Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55D14FF2B73B11ED99A16482C4F9AE02.roa
File:                     55D14FF2B73B11ED99A16482C4F9AE02.roa (raw, json)
Hash identifier:          Gah2zyLmtdY3DcBkf66V1gVzT6R5FnAJO+7iAWePFU4=
Subject key identifier:   5F:CD:45:A9:D6:48:26:BA:D4:98:41:1F:C4:4E:1F:11:FA:C3:8F:8D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F505
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55D14FF2B73B11ED99A16482C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:30:01 +0000
ROA not before:           Mon 06 Jul 2026 17:30:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149599
IP address blocks:        103.189.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62725 (0xf505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:30:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be618-9ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:c4:2a:86:f9:6a:69:f2:4e:47:bd:18:7f:
                    dc:21:77:81:19:02:c7:e8:c9:c6:b4:ac:0c:51:1e:
                    97:b0:a2:06:cb:53:41:2e:69:0e:6c:32:41:23:b8:
                    65:9b:b1:6c:63:eb:82:6f:4a:71:4f:c5:db:c8:e9:
                    74:39:d7:69:26:ca:b1:56:83:73:a8:f9:43:24:e0:
                    35:79:8b:6b:28:4d:ca:71:d5:2d:8f:24:b2:ed:ca:
                    5d:89:1c:6b:6b:66:bc:51:39:12:11:8c:bf:1a:04:
                    52:7c:99:85:20:70:c7:92:ad:74:78:d2:ff:1b:bb:
                    21:c0:08:39:09:50:55:98:a6:79:27:44:e0:d8:d6:
                    9f:72:3b:06:db:20:66:c7:b8:22:aa:77:05:97:74:
                    51:99:ab:cb:11:62:46:e2:cd:be:ea:b8:57:d5:0b:
                    4e:9b:79:88:0b:e4:35:a9:0f:53:b1:65:09:11:39:
                    d8:85:eb:a6:4c:77:e3:62:31:e5:ce:0a:1f:fa:79:
                    5a:c1:f3:14:72:10:80:24:75:4c:c1:e1:4f:00:08:
                    da:b0:fa:db:98:e0:96:28:78:cd:25:ec:b6:11:a5:
                    f3:33:e3:26:ca:6a:95:5d:00:6e:2a:d8:5d:9f:91:
                    c7:cc:c8:88:1d:d7:92:4f:cf:35:9a:b7:5f:fd:d0:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CD:45:A9:D6:48:26:BA:D4:98:41:1F:C4:4E:1F:11:FA:C3:8F:8D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55D14FF2B73B11ED99A16482C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:96:10:b9:6e:3a:a8:52:6b:af:43:23:0d:8b:34:89:2a:63:
         0b:d8:5c:f0:d0:9e:c9:4a:44:b3:2c:18:ad:51:d5:2b:61:60:
         56:02:1c:a4:79:77:e4:6f:69:df:da:ab:0c:44:eb:8a:e2:80:
         39:5d:35:f6:a5:ac:21:d6:c7:1a:19:8a:b6:22:76:c0:3d:1a:
         58:b4:e9:da:de:ba:03:b2:ba:e1:34:6e:af:b6:ec:9d:6a:7c:
         2b:0f:16:93:87:f0:84:be:d9:82:b5:8b:a9:c6:f9:35:de:0b:
         c6:58:7e:e3:b7:b8:83:02:0e:32:42:ac:46:27:42:6d:d7:63:
         2b:71:c7:f6:d2:80:44:4c:52:f1:61:68:a0:11:31:40:84:ef:
         e6:ae:4c:c4:ba:59:4e:bd:55:c8:47:9d:a6:01:2e:e3:51:75:
         b7:c4:79:1d:93:0d:64:df:e0:3d:83:15:13:a6:db:d9:69:1d:
         4e:3b:1c:0f:34:28:44:5a:23:42:5e:7e:c3:41:a7:4d:72:f8:
         06:a6:b0:4a:db:8c:70:ad:45:74:33:2e:8d:1a:45:02:7b:5d:
         90:0f:0a:99:dd:60:ab:99:e6:d0:28:29:62:53:da:2e:51:9e:
         b9:42:42:71:a6:d5:05:ac:7a:6d:67:e1:c6:44:18:5c:b8:94:
         14:ac:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:52 2026 by rpki-client