Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A7E2B0DFE711EB90F3F27DC4F9AE02.roa
File:                     06A7E2B0DFE711EB90F3F27DC4F9AE02.roa (raw, json)
Hash identifier:          pdswHqohIwbHEoIM1byhPw2LOCxtx7xhdpLD1NpKFS0=
Subject key identifier:   C4:B4:1D:17:18:DA:B6:DA:67:F0:CF:03:F2:F6:C5:FE:9A:42:68:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A7E2B0DFE711EB90F3F27DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:18:39 +0000
ROA not before:           Mon 06 Jul 2026 17:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142443
IP address blocks:        103.169.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62381 (0xf3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be36f-ea98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:68:f9:10:3c:15:2a:fc:76:cc:aa:e6:bb:
                    87:0c:ff:4b:5b:e7:01:68:d9:11:ba:ad:e3:e2:f4:
                    8a:b8:2d:95:6b:12:9f:62:5a:b0:60:9a:83:a6:a2:
                    7f:e3:d1:33:8a:f3:ab:52:5e:bf:9d:3c:1a:97:ae:
                    4b:cf:79:95:a9:da:1d:da:3c:f5:3d:a6:6e:99:e8:
                    31:cc:41:e2:54:db:e4:ca:ee:53:67:2f:97:3b:cd:
                    bf:d3:52:46:40:7a:96:66:9f:81:b0:8f:ef:41:22:
                    b1:a2:60:1f:88:04:63:d6:2e:76:7e:03:fd:b6:28:
                    4e:e6:5c:1e:b2:85:24:7b:ab:a0:d2:35:60:8b:d5:
                    31:4f:11:0b:e5:17:0a:50:f1:2f:21:bd:48:64:06:
                    8c:42:e5:da:44:18:4a:21:38:a4:b8:b4:81:6b:2b:
                    13:ea:49:c1:77:48:dd:e1:3c:89:eb:3a:52:ef:a2:
                    f9:cd:2d:8d:a2:9b:ec:98:57:e1:2b:77:d3:8f:e6:
                    e7:e0:d2:9f:65:59:ac:22:60:40:48:01:1d:d0:f1:
                    cf:70:31:70:f0:37:e5:10:ba:7b:ac:ac:52:3f:b4:
                    95:28:28:37:b6:1e:d1:d1:9d:81:5e:89:4a:4f:69:
                    c7:c2:ef:fa:ac:f4:36:17:43:fd:27:ef:bf:96:22:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B4:1D:17:18:DA:B6:DA:67:F0:CF:03:F2:F6:C5:FE:9A:42:68:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A7E2B0DFE711EB90F3F27DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:c7:9c:86:5c:62:ef:9c:99:64:30:be:10:db:43:16:e2:
         07:02:0c:fc:a7:fc:22:48:ad:ae:a4:66:6a:80:97:33:a5:28:
         5d:94:07:52:b5:75:d6:d4:bc:51:73:70:4a:52:e0:cc:26:7c:
         7f:77:94:fb:a3:b2:6a:b3:84:a0:20:a0:d2:27:e4:c8:60:74:
         89:b3:9c:06:f8:fd:d6:5c:22:4c:45:1e:62:24:15:9b:ff:ca:
         01:1f:df:99:b6:bc:42:a9:21:49:2c:bd:93:48:ec:74:26:49:
         9f:e5:87:f1:9d:1c:86:9c:c9:85:d0:82:90:ed:b2:82:5b:c3:
         89:c6:93:fb:81:02:34:35:90:df:ba:96:ea:2c:e2:7e:d8:76:
         79:6e:0b:27:ac:55:01:7d:7f:a3:42:dc:0b:9c:18:82:8a:4f:
         7e:fb:38:c6:df:18:8b:5b:6b:8e:35:bd:3e:bf:ef:9d:ac:bd:
         90:be:57:39:7e:75:06:34:2b:60:8b:ef:91:f1:80:40:b2:b4:
         11:6a:d0:d5:f3:6b:1a:46:ed:74:ec:d7:7e:66:4c:96:d2:f3:
         11:6f:4c:58:af:39:01:5a:8c:74:5d:d7:c0:fc:31:78:06:28:
         26:32:01:0c:aa:ac:d6:ff:d3:19:06:42:4a:0d:f1:5c:18:52:
         d6:b8:7f:5d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPOtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTgzOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzNmYtZWE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQVaPkQPBUq/HbMqua7hwz/S1vnAWjZEbqt4+L0irgtlWsSn2JasGCag6ai
f+PRM4rzq1Jev508GpeuS895lanaHdo89T2mbpnoMcxB4lTb5MruU2cvlzvNv9NS
RkB6lmafgbCP70EisaJgH4gEY9Yudn4D/bYoTuZcHrKFJHuroNI1YIvVMU8RC+UX
ClDxLyG9SGQGjELl2kQYSiE4pLi0gWsrE+pJwXdI3eE8ies6Uu+i+c0tjaKb7JhX
4St304/m5+DSn2VZrCJgQEgBHdDxz3AxcPA35RC6e6ysUj+0lSgoN7Ye0dGdgV6J
Sk9px8Lv+qz0NhdD/Sfvv5Yi+wECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTEtB0X
GNq22mfwzwPy9sX+mkJomDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA2QTdFMkIw
REZFNzExRUI5MEYzRjI3REM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeprjANBgkqhkiG9w0BAQsFAAOCAQEAXEbHnIZcYu+cmWQwvhDb
QxbiBwIM/Kf8IkitrqRmaoCXM6UoXZQHUrV11tS8UXNwSlLgzCZ8f3eU+6OyarOE
oCCg0ifkyGB0ibOcBvj91lwiTEUeYiQVm//KAR/fmba8QqkhSSy9k0jsdCZJn+WH
8Z0chpzJhdCCkO2yglvDicaT+4ECNDWQ37qW6izifth2eW4LJ6xVAX1/o0LcC5wY
gopPfvs4xt8Yi1trjjW9Pr/vnay9kL5XOX51BjQrYIvvkfGAQLK0EWrQ1fNrGkbt
dOzXfmZMltLzEW9MWK85AVqMdF3XwPwxeAYoJjIBDKqs1v/TGQZCSg3xXBhS1rh/
XQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:49 2026 by rpki-client