Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/795666A2F66711EABF40C55BC4F9AE02.roa
File:                     795666A2F66711EABF40C55BC4F9AE02.roa (raw, json)
Hash identifier:          e2UJB7HrUu7Lq9ghzG/tpoiQ05PydT76vV0MY5l1EJo=
Subject key identifier:   D2:64:21:3F:A7:C4:25:58:08:C3:52:5B:BB:47:22:69:51:17:F7:E8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DC64
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/795666A2F66711EABF40C55BC4F9AE02.roa
Signing time:             Mon 23 Mar 2026 08:15:48 +0000
ROA not before:           Mon 23 Mar 2026 08:15:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137667
IP address blocks:        103.117.232.0/22 maxlen: 24
                          2001:df6:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 19:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56420 (0xdc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 23 08:15:48 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69c0f6b4-89be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:2d:7f:59:8e:65:1a:bf:e4:a7:24:7c:fc:
                    a8:e3:be:f5:79:f7:dc:fa:bc:f2:af:96:07:31:db:
                    89:d7:92:2b:b8:41:04:5c:97:f3:de:f2:c1:e1:38:
                    37:9a:7b:5a:2e:24:d4:02:93:e4:f0:64:da:77:e1:
                    66:ef:ce:e5:da:ab:46:85:b9:a4:df:58:f0:3f:84:
                    30:24:88:4e:d2:0f:26:a1:dc:ca:6c:66:7c:ae:68:
                    f2:10:25:d0:d3:d5:72:8c:fd:2d:1d:cf:af:7f:f8:
                    52:89:a7:86:28:95:9c:c2:c9:ce:d2:46:a7:13:5b:
                    d1:4b:bd:c6:cc:43:c5:d9:bb:b7:8f:f6:df:67:39:
                    a0:da:6c:69:be:22:ed:25:6d:4e:30:ef:a4:81:4c:
                    0d:da:f7:10:06:19:1e:00:82:f5:a0:72:ea:c8:f3:
                    0a:81:2a:74:98:32:fd:1d:0b:af:0e:d2:ac:77:a7:
                    27:64:b0:9a:08:55:2e:8b:d4:62:01:e5:df:f2:e4:
                    25:97:60:04:1b:e3:f8:69:cb:e9:84:4e:bb:08:8a:
                    ab:46:73:c4:5d:9b:bb:dd:c5:28:18:7f:36:27:58:
                    b2:a9:c5:5b:ca:13:93:d3:79:ad:2a:1c:06:9a:78:
                    bd:fa:06:b7:ad:4f:51:3f:a2:45:80:d5:2b:7b:e9:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:64:21:3F:A7:C4:25:58:08:C3:52:5B:BB:47:22:69:51:17:F7:E8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/795666A2F66711EABF40C55BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.232.0/22
                IPv6:
                  2001:df6:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:ad:e9:5a:45:d4:b2:ee:63:10:9f:cf:ae:4f:79:f6:52:
         8b:67:bb:93:35:68:53:29:75:45:ee:68:e5:df:c1:e2:db:9c:
         39:8e:42:51:8a:ab:15:89:31:b3:d4:9e:70:66:a9:fb:2f:47:
         0c:d3:55:b9:78:e9:e6:78:89:30:cc:bb:76:79:eb:9c:36:8b:
         bb:4a:8b:a0:2f:ee:ed:a5:59:2b:65:03:01:a2:40:e9:39:1d:
         7c:44:b1:cb:52:fd:95:00:cb:af:48:21:fb:a2:c0:4b:b6:d0:
         07:23:42:1a:d3:8d:7b:e0:b4:30:25:9b:09:d3:e4:19:77:5a:
         10:36:39:f8:a2:71:e4:02:02:ff:03:a2:1a:29:bc:df:b4:77:
         2a:d9:6d:f6:30:4a:42:2b:e7:88:bd:9f:fa:57:19:34:e2:a2:
         6e:9e:71:d1:04:9c:6e:a6:ef:70:5b:6d:fa:27:40:36:1f:e1:
         c6:85:34:bb:af:f5:19:38:5b:4b:a9:33:79:79:70:6b:56:31:
         52:c3:d3:7a:2e:ba:04:95:b7:f0:06:bb:31:70:2b:30:61:aa:
         c8:4e:0a:83:47:4c:c8:5c:2e:a0:2a:72:a0:3b:ea:74:89:15:
         6a:ae:01:3c:cb:87:0e:5b:23:a9:b4:36:7e:1e:2d:cc:20:65:
         9f:b5:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:06 2026 by rpki-client