Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C5B6B0828311EDA463B126C4F9AE02.roa
File:                     15C5B6B0828311EDA463B126C4F9AE02.roa (raw, json)
Hash identifier:          3plghpVuS573kBvNnXMugi8PNF5ixbrmosRUlHMOnzY=
Subject key identifier:   90:16:83:90:C5:C0:8D:01:F9:6F:4A:B8:6E:C1:22:93:6E:18:EB:2F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F063
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C5B6B0828311EDA463B126C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:50:40 +0000
ROA not before:           Mon 06 Jul 2026 16:50:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135831
IP address blocks:        103.84.250.0/24 maxlen: 24
                          103.218.182.0/24 maxlen: 24
                          2001:df4:ab00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61539 (0xf063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:50:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdce0-45ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:36:38:41:7f:0d:d3:4f:93:e7:ef:34:4b:
                    4e:11:bb:87:9c:95:0c:52:5c:e5:24:a0:fd:c3:03:
                    21:f6:70:7b:c5:7f:c9:9d:0c:16:b4:af:62:03:e0:
                    0f:ae:a6:95:ef:11:2a:73:98:28:a7:37:d1:3d:9e:
                    aa:d7:8d:69:e3:b2:bc:0b:48:ed:f0:c4:19:96:be:
                    e2:be:2d:4a:3f:6c:eb:2e:73:15:d0:c3:58:f3:ad:
                    23:b1:53:89:9a:69:0d:61:97:f8:f8:36:1b:e6:9c:
                    de:88:1d:1a:bd:f1:d8:53:a5:4e:72:25:38:08:9f:
                    8f:e2:5d:18:5e:06:65:c1:df:95:5f:4f:05:f1:ac:
                    9d:f6:01:93:8e:f5:03:d2:fc:4f:86:2b:6c:93:7d:
                    5a:28:4e:59:2c:8c:74:06:07:2c:6a:96:3d:f8:fb:
                    95:a1:58:b8:63:c1:29:70:b2:31:90:e1:7e:d8:da:
                    4a:61:5b:e2:78:d9:2e:b0:2d:de:80:ef:e0:05:a4:
                    da:cf:06:f2:8f:e3:e7:45:d0:c2:3c:11:ec:c7:70:
                    39:d7:77:9c:7e:3d:e3:17:82:eb:e1:22:aa:23:7f:
                    e9:bb:85:07:b7:c7:79:8b:0a:1d:83:ec:63:6c:84:
                    60:10:89:37:84:7b:34:b5:46:d5:38:58:e0:14:f0:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:83:90:C5:C0:8D:01:F9:6F:4A:B8:6E:C1:22:93:6E:18:EB:2F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15C5B6B0828311EDA463B126C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.250.0/24
                  103.218.182.0/24
                IPv6:
                  2001:df4:ab00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:75:be:e2:90:d5:08:df:8f:a1:80:62:4e:e5:39:77:33:
         97:f1:ac:1e:20:9c:ab:4f:75:f0:cc:af:ab:f5:6b:20:4e:98:
         67:1c:4d:5e:c2:f9:db:06:11:ca:13:df:e8:11:70:ae:d3:9a:
         f1:10:fd:d5:91:2a:05:e1:9b:35:f6:46:06:68:f3:63:37:47:
         48:54:62:7f:9f:f3:f3:2a:c3:7d:8a:ee:a6:be:74:ba:68:79:
         dd:23:20:dc:87:a1:10:cc:65:a2:83:b5:ad:35:27:d3:b4:00:
         19:a0:72:1f:09:4a:60:f9:a9:cf:cb:da:66:98:11:4c:1c:f2:
         30:e5:f0:ea:db:74:ff:e9:fb:1f:66:e8:27:23:31:e5:1e:a3:
         24:7f:42:22:31:eb:6f:f7:73:72:34:bb:62:1c:d7:0d:29:28:
         c2:45:1b:c7:9e:36:7f:a7:00:d7:d4:f9:1f:ed:c8:04:20:59:
         e2:8d:35:ea:74:c7:24:69:05:83:de:12:cb:ab:61:40:09:5b:
         2f:4e:09:e2:0b:00:7d:81:45:db:4c:0a:34:37:ed:45:c2:06:
         b9:8f:cc:fc:26:ee:b0:19:9f:3a:c7:a3:fa:d1:20:04:79:1e:
         d8:e7:b7:40:09:0f:30:0d:f7:94:b9:ff:4b:ed:61:89:71:a5:
         00:07:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:32 2026 by rpki-client