Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3078C9262CE711EDA7E42982C4F9AE02.roa
File:                     3078C9262CE711EDA7E42982C4F9AE02.roa (raw, json)
Hash identifier:          6Thzk43M40QFkl1WpD4piF0KguCNyObZ3zZdpxS8Cbs=
Subject key identifier:   B6:61:D9:E1:34:9D:6B:62:9D:70:3F:0F:31:70:6F:D9:E4:44:F6:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F541
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3078C9262CE711EDA7E42982C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:32:09 +0000
ROA not before:           Mon 06 Jul 2026 17:32:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150055
IP address blocks:        103.191.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62785 (0xf541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:32:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be699-706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:8d:52:1e:ac:eb:50:f0:dc:f4:56:04:e9:
                    61:ab:39:ac:06:24:e2:c6:08:70:13:fa:ea:92:ad:
                    6f:99:b3:b6:1f:5a:6f:94:be:63:05:cb:8f:07:bd:
                    84:29:18:72:18:a4:d4:22:79:ea:23:d7:41:31:8e:
                    68:ed:34:b1:dd:45:c7:d1:14:28:5d:ed:11:4b:07:
                    14:95:5d:47:78:6c:c2:fb:d6:99:09:f5:89:61:e3:
                    42:bd:8c:91:2c:2a:42:d6:21:e4:24:37:98:20:7e:
                    01:11:a4:26:6c:74:01:1e:c2:7b:a7:19:c1:e2:60:
                    06:8b:03:61:a6:15:61:f1:bb:01:08:11:42:f6:1a:
                    22:68:0f:6a:76:7d:e1:c8:46:17:55:e8:95:9f:c0:
                    e6:a4:fb:42:12:94:1a:27:12:7e:f0:88:9a:f5:07:
                    74:9b:13:25:84:ce:5e:e4:cb:3f:05:02:9c:96:49:
                    c7:ef:22:2a:50:88:dc:3e:a2:24:30:49:23:12:f4:
                    62:22:eb:19:53:6b:0d:06:f0:e3:bd:f0:73:dd:32:
                    a2:78:58:bd:06:d7:15:dd:7c:a0:fe:34:95:26:b3:
                    bd:53:08:28:cd:8f:93:44:f5:46:8f:99:0e:ef:c4:
                    c4:42:37:f9:3e:64:44:a7:73:d8:e7:0e:fe:bb:6f:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:D9:E1:34:9D:6B:62:9D:70:3F:0F:31:70:6F:D9:E4:44:F6:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3078C9262CE711EDA7E42982C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:74:61:f9:66:73:7c:61:e0:f7:a1:1d:4f:d2:28:af:58:16:
         fa:7f:76:0b:5e:0c:65:82:bb:f0:23:96:6d:38:4b:6e:2d:7f:
         bc:2f:3a:ac:4d:ed:be:42:39:8d:b5:b9:d2:92:f4:12:34:cc:
         d2:f6:18:09:8e:88:5e:aa:1b:ef:cc:ff:65:85:76:48:5a:03:
         da:cc:61:3f:ca:72:d2:c3:b4:37:30:83:a3:e5:7a:1b:ce:2c:
         c3:c6:0d:17:ba:0c:11:7c:fe:d6:4a:48:bb:5e:19:1d:7e:d3:
         a6:ec:9f:3d:59:47:60:ea:59:17:04:1c:c9:42:1f:9d:1d:b1:
         55:9b:fd:cb:7f:fe:62:bd:ff:21:a5:c9:56:65:6c:2f:c0:34:
         b8:56:c1:7d:6c:be:70:c2:22:e8:46:d3:fe:af:bd:d9:9e:c6:
         87:32:e4:73:89:2b:a9:35:80:58:e7:ca:51:c7:e2:79:d7:af:
         02:f8:8d:7d:e6:d9:6e:ea:b7:54:64:b5:3f:3d:3e:48:06:2e:
         e5:06:5d:a1:2c:39:11:e5:7f:5b:68:54:e0:ae:e4:a3:72:69:
         9a:36:21:ad:38:cd:8d:dc:43:90:8a:80:54:f0:88:1e:95:7c:
         f6:bb:81:d3:ba:ca:cb:6d:5c:e3:4b:94:66:0c:2e:3e:c0:30:
         6c:cb:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:47 2026 by rpki-client