a:d0:ba:66:76:25:33:3d:e4:e7:97:60:a7:3c:
         2b:d2:31:07:bd:c8:4e:01:26:b0:dc:68:26:98:52:10:00:13:
         4c:e1:08:ae:27:cd:6e:98:0d:4d:3a:da:a3:b3:55:6d:69:c3:
         80:b6:31:07:32:45:ea:28:fd:e3:90:8e:8c:bc:a5:72:51:f6:
         ad:62:ab:1e:02:e2:71:fe:14:27:d6:42:6a:b1:1d:c2:b4:60:
         a8:a0:23:2a:6a:bd:57:5a:c9:fd:33:83:a1:51:bb:e8:d7:7e:
         90:84:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:55 2026 by rpki-client