Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa
File:                     2929BE3419F411EC924CEC3BC4F9AE02.roa (raw, json)
Hash identifier:          RUMUr+QqafLf2RYv9Oo7FDAk4DnJp3GcbIHl5CyCtWk=
Subject key identifier:   7C:49:68:87:57:3A:EB:BD:8E:FC:8B:8F:AC:B4:A8:3F:23:37:27:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F350
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:15:30 +0000
ROA not before:           Mon 06 Jul 2026 17:15:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141556
IP address blocks:        103.172.208.0/23 maxlen: 24
                          2407:eec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62288 (0xf350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:15:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be2b1-80f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:7e:34:e0:9d:22:29:70:18:df:d6:ba:8c:
                    15:9c:ca:1f:1a:89:3e:8f:c0:01:3f:46:dc:a4:f4:
                    2f:8d:81:d8:a0:3d:21:46:65:13:45:45:40:d7:1b:
                    85:9b:8f:ff:1d:c3:67:cd:b9:9b:32:27:d6:79:40:
                    33:93:1c:bd:34:3d:de:d9:92:3f:64:b3:98:eb:8d:
                    71:4e:b3:13:90:37:f1:77:7e:29:0d:83:c5:92:1c:
                    ea:40:30:5c:9e:13:78:ea:5c:ba:8d:3a:a7:19:ec:
                    b6:48:1c:0d:0e:8c:bb:28:c5:c5:8f:59:17:32:aa:
                    d7:9e:5c:9e:cb:65:cb:64:a3:17:78:0e:ff:3e:cb:
                    fa:39:7a:a4:e1:8a:1a:4d:a8:68:15:71:77:36:b1:
                    b6:16:78:e9:f3:d0:81:c9:d4:55:14:a6:0e:e7:d2:
                    04:c4:ee:53:36:2a:90:65:24:a0:26:d1:49:a7:7b:
                    0a:77:36:8f:3e:81:2b:7e:d0:14:14:d7:15:a2:ed:
                    9a:76:a1:d7:12:58:c7:4c:6e:bd:ce:a2:d5:53:3d:
                    47:76:cd:f2:d8:33:01:13:59:c8:16:d5:2d:7a:58:
                    9a:9d:10:47:e3:d9:42:e0:63:ff:d3:ae:ab:02:e2:
                    5e:24:fa:2a:0c:52:58:60:80:de:d8:d3:1b:ca:0e:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:68:87:57:3A:EB:BD:8E:FC:8B:8F:AC:B4:A8:3F:23:37:27:3C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2929BE3419F411EC924CEC3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.208.0/23
                IPv6:
                  2407:eec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:29:87:66:87:05:5e:38:30:14:8d:7c:45:57:f1:89:18:6f:
         3b:87:45:1b:76:74:12:65:a6:38:af:53:3f:cb:52:6b:b8:9b:
         83:4a:23:b2:43:a0:4c:b2:cf:db:04:4e:43:2d:cb:fa:e6:bf:
         c0:62:a0:53:be:87:52:1a:84:e8:35:f9:fa:e2:68:c2:d7:43:
         f5:73:ab:50:4f:4a:4b:ff:28:2e:4c:d4:89:43:f6:4c:1b:cf:
         8e:da:83:cf:4e:72:44:80:74:49:d2:d6:c4:aa:2f:7d:d4:2d:
         1d:f2:f8:45:35:7a:ef:37:e0:15:ca:1e:bd:ec:aa:53:7e:76:
         e8:df:2c:e2:49:3f:c6:d8:6b:ed:ce:74:a4:4f:6a:e1:31:a2:
         33:a8:5f:ed:ec:60:bf:02:ef:bf:7a:89:b8:e8:a6:95:bb:2f:
         50:d5:fb:92:ca:8e:93:9d:f1:1c:ff:9c:53:51:8d:17:a2:29:
         e7:55:c6:a6:03:2c:dc:7d:5b:93:4d:4d:9a:c2:90:10:ad:5e:
         a1:70:fb:70:c5:47:b3:29:09:77:d3:ec:55:f1:ce:f7:ed:f0:
         91:7d:f0:2a:00:97:c0:14:a8:4a:50:e6:4d:c5:87:a0:89:52:
         66:67:d8:28:78:20:e5:6d:9d:00:cc:62:1c:40:d1:c3:4d:eb:
         44:cd:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:16 2026 by rpki-client