Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa
File:                     8065DE3E355D11F0A8C7F559C4F9AE02.roa (raw, json)
Hash identifier:          A40clfmAKuJ8DEHrvMmO8Qnj68wptppXgv295ggRwK0=
Subject key identifier:   3C:F7:4E:5A:C5:47:5A:0F:0D:25:C7:0E:F4:CA:DA:B3:38:0B:C6:7D
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       07C3
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 22:23:11 +0000
ROA not before:           Mon 06 Jul 2026 22:23:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133731
IP address blocks:        43.254.216.0/22 maxlen: 22
                          103.238.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  6 22:23:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c2acf-3e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:b9:8d:01:7d:d5:9f:af:e5:13:af:76:4a:
                    39:0e:70:4c:78:aa:92:4e:02:6b:d7:fe:ff:50:6c:
                    f5:8f:4c:7b:69:3f:bf:ec:62:ad:23:e3:17:9d:97:
                    7a:80:7f:00:a8:36:6a:ec:e2:73:41:83:32:62:9b:
                    4b:ac:4f:89:a3:d1:74:45:83:e8:c6:73:9f:fb:2f:
                    bf:7b:a7:c1:51:24:76:ce:f7:d2:16:8b:af:ea:87:
                    7c:c9:01:83:a0:73:1d:87:59:2d:f5:a7:32:35:0c:
                    bb:a2:b3:f9:31:11:49:4d:52:0f:38:e5:61:03:b6:
                    e0:4b:b1:fb:51:7a:c2:ba:5b:9c:b0:b6:d5:aa:de:
                    f6:54:05:bc:49:13:e7:78:d5:61:b3:a3:67:a6:95:
                    11:00:bb:2a:1a:d4:f0:c9:67:db:b1:69:1a:a5:77:
                    2c:32:ed:6c:78:a7:01:1b:54:f5:dc:42:d9:31:62:
                    2d:a3:dc:96:3e:0d:87:ff:23:b1:2e:7f:76:2e:2b:
                    55:e6:2a:39:59:10:0b:da:37:13:42:20:4c:ac:2c:
                    29:fb:52:af:ff:c3:46:3f:ec:b0:d4:6e:e8:0a:67:
                    b8:27:d6:94:42:fd:d9:7a:8d:e1:1a:ba:95:99:4f:
                    53:1c:ca:cc:9a:c6:11:44:c1:15:89:8b:f4:70:43:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:4E:5A:C5:47:5A:0F:0D:25:C7:0E:F4:CA:DA:B3:38:0B:C6:7D
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.216.0/22
                  103.238.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:6d:d3:93:19:9e:64:de:0b:12:73:3f:7f:9d:8a:29:f2:
         24:87:5c:89:4d:b9:5c:0f:3b:3b:b5:22:be:d1:fb:68:fb:53:
         ab:8e:43:99:ae:05:16:6b:83:bc:b2:cb:50:51:86:36:98:b2:
         ca:3e:ca:a9:52:be:6d:67:7f:d3:0a:92:0b:dd:4f:a2:5e:9f:
         23:93:f1:8c:40:16:d7:c8:57:d5:0e:bd:4f:ca:d6:44:1d:4a:
         14:da:72:0a:96:d9:d2:74:eb:9d:c6:f8:d6:e4:1f:17:97:e9:
         9b:41:40:51:b9:d5:07:ce:4f:58:7e:16:ca:14:68:63:23:b5:
         97:bd:58:ae:b6:86:45:2e:ff:af:d6:bb:09:30:a1:de:8d:07:
         b0:84:de:ad:16:3a:d0:87:ae:af:f0:3b:e0:8e:89:41:d8:f9:
         fc:aa:42:7c:6d:09:57:d0:57:e9:4f:87:19:f5:33:9d:bc:a7:
         94:b3:37:2e:82:5d:20:c3:ce:e1:bb:eb:e2:d6:51:94:7a:96:
         1e:8a:0a:c7:f3:c6:b7:5a:4c:20:59:15:de:09:cc:39:66:fd:
         4c:c1:27:b7:04:35:42:95:07:51:f8:5e:31:7b:fd:af:dd:21:
         c0:33:3e:43:bd:88:4a:ea:b8:65:37:59:2f:6c:3f:c5:6b:26:
         3e:fb:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:40 2026 by rpki-client