Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa
File:                     2FF3EF52333811ECAB1FF315C4F9AE02.roa (raw, json)
Hash identifier:          V7EscuZpwNDZWRI/BjUAu2Gmjptg1K3Y6K7nhcSfZoA=
Subject key identifier:   E6:54:82:DD:3D:AC:BF:B6:E5:74:DC:28:B2:3C:D4:49:8C:D4:27:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F8E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa
Signing time:             Mon 20 Jul 2026 05:18:47 +0000
ROA not before:           Mon 20 Jul 2026 05:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147193
IP address blocks:        103.61.111.0/24 maxlen: 24
                          103.174.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63713 (0xf8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 20 05:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a5dafb7-4d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:8a:74:38:a8:cc:22:61:d5:da:d4:e5:de:
                    54:e4:27:1c:72:9a:99:ce:e6:82:ce:4d:6f:29:63:
                    a0:07:45:e2:ba:05:e2:38:91:b3:11:22:05:be:19:
                    f0:25:63:a0:3b:e7:12:dd:cb:e7:a0:eb:b5:24:ed:
                    80:0b:56:96:41:d6:c1:ba:51:3f:30:54:98:54:45:
                    e0:f4:5c:63:49:d5:12:eb:64:9a:77:98:cf:c3:b9:
                    99:79:e8:9f:57:ca:96:b9:7c:e4:b5:1d:29:f1:fc:
                    38:93:cd:a3:d5:d2:d5:49:4f:e7:e4:23:bd:48:73:
                    c6:1f:7f:86:4f:47:bc:e8:16:9f:a8:60:d3:f6:8b:
                    ec:69:25:43:85:73:0e:04:d4:66:a9:a2:d8:6a:0d:
                    14:b9:a5:af:1b:02:2f:29:dc:13:a3:52:06:b5:b1:
                    d7:09:03:a7:cd:fa:c6:b5:3d:22:ed:49:08:7d:57:
                    a5:d3:38:be:57:45:80:ba:18:b3:58:df:95:a1:3b:
                    ab:e3:b6:14:4a:b9:db:15:97:fe:8e:28:f9:7b:6a:
                    72:1b:1f:3a:d2:e2:c5:cd:23:05:b2:52:ee:e8:87:
                    27:c9:68:cd:e0:3e:2f:d4:b2:74:65:b6:b2:64:e4:
                    f6:fb:c9:b8:b5:c0:e4:44:fc:5b:93:33:d4:cf:a1:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:82:DD:3D:AC:BF:B6:E5:74:DC:28:B2:3C:D4:49:8C:D4:27:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF3EF52333811ECAB1FF315C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.111.0/24
                  103.174.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:ec:09:e4:47:44:65:2c:cc:fc:51:a8:7c:3e:fc:10:77:
         19:06:08:bf:f6:18:e8:15:2e:74:1a:71:77:b1:f0:bd:47:df:
         b4:a2:dc:3b:78:82:bd:b0:b8:0d:1a:0a:50:51:bc:39:13:06:
         cd:3e:62:10:89:44:56:bf:4c:ea:ac:1c:92:e5:4a:19:c8:b1:
         0d:27:23:37:0d:05:5a:f6:dd:2b:f9:4f:6c:6c:c3:e9:c9:f3:
         66:19:9e:cd:11:52:a4:16:1d:45:a8:cf:24:a9:87:43:46:d3:
         3e:94:d4:17:28:10:1e:cd:23:c7:b3:4d:48:b3:61:9f:df:80:
         89:52:b1:74:84:30:a8:2d:a3:c2:97:c6:84:cf:8c:c8:f5:3a:
         c9:63:5b:c8:e7:87:15:71:59:ea:b9:91:e9:6f:8b:4e:af:0f:
         79:59:56:dd:16:40:29:07:f4:78:89:0a:b4:e4:c6:dd:3c:03:
         92:56:c9:c7:a2:3b:12:f2:ff:48:56:28:d3:c1:43:6c:10:fb:
         b8:8a:65:99:8a:af:c0:79:a9:72:82:76:27:d9:f5:66:86:2d:
         d9:4a:6b:96:11:9d:b8:ee:23:b1:1e:20:bc:95:92:74:cd:ac:
         93:5c:12:0c:34:63:79:71:3b:6c:58:03:cb:80:85:e7:af:f6:
         21:78:39:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:03 2026 by rpki-client