Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37043FF4A43111EBA4810711C4F9AE02.roa
File:                     37043FF4A43111EBA4810711C4F9AE02.roa (raw, json)
Hash identifier:          qSem970XHRIRFesU5vrR+dPlEn4uCktHQMWELAlbBvg=
Subject key identifier:   9B:F4:BE:EB:96:0E:09:AB:B8:49:FC:BF:35:FA:41:A9:CA:E4:77:E4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F356
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37043FF4A43111EBA4810711C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:15:41 +0000
ROA not before:           Mon 06 Jul 2026 17:15:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141566
IP address blocks:        103.127.118.0/23 maxlen: 24
                          103.162.212.0/23 maxlen: 24
                          2001:df5:fe80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62294 (0xf356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:15:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be2bd-fd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:10:04:7d:0f:d0:b4:7b:f6:53:ea:59:bc:
                    4e:7e:3d:ed:17:b6:e7:25:c7:98:6e:d5:b1:62:b2:
                    e7:c4:f7:3c:37:7a:ad:bb:06:6b:da:bf:b0:b5:e8:
                    4d:b6:b2:26:a0:a0:57:9a:5c:ac:a4:b3:43:08:92:
                    66:50:90:27:76:21:90:9c:bb:80:6d:04:a1:47:bd:
                    fc:30:1e:43:bf:1a:10:f4:2a:73:f4:cd:1f:42:b0:
                    46:95:d1:21:dc:ea:2e:8e:b6:97:86:95:28:44:22:
                    db:6a:8d:cc:59:f8:8c:9b:23:81:eb:dc:51:1c:a2:
                    a2:31:17:ea:81:a1:a4:95:eb:a2:d0:44:44:97:73:
                    a9:7e:dc:17:a1:17:af:a7:88:27:58:63:8c:21:26:
                    80:20:31:51:58:9b:d6:68:25:1a:89:ea:66:fd:61:
                    ae:8b:58:f2:4a:c6:61:46:fc:8d:03:0d:09:ca:d5:
                    35:77:3c:f5:37:d3:8e:ed:2b:0e:0b:0c:ae:47:da:
                    d8:b8:21:53:0e:b1:e9:a5:90:31:30:a8:77:da:00:
                    8e:1b:67:4a:39:3d:9f:e7:25:f0:7e:c7:9f:dc:56:
                    b9:0e:36:d9:aa:b6:b3:ea:2b:90:dc:ed:52:06:0d:
                    2f:22:c3:24:97:f9:67:6c:fd:4d:0f:01:9e:98:00:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:BE:EB:96:0E:09:AB:B8:49:FC:BF:35:FA:41:A9:CA:E4:77:E4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37043FF4A43111EBA4810711C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.118.0/23
                  103.162.212.0/23
                IPv6:
                  2001:df5:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:70:68:57:26:27:bb:df:44:69:f6:4e:e4:f1:49:22:86:13:
         22:ae:bb:87:e0:7f:18:e4:25:8c:ac:0a:72:73:8d:ee:e8:a8:
         bc:82:b4:1f:4f:3f:db:56:a5:34:41:38:40:fa:94:69:7d:fa:
         e0:3c:2d:88:35:9c:63:c2:0b:fa:2c:b8:f8:5f:52:0b:22:bb:
         71:c3:b8:98:ef:b1:36:00:9e:94:f2:e8:e9:98:b5:e8:60:fb:
         5e:1b:9c:5e:c9:c6:db:1e:28:b4:0c:0f:34:20:d0:63:d0:d4:
         12:53:40:fc:25:a0:83:73:1c:3b:21:7d:99:97:3e:79:7e:04:
         40:16:8d:96:33:5d:3b:db:67:5c:a4:e7:8c:75:9f:9c:56:25:
         7f:3f:05:eb:29:09:13:eb:b5:32:3a:fd:dd:1b:41:24:7d:9a:
         41:ca:1d:b8:51:4c:63:fc:cf:38:e9:5e:22:e3:34:26:ff:c3:
         d7:32:2a:26:da:af:6a:a0:9c:1d:a6:03:2e:bc:d0:f6:58:d7:
         aa:c0:46:85:0e:02:b7:12:c1:63:0a:26:97:93:d8:a8:25:e0:
         53:b3:f9:ab:66:0e:31:5a:65:44:99:e2:d2:3c:c9:3f:44:87:
         fd:79:ed:41:a2:7f:4c:29:80:15:9f:d7:13:de:fe:ca:76:df:
         b0:cd:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:32 2026 by rpki-client