Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F8AACC42E111F1B93D298FCC833773.roa
File:                     55F8AACC42E111F1B93D298FCC833773.roa (raw, json)
Hash identifier:          xt0jCkmrXRQb+6nGdIooHw7GslsqgXkPm2O/g2Wcvrs=
Subject key identifier:   89:43:F2:D0:92:DF:B2:4C:1F:03:14:16:D7:AA:63:29:EC:D7:E0:0A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE72
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F8AACC42E111F1B93D298FCC833773.roa
Signing time:             Mon 06 Jul 2026 16:34:32 +0000
ROA not before:           Mon 06 Jul 2026 16:34:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133267
IP address blocks:        103.157.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61042 (0xee72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:34:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd918-ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:31:b5:bb:d7:d1:e2:c3:30:a3:62:ab:5b:
                    57:de:19:40:95:07:1c:33:c2:64:22:28:3e:87:19:
                    79:59:a0:e2:1c:48:a0:b4:b6:74:81:3d:ee:64:44:
                    fc:ed:1b:7b:41:fd:50:28:16:c0:70:ee:80:33:0d:
                    d5:76:a4:34:1d:88:de:93:ff:39:86:5d:39:24:28:
                    38:a9:03:1b:29:b7:8c:9a:b9:be:99:ed:40:0e:88:
                    40:5f:e3:6b:81:94:55:69:34:05:93:f4:71:96:a4:
                    c5:13:bc:41:52:85:e6:b9:9d:5d:06:66:e6:71:48:
                    7f:96:93:47:85:61:1c:a6:13:8e:b8:53:36:29:ad:
                    5e:e7:f3:7b:0f:3c:e3:b3:88:59:3e:3b:64:99:97:
                    da:bb:62:53:43:9d:92:1d:ed:be:b8:8d:39:41:3e:
                    1b:10:b2:4b:b8:f6:a9:2b:3f:72:63:04:71:ae:17:
                    8c:46:12:51:42:1a:07:74:81:a0:4f:8d:61:32:c9:
                    b9:d4:09:50:a9:7c:4c:17:eb:f9:1d:bc:77:6a:c8:
                    02:ae:5f:b8:b5:d5:de:ff:2e:c5:0b:14:9b:d1:cf:
                    55:57:6b:64:2c:c9:82:e7:37:28:a6:d7:01:4b:40:
                    d0:c7:37:cc:c9:95:26:b0:7c:0c:3f:e3:e8:75:fb:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:F2:D0:92:DF:B2:4C:1F:03:14:16:D7:AA:63:29:EC:D7:E0:0A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F8AACC42E111F1B93D298FCC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:c6:97:4d:35:01:25:25:25:a3:97:da:e7:0c:9a:6f:7c:
         33:c6:3b:3f:29:b6:0f:9d:94:31:1a:56:ac:fb:9b:68:82:f0:
         21:27:1b:2d:55:bd:df:c2:03:7b:a2:9a:cd:11:9c:d2:47:e5:
         a0:15:01:e9:b6:ac:98:5c:71:b7:1f:d8:42:86:0b:fc:7e:38:
         2f:0f:74:76:c4:53:fa:be:16:33:f0:25:af:c8:14:c4:c0:25:
         5f:04:b4:cb:88:c8:10:be:0a:de:31:09:02:06:d1:8e:f6:ca:
         f1:7b:1e:69:b7:a5:6b:cc:89:a2:80:c3:8f:86:63:e4:c0:12:
         79:90:ef:8d:44:ad:44:2e:29:cd:81:5d:41:46:51:94:82:74:
         1e:87:c2:eb:1f:ad:2f:d0:02:c9:35:2d:b1:0b:3e:c6:6a:25:
         ef:3f:30:17:22:d5:13:3e:55:c2:9d:3b:d7:09:eb:a2:18:dd:
         3b:2d:e3:1a:2a:f2:39:83:c8:c8:e2:11:5d:44:9f:60:8c:39:
         5d:c7:f9:24:37:66:c3:69:01:1c:10:de:c9:07:73:92:09:a3:
         17:d8:47:e3:4e:de:b4:eb:56:94:81:ee:be:8e:a1:be:a2:c1:
         21:4c:e1:0d:35:fa:6f:5a:a1:2e:64:55:56:98:de:cb:d2:b9:
         f7:80:77:5e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO5yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzQzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5MTgtY2E1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtUMbW719HiwzCjYqtbV94ZQJUHHDPCZCIoPocZeVmg4hxIoLS2dIE97mRE
/O0be0H9UCgWwHDugDMN1XakNB2I3pP/OYZdOSQoOKkDGym3jJq5vpntQA6IQF/j
a4GUVWk0BZP0cZakxRO8QVKF5rmdXQZm5nFIf5aTR4VhHKYTjrhTNimtXufzew88
47OIWT47ZJmX2rtiU0Odkh3tvriNOUE+GxCyS7j2qSs/cmMEca4XjEYSUUIaB3SB
oE+NYTLJudQJUKl8TBfr+R28d2rIAq5fuLXV3v8uxQsUm9HPVVdrZCzJguc3KKbX
AUtA0Mc3zMmVJrB8DD/j6HX75RUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSJQ/LQ
kt+yTB8DFBbXqmMp7NfgCjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU1RjhBQUND
NDJFMTExRjFCOTNEMjk4RkNDODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeddjANBgkqhkiG9w0BAQsFAAOCAQEADCLGl001ASUlJaOX2ucM
mm98M8Y7Pym2D52UMRpWrPubaILwIScbLVW938IDe6KazRGc0kfloBUB6basmFxx
tx/YQoYL/H44Lw90dsRT+r4WM/Alr8gUxMAlXwS0y4jIEL4K3jEJAgbRjvbK8Xse
abela8yJooDDj4Zj5MASeZDvjUStRC4pzYFdQUZRlIJ0HofC6x+tL9ACyTUtsQs+
xmol7z8wFyLVEz5Vwp071wnrohjdOy3jGiryOYPIyOIRXUSfYIw5Xcf5JDdmw2kB
HBDeyQdzkgmjF9hH407etOtWlIHuvo6hvqLBIUzhDTX6b1qhLmRVVpjey9K594B3
Xg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:26 2026 by rpki-client