Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
File:                     7AF2C29C50C811F09EF54B31C4F9AE02.roa (raw, json)
Hash identifier:          Sta5WGK3SLfZNqv60mjDXNcBJ4MqqUXVVGVFSVrI1q4=
Subject key identifier:   67:01:6C:C5:1F:A5:A5:7D:F5:F8:05:19:B6:EE:D4:4F:CD:63:42:2D
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1AAC
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 17:17:32 +0000
ROA not before:           Wed 22 Jul 2026 17:17:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135567
IP address blocks:        103.70.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6828 (0x1aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jul 22 17:17:32 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a60fb2c-3491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:48:39:c7:cb:6f:c2:77:0b:7e:09:0b:41:
                    14:24:05:b0:c9:6c:61:91:59:6b:40:25:4e:fa:36:
                    2a:aa:5d:64:8a:66:c6:6d:8d:03:fc:79:dc:b5:48:
                    94:6f:7d:95:d5:cc:1d:99:86:36:13:79:e0:3c:3e:
                    5e:f5:9c:8c:6c:7f:a9:1f:c8:77:dd:b3:f4:f7:3f:
                    b1:20:9d:a4:e8:f7:09:3c:4d:51:26:6b:b0:f3:50:
                    4d:2e:30:9d:5f:1c:78:5c:72:34:de:2c:64:91:37:
                    bf:ae:97:4d:a5:16:b3:e3:a0:7f:e4:b7:0b:e2:45:
                    52:01:4e:d7:b5:dc:f7:cb:b0:35:f4:8e:64:fa:90:
                    7f:fd:db:3e:89:fb:d7:d5:06:a5:8c:f2:1e:6e:08:
                    d7:a2:ac:71:72:c2:a2:b2:c6:09:30:07:06:d3:86:
                    e7:10:40:2f:45:30:44:92:b7:b3:8b:01:60:ab:e1:
                    89:4d:f0:44:86:66:1f:95:73:46:a1:4c:b4:98:34:
                    cc:d9:ef:8d:ea:49:e6:b7:33:a3:04:05:58:e6:6c:
                    2b:6b:66:0f:50:8c:e4:70:2d:21:ec:db:eb:70:64:
                    f2:4c:52:a6:39:d4:79:d3:32:4a:3c:e8:73:a8:bd:
                    cd:fa:62:ae:89:ac:19:7a:5e:a9:f5:ef:e3:a7:ff:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:6C:C5:1F:A5:A5:7D:F5:F8:05:19:B6:EE:D4:4F:CD:63:42:2D
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:7a:32:7e:ea:81:51:86:c3:f5:7d:42:ac:67:5b:d0:1b:
         6a:9c:d7:43:59:ed:e3:d9:bf:07:c3:8b:84:3a:9d:b2:01:2a:
         56:ad:2a:99:d4:84:81:bb:d0:b0:2a:17:84:16:e4:49:5e:2b:
         b5:9b:5c:8f:0a:a8:c1:d9:6c:15:b1:f4:9c:1c:3f:1b:26:f1:
         a0:8a:02:5c:70:6c:d5:1d:ad:f8:cb:bf:2f:34:e3:02:8b:81:
         e2:0f:aa:0f:a3:37:35:ba:4f:20:67:8a:4a:a1:63:29:17:77:
         98:5a:95:90:92:83:de:f7:57:6d:c2:d4:72:f0:55:9d:2e:a0:
         bf:f5:d3:37:89:4a:81:c6:5c:3e:05:d3:ca:50:82:09:23:e8:
         36:da:84:fe:26:82:07:cc:8e:dc:9b:13:bf:c3:d8:b7:74:01:
         cb:10:00:d8:2c:1f:17:e2:29:1e:90:06:06:59:50:f4:f9:4c:
         f7:3b:0d:34:28:be:6c:d1:47:33:ba:b8:43:7e:de:e9:99:ef:
         be:4c:69:a9:36:94:47:af:03:fb:fe:d3:62:c5:f6:05:0c:41:
         60:da:39:1c:ca:f9:1b:6d:c0:2d:7d:39:37:2d:5a:b5:ca:b9:
         77:ce:d8:12:d2:fb:67:03:bc:c8:24:94:5e:6e:02:b9:3b:bd:
         cc:b9:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:56 2026 by rpki-client