Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa
File:                     0054432693FA11EEACB4CA40C4F9AE02.roa (raw, json)
Hash identifier:          85x7ZVZ8mJf+7u/Mu+iPAb/oeTBHm0m4ACyw4ab8lwM=
Subject key identifier:   F7:E4:4D:F9:E2:BA:65:71:B7:00:36:39:84:71:67:7D:BF:67:49:E5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F615
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:38:54 +0000
ROA not before:           Mon 06 Jul 2026 17:38:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151709
IP address blocks:        115.187.24.0/23 maxlen: 24
                          2001:df3:2340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62997 (0xf615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:38:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be82e-2c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:01:33:48:09:bf:d7:b4:9f:49:f4:c3:b7:
                    74:c4:71:49:a4:8e:9c:d9:5c:ae:c0:ea:52:ac:cc:
                    98:6a:11:2f:90:49:cd:49:20:d5:54:bd:7e:29:95:
                    63:98:d8:17:cb:fa:77:3f:32:1f:4c:26:83:6e:b7:
                    73:b5:16:72:4c:af:6d:eb:bd:d9:0f:b7:ce:09:f9:
                    e1:d5:fd:ff:c1:f4:af:f1:42:98:ff:b0:15:0a:a4:
                    ed:42:fa:77:19:a6:f4:f9:29:76:25:83:e8:4f:69:
                    07:10:05:49:63:1d:17:7d:24:c9:6e:72:db:de:3f:
                    21:66:7a:9a:b0:02:4d:dc:60:e3:aa:e8:f9:2b:31:
                    bf:9d:40:56:f8:f4:a5:2e:53:fa:e8:a4:e3:cb:83:
                    3d:92:aa:42:f8:63:7a:01:08:f0:63:13:27:70:8c:
                    eb:52:9e:ba:6d:b7:24:0a:16:8d:dc:28:a0:31:37:
                    27:4e:b2:55:2a:d5:b2:d9:23:e8:35:f5:24:af:f7:
                    8b:7e:82:27:8f:16:f5:32:23:bc:58:03:0a:a5:ac:
                    bd:08:9d:d5:78:d3:4f:6a:e4:d8:d9:14:1b:2b:cd:
                    89:51:40:e6:96:27:bd:3f:86:18:cb:46:3b:14:ad:
                    95:60:89:b1:65:57:08:5e:7f:73:33:75:84:e5:49:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:4D:F9:E2:BA:65:71:B7:00:36:39:84:71:67:7D:BF:67:49:E5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.24.0/23
                IPv6:
                  2001:df3:2340::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:eb:ad:15:f5:52:f1:18:0b:b1:d7:04:54:d0:d3:e6:0b:
         f7:07:95:2f:86:2a:c7:80:61:27:5a:66:94:26:bc:c9:4e:9e:
         ad:64:08:f8:a7:29:c5:5d:4d:0f:44:a6:f9:38:41:ba:46:68:
         d7:bc:ca:75:e3:4f:a7:0f:7f:49:41:6b:23:85:47:1b:61:84:
         0c:67:30:d7:e5:2c:49:b8:2c:9b:03:ab:a5:f2:b4:eb:63:2b:
         38:c8:96:22:31:1d:1d:fd:1b:1f:6b:69:d5:17:1d:3f:8c:69:
         57:a8:83:bb:1f:cc:a8:c6:91:7e:bd:1b:da:e7:5c:95:fd:dd:
         2c:f1:d0:47:40:6e:f9:ab:5d:4e:9d:90:b0:f3:76:3f:6e:2a:
         80:52:d3:4f:fd:cf:d1:52:73:9e:e8:ae:4f:f8:73:72:d3:d3:
         2e:40:9f:2c:4e:5c:64:28:60:10:94:15:f6:26:a1:cb:22:9c:
         22:c3:e5:82:60:53:1f:f2:a2:ea:8a:06:a7:ab:6d:90:1c:18:
         ea:69:b7:dd:44:df:15:ff:c3:da:b4:e5:b7:a0:de:3c:34:9c:
         fe:97:1b:a1:ec:b8:96:b1:ae:d7:86:3f:b3:46:0a:97:50:11:
         53:9f:12:6b:4d:7a:e0:2a:a4:d7:66:bd:f6:37:f6:c1:29:f4:
         9f:5b:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:41 2026 by rpki-client