Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/F814843E7B5D11F18BA834705CA30FBC.roa
File:                     F814843E7B5D11F18BA834705CA30FBC.roa (raw, json)
Hash identifier:          AT7rrFZJqkI2hbdK4qhTUnlkzryBAjkZxDGmC95snVM=
Subject key identifier:   16:1F:00:92:9A:C6:B3:36:FA:90:60:36:E8:DD:50:2E:40:AE:DB:70
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       08E9
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/F814843E7B5D11F18BA834705CA30FBC.roa
Signing time:             Thu 09 Jul 2026 06:18:15 +0000
ROA not before:           Thu 09 Jul 2026 06:18:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138754
IP address blocks:        103.74.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Jul  9 06:18:15 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a4f3d27-a3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:22:1a:59:98:05:80:84:ea:8b:16:11:dd:
                    45:6e:23:7e:95:c1:62:b6:ab:63:02:60:d3:96:1e:
                    a9:d8:05:5a:e3:cc:5e:0e:9d:1a:13:60:11:60:ed:
                    b4:f9:2f:b3:1b:6a:ea:09:df:9f:35:ad:bb:fe:0b:
                    40:45:4f:15:37:1c:19:89:3b:a5:18:a6:b3:22:78:
                    22:35:dc:36:3a:aa:f2:25:ab:ae:84:92:4e:32:3d:
                    1b:95:52:dc:1d:5c:e2:cd:d3:d1:ac:c1:a0:45:ee:
                    8e:0b:5f:11:5f:db:38:2d:6c:98:e2:14:92:7f:8e:
                    e2:44:d2:96:cc:b8:39:6f:50:50:5d:e7:1e:33:af:
                    8e:57:f9:a1:11:0c:b9:e3:f9:f1:b7:bf:cb:b4:bf:
                    e8:ed:00:ed:55:fa:3b:fd:85:75:aa:80:00:c0:47:
                    33:4b:ca:83:b9:1c:24:a7:6a:db:bb:96:1f:fc:f2:
                    6d:8d:5b:ae:01:5a:1b:a3:2c:84:86:4a:64:8f:30:
                    ec:11:f2:51:34:f6:4c:3b:0d:c2:0f:5f:43:a1:bf:
                    57:58:a3:88:ab:3d:7a:34:b2:10:1f:ce:ca:28:63:
                    8b:39:5f:47:74:65:96:ff:81:dd:ab:b7:27:1c:c0:
                    bf:13:80:38:02:de:62:42:9f:a0:c5:9d:00:c2:53:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:00:92:9A:C6:B3:36:FA:90:60:36:E8:DD:50:2E:40:AE:DB:70
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/F814843E7B5D11F18BA834705CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:89:6e:01:82:95:7b:c7:95:74:7c:17:39:f3:24:53:35:f4:
         26:1e:c0:ca:4d:8c:d5:70:7c:a5:e9:ee:dc:59:0c:a1:9c:dc:
         d6:0c:63:92:ba:ee:90:bf:0c:b9:45:63:b3:9d:95:8d:92:93:
         3f:57:4d:9a:2d:84:6b:5b:d1:ef:c1:95:ef:e2:52:b8:78:2d:
         b2:ca:12:7e:77:57:b0:48:33:a3:4c:54:7e:96:a6:81:63:0b:
         c2:c2:3d:fe:dd:0f:c5:80:13:8c:e7:7c:8d:62:1a:85:98:6c:
         88:40:98:80:87:70:18:ea:9d:e0:7e:2c:6b:23:86:e0:30:20:
         00:57:d5:e9:3c:02:11:27:0d:1b:41:ad:a2:04:40:4f:e5:fe:
         05:97:fa:b1:eb:42:3c:04:f5:3a:8e:67:02:46:4b:2b:0b:95:
         8e:be:72:5a:fd:d2:67:b1:83:55:fd:19:cd:0a:79:93:0e:d6:
         4b:2b:46:42:60:93:9f:67:c5:f6:7b:9a:0b:6b:28:07:da:47:
         c8:c1:fa:4a:73:d6:ee:52:78:0d:cd:3a:93:07:dd:64:77:99:
         5f:22:05:0f:8e:04:5d:dc:b0:69:42:62:d9:b3:59:b2:a8:a3:
         f7:33:d4:75:03:05:16:dd:9e:02:02:6e:28:41:30:97:73:11:
         45:d5:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:04:26 2026 by rpki-client