Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa
File:                     24ACC542BEB311EF9D1D0156C4F9AE02.roa (raw, json)
Hash identifier:          vpRDeMNhQkIYTA0SBwPIZ0YPPC8sQBOy5VAD2JuUjzQ=
Subject key identifier:   25:E4:6D:AC:B4:7F:F2:E3:53:FD:03:C1:C1:1C:92:62:F4:8A:BE:54
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F92B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 07:21:54 +0000
ROA not before:           Thu 23 Jul 2026 07:21:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135269
IP address blocks:        103.75.80.0/24 maxlen: 24
                          103.75.81.0/24 maxlen: 24
                          103.111.70.0/24 maxlen: 24
                          103.171.50.0/24 maxlen: 24
                          103.173.42.0/23 maxlen: 24
                          103.216.68.0/23 maxlen: 24
                          103.216.70.0/23 maxlen: 24
                          157.119.200.0/23 maxlen: 24
                          157.119.202.0/24 maxlen: 24
                          157.119.203.0/24 maxlen: 24
                          2400:c7a0::/32 maxlen: 36
                          2401:d8a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63787 (0xf92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 23 07:21:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a61c111-3358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:4d:84:26:d3:c6:79:46:f4:c0:38:82:e9:
                    b7:4f:b3:65:03:5b:27:64:9d:93:6a:86:e4:bb:27:
                    d1:74:59:ea:11:1c:38:2e:bc:16:8d:f8:b6:c9:6e:
                    b6:85:ac:e8:48:97:20:37:fc:cf:82:76:01:6c:3f:
                    c7:ea:5a:b5:bf:ec:06:49:36:c7:4d:28:f5:d1:02:
                    eb:7b:43:3e:ca:38:34:40:14:10:9c:50:6e:42:3f:
                    65:e2:6a:9f:0f:42:bd:1e:29:ab:86:d9:75:0d:ae:
                    a1:83:9c:35:3a:56:cc:dd:95:c3:88:c1:b2:4b:ab:
                    f9:2a:dd:83:2a:3e:d0:c6:ea:71:91:1d:6a:95:55:
                    fc:bf:c0:c1:46:58:6b:2d:8e:62:a7:71:22:90:0d:
                    34:29:3b:31:0d:cd:46:77:9f:0b:5a:96:c1:fe:21:
                    3d:14:f6:d4:e8:7f:50:b0:3f:be:ec:d9:aa:f0:92:
                    23:33:4c:6a:fe:af:92:8c:84:1c:a4:44:c7:d3:b3:
                    e8:24:1b:a9:5a:77:d1:12:7d:e6:34:45:3a:2f:b2:
                    8d:df:e0:9a:e2:bb:f1:36:64:fe:9c:8f:d0:77:31:
                    93:67:e1:8d:4d:9e:45:0d:ae:10:f8:9c:cb:89:59:
                    c9:1a:66:07:8e:3c:70:d7:bc:41:5f:72:5b:55:ff:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:6D:AC:B4:7F:F2:E3:53:FD:03:C1:C1:1C:92:62:F4:8A:BE:54
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.80.0/23
                  103.111.70.0/24
                  103.171.50.0/24
                  103.173.42.0/23
                  103.216.68.0/22
                  157.119.200.0/22
                IPv6:
                  2400:c7a0::/32
                  2401:d8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:ae:c5:76:98:03:8a:96:01:79:e5:5e:1e:53:88:ae:de:
         de:12:ca:03:6c:68:0e:f8:55:d6:68:93:4e:5f:50:2a:06:32:
         a9:aa:ae:ec:65:91:30:e9:dd:91:42:ab:b5:e3:7a:a2:c9:b2:
         da:42:4d:80:f5:d1:de:40:de:0a:5d:5b:31:a8:ae:36:81:68:
         a1:ff:3e:6b:72:b2:8e:47:1c:c7:59:5a:1d:f4:15:3b:04:e9:
         73:eb:9e:98:69:6d:7e:ca:b4:5e:fe:6a:0c:e9:f9:2a:eb:75:
         2e:a3:cd:e2:cb:1b:9f:7c:53:1f:54:f2:64:3d:8b:9c:2d:76:
         0b:6a:e1:44:3a:b8:06:a5:e5:c4:e7:13:ea:9b:35:43:80:6a:
         9f:f6:5a:3f:0a:0c:66:dd:65:fd:bd:14:c5:0d:e8:6f:f3:78:
         41:96:b5:90:b9:aa:01:57:67:b6:fd:82:5b:9b:72:1e:1a:00:
         08:de:8c:4a:a7:33:04:26:17:36:ef:9b:c1:00:a8:e7:b5:ce:
         be:b6:2a:ce:b2:c3:06:b4:ad:4f:fe:7e:27:aa:97:55:06:9e:
         59:d3:6b:1d:8a:56:4c:fd:93:3f:ef:de:b1:c2:b2:8e:fc:3c:
         69:85:a9:bd:fb:17:7c:e1:61:22:41:e9:17:b7:d8:58:08:13:
         c5:67:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:23 2026 by rpki-client