Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
File:                     55751B541A2B11EDBA2C6D18C4F9AE02.roa (raw, json)
Hash identifier:          Z58Qlf7NJN3u/WWBgN+CgMUfJS1MjiPHRDIwWWFeNPA=
Subject key identifier:   94:D9:31:23:F0:0D:CD:17:E3:B5:C7:E0:00:E9:D5:EE:C2:67:78:EE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F018
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:48:14 +0000
ROA not before:           Mon 06 Jul 2026 16:48:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135726
IP address blocks:        103.132.56.0/22 maxlen: 24
                          2001:df0:1d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61464 (0xf018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:48:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc4e-6b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:9e:b0:ec:22:26:d6:23:dc:e7:53:52:aa:
                    d8:6a:aa:32:ad:09:cf:2b:e3:39:d4:6a:f9:06:82:
                    b7:d4:45:bc:1b:64:af:4a:06:a3:db:6a:e2:ff:02:
                    5a:3e:c1:56:a3:1c:24:1e:7a:a7:1b:e5:f8:5c:11:
                    25:d1:e9:94:ee:f1:38:b6:83:89:c9:cd:9f:a1:5c:
                    75:e9:7b:a7:99:f9:e0:7b:6c:30:84:be:82:57:96:
                    81:46:3d:3b:9a:9d:dc:37:50:22:2c:46:09:cd:da:
                    f0:a0:a8:e8:da:f6:2c:aa:15:89:bf:79:50:f8:4c:
                    67:16:89:fa:e0:58:3c:75:c6:03:db:88:9f:f4:19:
                    37:83:a7:bc:59:c0:71:9f:19:e7:33:0f:82:35:52:
                    1f:b4:69:b2:9c:89:da:e3:c1:27:7e:65:84:d7:57:
                    20:ea:83:e1:22:2e:f1:98:8a:0d:c9:02:e4:a6:86:
                    4d:09:88:22:41:50:32:54:a2:90:83:f0:49:85:46:
                    46:cf:54:19:bc:28:cc:ce:c7:73:97:b9:d2:81:ed:
                    a5:d5:99:de:16:2d:58:91:cb:ae:3b:a2:12:d2:af:
                    cc:7a:10:54:fc:f1:5e:38:33:67:35:1b:c8:05:b1:
                    b0:d2:ba:24:ae:72:df:57:7c:28:5f:47:ed:e3:a9:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D9:31:23:F0:0D:CD:17:E3:B5:C7:E0:00:E9:D5:EE:C2:67:78:EE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55751B541A2B11EDBA2C6D18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.56.0/22
                IPv6:
                  2001:df0:1d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:58:57:e6:14:2a:a1:94:8d:70:6f:99:24:d7:e9:3e:f6:11:
         fc:87:e1:3a:1f:11:78:0d:64:45:89:c1:98:36:17:72:5d:01:
         96:96:f8:83:8b:a8:74:55:2b:78:2f:df:f4:70:bb:10:86:6d:
         fa:db:32:34:ef:76:6c:cf:0f:4c:50:ed:01:c3:cf:38:d6:96:
         b6:3b:fc:2b:18:bd:6f:cb:00:53:92:de:1c:ad:2b:b0:e7:14:
         d8:08:ba:39:87:90:15:83:55:64:66:82:63:b7:62:17:3e:b4:
         b6:ba:cb:ca:30:85:75:24:42:79:67:45:6e:1a:e1:f9:3a:0d:
         3f:61:a7:2f:58:cf:7f:2b:bd:b2:03:12:4b:67:de:49:ce:75:
         8c:7c:d1:0c:7a:86:f9:f7:e5:08:71:ee:16:ab:bf:3e:cb:08:
         1d:6a:2a:c5:b7:b1:f1:12:43:61:bf:b7:21:88:de:78:10:d1:
         b9:99:f3:c4:a2:3d:60:9d:51:d9:ff:5f:67:08:d8:ed:07:19:
         4e:a3:f7:c8:7e:1b:c1:81:79:7d:4b:f3:52:32:5a:df:8d:0a:
         0d:77:bd:d9:67:3e:7f:06:bf:e0:34:f4:a4:19:b8:e3:df:fe:
         1d:75:06:25:b3:9e:ef:be:34:3c:66:31:50:b6:9d:01:40:db:
         95:01:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:08 2026 by rpki-client