Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
File:                     1493F91C619711ED9437B344C4F9AE02.roa (raw, json)
Hash identifier:          i1H4QtWn3KqtVOt3et/2ZFCUkk1LYN8DehdbYzKqG7M=
Subject key identifier:   0B:49:24:D2:DE:88:95:17:ED:FB:7B:63:5B:31:28:58:BF:0C:37:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F501
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:29:53 +0000
ROA not before:           Mon 06 Jul 2026 17:29:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149593
IP address blocks:        103.189.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62721 (0xf501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:29:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be611-4f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:25:dc:6c:06:4f:2b:09:65:26:43:17:e6:
                    43:a0:f7:99:48:4c:9a:7e:e8:e6:d0:5d:b8:e9:1b:
                    62:ab:69:bc:11:2c:1d:35:3c:87:94:a4:ed:6e:a7:
                    97:9a:ca:b2:1d:45:13:eb:3c:03:f8:7f:2c:f4:a2:
                    7a:39:2d:90:2b:47:43:c9:94:5a:02:0d:3c:40:3e:
                    81:96:6f:fc:a7:8c:9b:e1:44:ee:d5:77:44:a1:d3:
                    c8:01:38:24:b4:bf:40:fe:fb:42:28:33:4d:df:a9:
                    fe:f9:03:d9:37:a0:05:63:5a:21:98:ae:b5:bb:3c:
                    50:5b:03:77:86:47:10:91:95:87:76:0f:88:58:f6:
                    d1:f5:4e:c0:11:18:e9:5d:18:8f:6f:39:f9:a2:31:
                    1b:f2:23:4c:ef:ac:46:28:86:52:2c:5c:c0:c1:74:
                    1b:a7:6d:9b:2b:90:f7:e0:47:1f:9e:8b:7a:25:09:
                    03:5e:8d:2f:43:e5:29:ff:41:56:0e:04:10:a1:61:
                    d5:55:d3:bb:e3:75:1d:8a:d3:d7:4f:99:50:a2:b7:
                    f5:af:6e:d3:c3:dd:41:1e:cc:8a:da:61:37:9b:04:
                    c7:d5:70:c8:c5:94:44:3a:83:e3:30:4c:ee:dc:cf:
                    f4:d2:45:a1:ae:05:d3:14:35:f1:ed:45:ee:9b:38:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:24:D2:DE:88:95:17:ED:FB:7B:63:5B:31:28:58:BF:0C:37:EB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:46:1b:5c:2e:c6:db:c9:70:b9:22:6e:09:48:2b:a2:b1:51:
         98:f0:73:75:23:d0:8f:74:c8:6b:f9:be:52:75:54:dc:f1:0c:
         9d:78:b8:5f:f8:66:38:21:02:f6:07:49:33:d1:32:7b:7a:b6:
         78:28:9b:d4:85:2d:f6:0c:f8:6a:e6:29:75:67:c0:3e:08:a8:
         7a:11:6a:06:c9:84:76:df:4f:36:ae:30:c6:7c:f2:67:0e:e8:
         30:3a:22:16:70:f6:ca:17:ae:a2:b5:48:93:80:a8:88:44:b1:
         2f:6a:35:10:32:2a:df:ed:bc:b5:ad:16:c0:a4:4b:56:62:9f:
         ab:48:cd:7d:69:83:4f:73:6c:7d:09:e9:0c:5a:29:a0:59:00:
         57:f0:30:63:14:ee:9f:15:d6:16:f5:4e:a8:c5:77:78:f9:b1:
         ee:da:bd:71:8c:e3:50:34:45:ec:63:73:42:00:72:28:90:5f:
         37:e6:dc:22:3b:c6:41:dd:f9:62:79:9f:6d:a4:1d:1e:8d:a4:
         c7:ac:f4:25:85:e4:53:48:3b:e4:15:eb:e8:80:78:6c:7a:6b:
         09:81:4d:3f:68:e5:17:50:52:62:2d:3f:89:b7:e7:d4:3b:ff:
         38:97:e9:50:e8:55:cb:9c:6f:31:5f:8c:03:dd:11:a8:b7:64:
         e4:45:e7:3f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPUBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3Mjk1M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU2MTEtNGY2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXxJdxsBk8rCWUmQxfmQ6D3mUhMmn7o5tBduOkbYqtpvBEsHTU8h5Sk7W6n
l5rKsh1FE+s8A/h/LPSiejktkCtHQ8mUWgINPEA+gZZv/KeMm+FE7tV3RKHTyAE4
JLS/QP77QigzTd+p/vkD2TegBWNaIZiutbs8UFsDd4ZHEJGVh3YPiFj20fVOwBEY
6V0Yj285+aIxG/IjTO+sRiiGUixcwMF0G6dtmyuQ9+BHH56LeiUJA16NL0PlKf9B
Vg4EEKFh1VXTu+N1HYrT10+ZUKK39a9u08PdQR7MitphN5sEx9VwyMWURDqD4zBM
7tzP9NJFoa4F0xQ18e1F7ps4dj8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQLSSTS
3oiVF+37e2NbMShYvww36zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0OTNGOTFD
NjE5NzExRUQ5NDM3QjM0NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGe9sjANBgkqhkiG9w0BAQsFAAOCAQEAOUYbXC7G28lwuSJuCUgr
orFRmPBzdSPQj3TIa/m+UnVU3PEMnXi4X/hmOCEC9gdJM9Eye3q2eCib1IUt9gz4
auYpdWfAPgioehFqBsmEdt9PNq4wxnzyZw7oMDoiFnD2yheuorVIk4CoiESxL2o1
EDIq3+28ta0WwKRLVmKfq0jNfWmDT3NsfQnpDFopoFkAV/AwYxTunxXWFvVOqMV3
ePmx7tq9cYzjUDRF7GNzQgByKJBfN+bcIjvGQd35YnmfbaQdHo2kx6z0JYXkU0g7
5BXr6IB4bHprCYFNP2jlF1BSYi0/ibfn1Dv/OJfpUOhVy5xvMV+MA90RqLdk5EXn
Pw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:11 2026 by rpki-client