Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/F4524220797111F1951C47AE83A30FBC.roa
File:                     F4524220797111F1951C47AE83A30FBC.roa (raw, json)
Hash identifier:          psYJKF1YKFSmPgjJgaWlJbXxn1nWutvNRtoVP4qXPDg=
Subject key identifier:   B2:69:18:6C:34:C0:DF:05:24:B8:74:06:62:33:96:D9:97:4C:C4:FE
Certificate issuer:       /CN=A918C6AE/serialNumber=7E8BFE64EFA323DDB0C305C566A8B3D3A1714C61
Certificate serial:       05
Authority key identifier: 7E:8B:FE:64:EF:A3:23:DD:B0:C3:05:C5:66:A8:B3:D3:A1:71:4C:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/F4524220797111F1951C47AE83A30FBC.roa
Signing time:             Mon 06 Jul 2026 19:36:16 +0000
ROA not before:           Mon 06 Jul 2026 19:36:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     394695
IP address blocks:        103.76.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.crl
                          rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 10:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C6AE, serialNumber=7E8BFE64EFA323DDB0C305C566A8B3D3A1714C61
        Validity
            Not Before: Jul  6 19:36:16 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a4c03b0-790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:db:78:67:76:c6:fb:c7:5d:5a:8d:83:f5:
                    34:53:e5:3d:85:47:e6:43:44:35:72:3a:e0:83:f3:
                    d6:d7:bc:67:a6:c3:bf:1d:e8:38:44:d6:68:f0:c3:
                    71:86:d4:2e:b7:b7:20:ee:54:15:fe:45:88:7f:38:
                    14:cc:86:1e:06:66:9c:a8:6b:45:94:33:25:c7:44:
                    a2:de:ef:fd:d2:9b:2b:5d:26:8f:a5:95:a8:1a:ac:
                    48:8c:f5:c7:28:c6:05:cb:e2:81:db:01:4a:80:86:
                    63:6c:e5:36:7c:a8:29:b5:e2:8e:16:8b:81:4b:7b:
                    a5:c2:c6:34:ca:d4:73:26:cd:30:3e:f7:5f:5a:73:
                    03:a0:3b:b8:37:f5:24:17:2e:64:46:cc:5b:1f:18:
                    08:e9:dc:d4:79:79:7c:2d:3e:c4:ad:0a:b1:aa:2e:
                    b4:e8:db:5b:c1:33:f6:ff:2b:ee:41:b9:fb:73:1f:
                    79:5f:70:14:34:5e:01:a5:f6:f9:85:a5:16:96:19:
                    00:15:59:a7:b2:5e:de:25:46:2d:e7:40:57:3a:81:
                    92:04:6c:20:1a:79:de:68:94:53:5a:fc:a5:c6:e3:
                    2c:84:e7:78:6c:44:91:2f:69:69:24:c8:89:71:f4:
                    7a:a9:33:c0:34:c9:54:b4:df:86:dc:1c:95:cd:67:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:18:6C:34:C0:DF:05:24:B8:74:06:62:33:96:D9:97:4C:C4:FE
            X509v3 Authority Key Identifier:
                keyid:7E:8B:FE:64:EF:A3:23:DD:B0:C3:05:C5:66:A8:B3:D3:A1:71:4C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/fov-ZO-jI92wwwXFZqiz06FxTGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fov-ZO-jI92wwwXFZqiz06FxTGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C6AE/67853A50797111F189F41A6783A30FBC/F4524220797111F1951C47AE83A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:36:b4:f7:79:e7:16:c4:dc:7c:5a:f4:ca:2e:79:5c:ab:72:
         38:a1:66:4c:66:cd:55:38:10:3b:a5:71:7b:bc:c2:6e:d5:7a:
         1f:56:cf:b4:42:fb:6c:68:9b:f0:76:a0:f1:b5:a4:f5:10:33:
         ef:35:d8:77:14:9c:dd:fd:7a:06:8a:d6:96:67:a0:b0:e6:50:
         07:c1:cc:63:e6:3e:e5:74:31:87:e8:b5:a3:e3:22:3f:d0:18:
         e4:24:e1:92:09:65:7b:10:a3:e7:25:07:b8:a4:01:26:16:e8:
         0f:8e:ae:c4:1b:ac:9b:89:53:df:a0:83:fc:f1:ca:f9:0a:ad:
         35:ea:b5:fd:cf:1d:ab:ae:69:53:75:5c:5b:d2:c7:f6:a5:36:
         c0:ad:f0:a9:58:9e:d9:6e:6d:ce:4f:44:c6:63:e8:5d:27:0b:
         a0:76:4a:89:e5:b7:dc:5f:0e:de:27:bb:9e:a7:d8:46:7a:ab:
         cb:0f:f7:55:91:fe:66:91:d3:b9:b6:aa:93:9a:a7:a4:26:47:
         73:9d:e9:de:50:e5:c0:cd:ec:33:db:5c:5a:cf:ec:68:48:8c:
         f2:8c:f9:8c:69:aa:4d:fb:58:64:c4:e9:24:e4:41:f9:ad:c0:
         47:06:15:2c:23:42:82:ad:3d:71:7b:28:26:04:41:bf:f2:a7:
         ee:9e:a7:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:43 2026 by rpki-client