Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa
File:                     3260679CF10811EB9858DF70C4F9AE02.roa (raw, json)
Hash identifier:          BI7Q5RjYOiT7qePsEdTf3uJ17N561n013evz6ZxN9YI=
Subject key identifier:   BA:6B:09:96:E9:1A:62:DF:EE:7D:3A:10:DA:9B:A7:D9:7C:5B:69:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE4D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:33:20 +0000
ROA not before:           Mon 06 Jul 2026 16:33:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133005
IP address blocks:        103.90.4.0/23 maxlen: 24
                          103.90.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61005 (0xee4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:33:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8d0-9d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:c0:f4:80:6a:ca:6c:a6:26:d7:01:c0:93:
                    7a:59:45:b3:b2:de:15:1c:db:6a:56:36:d2:3b:8d:
                    ce:9a:91:d9:b4:d9:d0:16:8d:bd:06:e0:bf:38:90:
                    37:6a:78:a2:41:2b:7e:9b:54:a6:40:2d:77:02:58:
                    e0:ce:25:e7:11:11:a1:83:38:85:9a:a2:84:94:58:
                    c8:9f:5f:cb:c8:4e:d3:ab:7e:e0:27:9a:3d:93:b8:
                    af:02:8f:9e:0f:f1:44:33:ce:87:e3:c7:91:6d:16:
                    03:68:22:73:ec:83:1f:8c:25:d3:59:38:2b:a1:52:
                    40:f0:f7:36:00:29:58:88:ca:59:06:15:87:8f:58:
                    e3:21:59:08:80:1c:0c:a9:44:ed:0e:75:8d:82:ed:
                    db:0b:79:7e:a8:90:2d:59:dc:a9:14:fe:fa:fd:b6:
                    46:09:e5:e0:de:6e:6e:2e:7f:a5:df:35:26:3a:b0:
                    90:5e:41:27:89:45:97:31:34:e6:15:36:79:76:ec:
                    6a:89:d7:64:2f:8a:5d:64:1a:1c:b4:84:7b:4e:84:
                    76:fa:ec:b8:14:94:74:17:6d:db:ed:15:ef:d6:ce:
                    e6:29:1c:28:37:f2:f3:10:e4:32:bf:8d:0a:46:09:
                    ec:8a:a5:67:91:17:a0:d8:4b:a3:f7:e8:00:8f:a2:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:09:96:E9:1A:62:DF:EE:7D:3A:10:DA:9B:A7:D9:7C:5B:69:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.4.0-103.90.6.255

    Signature Algorithm: sha256WithRSAEncryption
         65:82:83:32:6f:58:08:30:e4:a7:d9:d1:cf:3c:26:52:8e:57:
         73:10:94:9e:01:a8:a8:5f:d4:b5:bd:ed:74:36:76:a4:1c:19:
         9f:b5:dc:f0:12:d1:68:7b:25:cf:72:03:c8:32:c9:dc:eb:27:
         64:08:16:2b:28:49:36:85:40:0d:5a:83:5c:36:be:ef:9b:f2:
         ea:13:52:cd:b3:cb:1a:95:b3:99:e8:31:2c:43:02:ab:a7:ed:
         ef:39:4a:9e:6e:a9:3c:fd:ef:86:0b:ac:2d:ae:69:39:33:f8:
         bc:5d:d4:48:b4:f9:b7:ab:3b:e4:12:5f:89:71:74:71:e9:ad:
         6c:50:83:ea:f3:08:1e:de:9c:d2:3b:2f:3f:17:7b:44:34:c2:
         7f:fa:48:68:8f:9d:e7:d7:4e:99:bc:4c:7e:d9:a3:7d:6a:fc:
         d8:94:c0:b1:93:8c:e4:1c:b2:6f:69:62:c4:d5:65:b2:2d:c4:
         f3:37:81:54:00:57:20:29:cd:2e:20:bc:05:64:dd:9d:fa:82:
         ee:d2:35:74:c1:79:73:26:7d:f6:e2:db:88:6f:34:b8:09:22:
         0c:6d:f5:81:6f:25:6e:27:67:cf:ad:47:63:ae:17:21:57:58:
         01:db:6a:00:85:1d:73:1b:9f:d0:ef:81:90:c9:4c:df:0b:b4:
         66:0f:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:12 2026 by rpki-client