Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
File:                     E8118BFA022C11EBAC47A831C4F9AE02.roa (raw, json)
Hash identifier:          ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=
Subject key identifier:   96:10:80:CC:E4:47:BB:70:89:BA:FB:57:30:FA:3E:9F:EB:FE:B1:60
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       18B7
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 17:19:46 +0000
ROA not before:           Thu 04 Jun 2026 17:19:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132585
IP address blocks:        203.198.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 16:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6327 (0x18b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: Jun  4 17:19:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21b3b2-e15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:45:f7:02:36:a3:ab:86:5f:ee:ea:f4:a0:
                    4f:38:ef:e2:e6:a4:fd:88:da:9f:b4:bb:ef:a1:ed:
                    b8:26:80:7f:93:15:f8:cd:50:a5:b7:a1:3c:ee:d4:
                    11:8c:25:64:36:ee:39:76:bd:f7:02:c2:3f:d4:21:
                    43:31:65:04:36:61:1f:23:52:7a:e7:15:ed:2a:bf:
                    d7:01:ac:f2:09:f3:28:55:b0:95:db:2e:e9:4a:c5:
                    c5:40:04:04:1c:70:21:45:4a:b3:c8:b0:67:c8:84:
                    6e:6c:57:6b:28:8e:5d:f6:18:70:d2:c3:b1:62:c7:
                    58:9b:4a:db:09:a2:bb:5b:6d:ee:d7:5c:32:e0:a2:
                    69:e2:bd:4e:48:08:62:d7:3c:5b:8a:cf:b0:5a:7e:
                    64:5e:f6:53:84:73:6e:39:5f:fa:ea:95:46:82:d0:
                    4e:40:c3:20:fb:9e:03:01:d4:5d:15:72:6e:fc:f3:
                    f7:63:91:ee:8b:f9:66:2b:34:e3:0b:90:a9:fa:4e:
                    15:c1:25:9c:1d:1b:5a:08:b4:13:b0:24:70:89:8f:
                    2e:70:00:09:5f:57:57:8d:d0:0d:d7:3a:d2:f6:80:
                    7d:f6:6f:8b:a5:04:1d:67:36:07:a9:6f:58:41:b0:
                    e4:78:c7:74:75:1e:f2:13:69:45:df:4c:57:36:92:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:80:CC:E4:47:BB:70:89:BA:FB:57:30:FA:3E:9F:EB:FE:B1:60
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.198.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:39:2f:71:68:7b:57:98:5d:23:a6:8b:fe:8c:02:79:2e:0d:
         78:83:46:54:52:e9:84:04:0a:83:ba:c9:94:5f:fb:eb:1f:04:
         f2:a8:a4:52:eb:4e:45:ad:a4:9f:69:95:ea:29:6b:03:ce:b7:
         c3:58:c1:af:ad:a2:50:37:c4:38:45:e1:4d:81:2d:ce:dd:49:
         ca:d1:61:d6:73:df:59:d0:2e:e3:54:07:a4:f3:53:66:27:6e:
         02:a0:4b:25:40:56:9d:1e:ec:b2:4e:27:40:93:cb:ff:65:e5:
         4d:87:a1:55:c1:d7:4f:78:61:12:be:fe:3b:a4:6a:52:ef:0f:
         80:91:48:a0:74:33:e1:4b:43:d7:42:c2:ac:56:4c:95:22:f6:
         6a:d7:ce:23:42:a9:65:9e:01:7a:d8:b9:5a:b0:92:b2:f7:bc:
         e6:ae:1f:1d:8a:22:82:ef:d8:ab:59:e3:dc:d9:8d:f6:a6:30:
         59:17:30:b5:4f:b7:52:7f:e8:03:8a:e9:aa:5b:5c:d2:3a:e9:
         2e:67:ac:7c:49:0d:78:9d:e8:3c:6a:d7:d9:48:1e:0e:e4:9d:
         4e:38:19:7e:3e:c8:c9:5a:37:ab:21:c4:3e:ad:2f:09:3f:a0:
         95:09:bb:92:e8:72:54:dc:2c:d2:8d:d7:b5:82:03:7c:12:82:
         10:d8:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:46:17 2026 by rpki-client