Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B806F1C086111EBA6912686C4F9AE02.roa
File:                     1B806F1C086111EBA6912686C4F9AE02.roa (raw, json)
Hash identifier:          z4Qvu+i1dN0HeW6dr6ptYj3AL6C4d+hevajj461qStk=
Subject key identifier:   99:89:68:B2:E7:10:DC:4B:66:5C:BD:94:30:26:61:F3:F1:E3:DC:03
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B806F1C086111EBA6912686C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:10:24 +0000
ROA not before:           Mon 06 Jul 2026 17:10:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140191
IP address blocks:        103.156.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62136 (0xf2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:10:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be180-e961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:5b:1a:37:e7:61:73:3b:cd:e9:0a:c9:54:
                    e5:7d:a4:d6:b2:41:9a:26:08:98:10:a4:77:6d:35:
                    1f:da:0c:ed:27:66:c9:e2:04:a8:33:cd:7d:f6:ee:
                    d9:07:c2:35:4e:5a:5f:f6:75:6f:43:89:36:ef:15:
                    76:56:a4:8a:c5:d2:57:e3:a6:10:0d:b3:65:fc:e6:
                    f3:8d:41:81:d3:b3:e1:d2:bb:f1:63:22:74:8a:04:
                    32:6c:3e:8f:8e:41:68:98:71:98:09:9c:68:23:d6:
                    a6:3b:c2:29:f5:26:eb:c0:f3:a8:f1:4c:dd:c7:cf:
                    64:21:4f:d9:35:01:86:74:21:11:4a:9c:61:57:37:
                    2f:cb:01:85:a6:7f:6d:eb:9b:65:f5:52:8f:dd:cc:
                    e9:a5:e8:a2:cb:2c:cb:0f:23:23:e1:74:e2:e8:cd:
                    bc:f1:d0:71:61:0f:e9:86:de:63:17:c9:9b:4f:84:
                    a7:0b:f3:8d:b6:b0:84:29:c2:ca:af:85:b3:bb:1b:
                    00:6f:72:07:50:03:a1:e8:81:8c:ce:32:2d:d9:8e:
                    a6:86:f9:c9:fa:ac:ff:87:19:47:a5:77:9a:83:d2:
                    3b:8e:4f:d6:6a:9b:24:d4:46:a7:23:7f:39:f3:ed:
                    4f:c3:9d:05:64:a7:9f:49:ae:fd:eb:27:90:18:2c:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:89:68:B2:E7:10:DC:4B:66:5C:BD:94:30:26:61:F3:F1:E3:DC:03
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B806F1C086111EBA6912686C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:ba:28:fc:07:cc:4d:ed:28:9a:45:7a:5c:98:c2:c0:9d:
         e6:38:12:65:eb:66:93:25:9f:2d:43:5c:79:15:e2:87:46:a0:
         60:cc:5d:cf:c0:42:9c:15:3f:06:9c:a6:34:d8:06:1c:8d:44:
         bd:28:78:84:4f:7c:99:0e:8f:12:1c:09:f9:aa:54:73:5b:de:
         7f:ab:ca:fc:8b:b7:e9:f9:4d:78:62:f5:b6:85:2d:ef:4d:b6:
         18:97:b7:68:4b:57:2e:14:8a:4d:97:ba:20:d9:f4:8b:f1:4c:
         de:dd:3a:38:5f:9f:f9:c3:cc:f0:af:d2:59:da:9d:c4:6b:30:
         1b:b7:c6:9f:82:2f:50:84:e3:85:ed:33:af:c6:69:14:70:44:
         64:3f:0f:bf:6a:68:b5:24:05:c5:d2:77:98:a2:90:74:af:b6:
         c0:17:3a:e1:b8:f4:b9:f6:e3:78:d5:46:70:19:ff:f6:48:d4:
         b2:c7:7c:56:e0:aa:43:f9:c6:1a:e3:76:72:b8:45:53:d3:71:
         32:28:99:3b:46:58:fa:9d:d1:c5:7e:04:04:df:a8:ad:6f:52:
         fe:56:e7:60:41:87:5c:ee:ac:5d:8d:ff:b9:0b:24:e9:95:9b:
         67:31:58:ea:75:0d:99:40:3c:f0:a6:bf:11:ce:b0:5b:33:a8:
         9a:4c:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:26 2026 by rpki-client