Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/00FFBBAA819811F1A4C5D2D5B6EE528E.roa
File:                     00FFBBAA819811F1A4C5D2D5B6EE528E.roa (raw, json)
Hash identifier:          Mgn9urxFYRXZCBiSIJk1n3mIRDNZN9H2QDIv6OhJvgA=
Subject key identifier:   2F:C7:85:43:59:0F:4C:0C:73:37:B1:EE:47:7C:05:25:D9:C8:E2:A9
Certificate issuer:       /CN=A918664E/serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
Certificate serial:       03
Authority key identifier: 51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/00FFBBAA819811F1A4C5D2D5B6EE528E.roa
Signing time:             Fri 17 Jul 2026 04:28:48 +0000
ROA not before:           Fri 17 Jul 2026 04:28:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.122.222.0/24 maxlen: 24
                          2400:f160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
        Validity
            Not Before: Jul 17 04:28:48 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a59af80-8fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:a1:f2:25:7b:48:ab:e7:53:f4:ae:f1:05:
                    d9:a1:3c:6a:ab:11:7a:e6:72:4b:64:1f:3d:fc:cf:
                    67:8f:2e:22:02:e9:39:b2:b3:c1:67:db:f1:15:e6:
                    56:e3:54:dd:65:e2:ac:dd:5e:3f:c8:d2:e5:fe:55:
                    65:23:4e:48:15:36:7d:1e:c2:a7:4d:42:6a:ff:73:
                    52:02:39:b7:7c:b5:11:50:2b:22:a5:e6:90:70:4d:
                    59:69:f9:35:39:fd:56:f5:d4:a4:55:6a:04:7d:34:
                    c6:54:eb:23:df:a4:20:f3:45:ad:ca:90:c1:65:38:
                    8e:72:5a:97:b6:41:08:63:ce:da:51:37:63:65:51:
                    3a:00:8d:e0:3b:67:10:9d:db:e7:dc:fe:e7:da:c5:
                    c2:9f:37:b7:47:22:dd:f1:44:6c:22:5d:bf:a2:df:
                    f4:b6:bf:ac:0e:0a:0c:8a:c1:cc:64:4c:b0:65:c7:
                    50:99:c7:ed:6c:14:74:84:eb:8c:9f:85:c3:ee:f4:
                    c5:c6:8e:fb:fb:27:7a:78:a8:ec:2e:3d:3e:02:03:
                    e5:92:81:2d:d7:b4:3f:5f:cd:fd:3f:21:47:9b:86:
                    c9:07:b5:cf:5e:9b:f0:65:e4:29:90:f2:76:0d:a3:
                    64:78:eb:08:de:b2:7e:b9:7a:93:2c:ef:bc:66:67:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:85:43:59:0F:4C:0C:73:37:B1:EE:47:7C:05:25:D9:C8:E2:A9
            X509v3 Authority Key Identifier:
                keyid:51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/00FFBBAA819811F1A4C5D2D5B6EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.222.0/24
                IPv6:
                  2400:f160::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:2e:83:d1:f6:1a:67:97:ae:64:94:95:c4:33:4b:53:d2:
         0d:53:3a:b4:21:97:6b:c2:c8:0a:66:99:2c:47:b7:a5:f9:b5:
         84:7c:0d:96:5b:3d:06:a2:32:02:13:68:85:1c:4f:64:7c:18:
         74:f8:18:84:68:77:00:f4:e6:8e:ad:ed:5e:e3:e7:5f:83:3d:
         d0:b3:dd:ff:0c:4e:76:cd:4a:85:03:b1:26:28:17:72:c1:00:
         bb:44:78:1e:0f:4a:89:e2:f5:63:d1:4c:d2:9b:60:e0:d6:90:
         b2:1d:54:92:06:c4:a0:11:40:94:2e:ae:c4:bd:ab:19:45:7f:
         ed:e5:df:af:a6:3e:64:c9:12:e1:8b:d8:0c:f8:f2:0b:7e:b4:
         6a:b3:0d:6a:fd:67:9f:95:f8:8d:76:49:06:ab:00:ea:e3:0e:
         64:86:82:3b:7f:ad:b2:bd:3b:b2:d1:33:87:14:5c:d1:e7:ee:
         85:34:ed:18:79:61:83:b8:58:8d:41:ed:7d:7a:ab:8b:1a:1f:
         0c:e7:c1:62:d6:b9:94:9c:49:98:d3:ed:63:48:8e:15:c0:b8:
         80:15:ef:0b:ce:cd:9b:2e:10:3c:5b:92:2d:e0:e0:b0:10:5b:
         59:43:a2:47:26:72:7d:f4:6e:af:7d:f3:7d:6f:bb:cd:c8:61:
         d9:b3:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:18:25 2026 by rpki-client