Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/7FA6A66E072511F18DD83FDE2B3D8C67.roa
File:                     7FA6A66E072511F18DD83FDE2B3D8C67.roa (raw, json)
Hash identifier:          eQqlL71/p1sNSKb5Ex9TeNmIs+RfO86ZYPmbwnWNKa4=
Subject key identifier:   C4:8E:BC:F6:B8:EA:51:2A:DD:24:0B:99:9E:64:BF:DB:40:D8:3B:98
Certificate issuer:       /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Certificate serial:       5D
Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/7FA6A66E072511F18DD83FDE2B3D8C67.roa
Signing time:             Fri 31 Jul 2026 09:58:27 +0000
ROA not before:           Fri 31 Jul 2026 09:58:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136777
IP address blocks:        103.95.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
                          rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D
        Validity
            Not Before: Jul 31 09:58:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c71c3-066e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:0c:a8:58:16:1d:06:b9:0e:d5:be:c9:ee:
                    64:6a:62:76:86:e1:5a:af:11:ee:ed:60:b1:f6:af:
                    0a:45:40:40:3b:3b:62:40:36:b3:3a:7d:a3:7b:f7:
                    ad:78:e8:ff:50:7a:5e:97:9e:51:bf:9f:61:2a:d7:
                    0b:9b:10:e6:95:b9:51:e0:da:00:0b:cf:ff:b3:62:
                    81:ec:34:1a:ec:5d:85:45:d9:5c:fe:a6:fe:f1:ef:
                    55:33:5b:8e:98:cb:1f:f4:f8:9c:fa:3c:ca:d6:93:
                    e4:0b:1b:87:58:fc:30:8c:3f:70:a5:a1:c4:b5:94:
                    e1:49:a5:4e:cd:7d:ec:3a:e1:15:ff:52:ab:b6:3e:
                    a8:29:b1:7d:73:52:fa:6a:84:8d:ab:de:4b:b6:97:
                    be:ea:55:4c:7c:1b:6b:67:19:39:1a:2c:e9:ce:6a:
                    ab:80:f4:db:02:a6:85:6e:aa:3b:b2:da:76:5f:6b:
                    a5:d3:79:df:63:b7:c4:27:a7:57:a9:b9:e1:cc:bf:
                    2f:d1:55:0b:e5:0e:ce:e3:44:86:dc:c3:47:4b:a5:
                    70:f7:93:f0:c5:cc:f8:9f:3e:b9:78:08:80:f9:50:
                    be:bc:61:41:68:bf:7d:d8:ab:15:00:f8:cc:33:01:
                    6e:c8:f5:28:58:c6:2d:eb:26:7b:8c:c1:49:c4:cb:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:BC:F6:B8:EA:51:2A:DD:24:0B:99:9E:64:BF:DB:40:D8:3B:98
            X509v3 Authority Key Identifier:
                keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/7FA6A66E072511F18DD83FDE2B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:ca:e8:c2:c8:b7:33:67:3d:9c:6e:e4:98:c2:bb:a5:88:
         c7:8f:37:e2:d8:ce:7b:32:ad:2a:75:a8:5c:17:81:fd:df:8b:
         f4:3f:7e:83:16:3f:d5:ae:8e:c0:2f:8e:56:c9:c9:67:4f:ae:
         69:e6:c8:68:48:35:dd:44:3e:4b:d5:fd:c8:32:14:ef:54:75:
         84:b4:22:c4:a3:d5:96:6b:40:b4:d1:75:53:e3:fc:0b:c4:a2:
         fd:06:81:7e:13:82:15:ec:25:05:60:fe:84:6f:da:59:06:43:
         6f:b0:d7:ce:1b:21:22:d5:b2:13:90:e8:b9:6f:0e:48:cb:46:
         45:3e:ac:ed:9e:f6:24:14:05:51:a4:95:14:93:0f:da:8e:27:
         52:c3:b8:9d:6a:6b:2e:03:de:d6:e5:15:3c:0d:1a:65:64:48:
         1b:28:c8:3d:8d:d7:55:4e:52:a3:88:2b:e1:78:c1:e5:6e:95:
         66:8f:68:6d:b3:f6:64:e9:fd:0b:8a:12:29:2a:9b:d1:cb:e7:
         8c:49:d3:92:e7:bd:69:38:ba:d9:48:4b:03:86:59:52:b1:0c:
         7d:00:40:fa:ae:34:8e:9a:92:97:eb:6f:24:2b:29:d7:79:80:
         89:ec:29:f3:31:95:c1:9b:84:a7:b9:81:4a:9d:fb:24:a8:41:
         63:a1:d8:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:49:57 2026 by rpki-client