Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa
File:                     27D4BB2C1E7511F0B2040577C4F9AE02.roa (raw, json)
Hash identifier:          r9RBJ6HldvMNm4d+PwG/hfJ/s55gdnmTPqnS1LLsQbk=
Subject key identifier:   43:DF:F6:1D:48:C7:53:A4:AC:63:43:18:4E:53:17:BA:5C:96:C7:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F487
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:26:00 +0000
ROA not before:           Mon 06 Jul 2026 17:26:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149181
IP address blocks:        103.185.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62599 (0xf487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:26:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be527-c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:b3:31:f1:7d:5f:e1:ee:35:b3:3d:71:c4:
                    c9:9c:29:22:0d:35:fb:54:d9:f1:2b:58:90:07:2c:
                    29:7b:ba:cd:34:4d:64:a0:38:4c:e9:3a:2c:2d:5b:
                    0a:1c:d2:fa:8e:44:04:e0:bb:d7:71:22:27:0a:b2:
                    91:c0:0c:e0:56:16:26:dc:0e:34:16:1c:35:52:1c:
                    2a:4d:6e:f0:63:56:ac:96:bb:77:75:7f:0a:13:3d:
                    e0:32:01:e8:ab:d6:28:55:12:e7:27:39:79:ed:a3:
                    e3:24:ce:b2:da:d8:8e:0e:e6:39:18:9b:bb:f5:11:
                    07:43:57:97:1f:dc:f1:0e:a5:db:8b:9a:b0:55:e3:
                    92:82:05:70:47:62:08:83:9e:e4:a1:a8:34:a7:73:
                    74:52:ed:01:ce:2c:3b:a1:a6:6f:53:d7:1a:51:a3:
                    75:e6:84:60:00:f8:61:cf:0e:dd:f4:48:df:5c:42:
                    7f:ad:8b:45:5f:c5:cc:1c:fd:ce:66:25:12:ca:43:
                    fd:f3:64:1d:b2:7a:4f:9f:93:dc:f3:66:cb:b9:1d:
                    85:3f:84:57:38:90:8d:c2:e1:16:90:f3:66:cb:54:
                    b9:c6:e4:c9:2d:3b:60:0a:27:0e:bb:a7:9d:84:01:
                    c9:56:cb:c4:c4:d8:8e:14:f4:87:48:8f:cc:21:94:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:F6:1D:48:C7:53:A4:AC:63:43:18:4E:53:17:BA:5C:96:C7:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27D4BB2C1E7511F0B2040577C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:46:6c:4a:b8:b8:5a:48:e5:ae:88:f8:89:7f:ed:1d:0f:09:
         22:da:d1:8d:fd:ed:2d:21:ff:24:d7:67:46:b9:05:70:2d:f1:
         29:05:8e:59:6d:c7:20:f5:5e:a1:a9:3d:a2:6b:c4:0a:86:9c:
         35:e1:54:42:f0:b7:46:13:a0:fa:a7:8d:92:e9:c9:3a:08:4a:
         89:8e:93:e9:16:1a:5e:c5:1d:bf:6f:ae:19:e5:91:2e:60:ec:
         d9:ab:1b:ea:9d:5d:f6:0c:5e:d4:52:60:f8:de:86:c1:86:55:
         e3:33:20:a1:fc:f9:bc:e7:0d:4e:e1:82:2c:4a:db:c6:cf:2f:
         f9:14:9a:20:8c:a9:15:81:f4:2c:9c:90:56:0b:6c:66:df:8b:
         db:19:be:cd:62:3d:d9:4d:ce:a4:77:0f:7a:77:6e:1e:9d:9d:
         a1:17:c9:b7:73:1a:f9:93:4b:61:26:72:ba:ac:b5:37:f6:0d:
         c3:46:e1:77:e3:e6:de:ee:76:08:c9:5a:83:55:39:50:7c:e6:
         8e:ea:8e:bb:a3:4d:0b:f1:17:95:32:e6:5a:2a:f5:1e:3c:9d:
         2b:18:19:91:1e:70:98:0c:92:00:3c:96:78:d2:77:6e:f4:12:
         5f:6d:03:a2:8a:cc:64:09:88:05:5c:10:b9:08:12:e4:a2:54:
         0a:21:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:11 2026 by rpki-client