Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa
File:                     5722369C493511ED928D106AC4F9AE02.roa (raw, json)
Hash identifier:          EXshCXpK7MnX/sEt140/a3ErvGcwIso6SXgjqS0fjEk=
Subject key identifier:   01:1B:E6:34:7F:B5:33:79:EB:AF:9A:F5:82:E9:BB:C9:E7:66:89:67
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F29C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:09:27 +0000
ROA not before:           Mon 06 Jul 2026 17:09:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140141
IP address blocks:        103.43.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62108 (0xf29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:09:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be146-4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:cd:0c:7d:04:66:85:b8:f8:d3:98:a4:d0:
                    9b:e5:0c:c5:95:14:b4:c7:1d:93:22:e2:8e:02:e0:
                    57:c6:3d:b3:7e:2e:f5:02:24:f0:d6:79:61:88:41:
                    e3:75:34:2c:28:15:2a:30:d5:91:89:da:e3:cd:16:
                    04:d5:ce:78:10:d2:76:80:06:e8:8d:d1:5b:b3:89:
                    96:64:e3:99:ed:d5:05:10:7a:0c:d5:e8:75:37:75:
                    8c:35:a6:4d:2d:ce:2c:e6:b2:7a:92:4f:8c:c7:10:
                    84:ac:da:17:ab:7f:a5:dd:57:f6:d6:a1:92:e8:c9:
                    f6:cc:e3:ff:1e:f9:71:e1:4c:f4:f3:f0:41:3b:9e:
                    f7:37:dd:4e:91:36:c6:ea:7e:56:4d:b0:8f:4b:e7:
                    8d:94:05:fe:b3:4d:12:a0:7c:b2:5e:39:0d:b0:20:
                    b3:fc:74:e1:35:83:6c:b8:ad:2e:b0:b0:5c:da:f0:
                    d8:23:cb:b6:e2:6a:d8:cd:0b:92:c3:d6:c3:1e:71:
                    ff:3d:6f:d3:5d:fc:20:8c:53:46:e6:90:7a:17:8b:
                    96:c0:43:8b:d7:ae:75:74:56:81:a0:e5:8f:54:00:
                    82:6b:c9:8f:bb:7b:a5:8b:f9:92:98:e9:60:07:c4:
                    78:e3:ac:d5:e0:3f:5c:f7:07:33:ee:84:34:ea:34:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:E6:34:7F:B5:33:79:EB:AF:9A:F5:82:E9:BB:C9:E7:66:89:67
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5722369C493511ED928D106AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:d7:e4:db:40:d2:9c:6b:11:29:c1:2c:6c:e3:dd:0b:58:
         e0:e3:f2:68:79:ac:f8:a7:44:d7:f2:2d:a7:d8:a1:da:3e:a8:
         5a:2d:ad:90:e9:38:ee:92:0e:04:70:35:28:a1:fc:49:0e:91:
         d9:a3:63:09:b6:30:87:ad:12:e9:a4:65:e5:69:65:81:c7:02:
         ee:69:2c:0e:37:a2:60:1d:50:78:ae:34:2c:47:f8:7d:61:a9:
         ba:15:c8:8c:7f:3b:46:c0:ba:5c:c8:0c:9f:2b:7e:2e:33:2a:
         a3:2e:67:ac:aa:e3:ce:ba:e2:1f:a9:f2:95:8c:f4:79:f8:6b:
         9e:fc:23:66:d8:5e:3e:a3:07:84:ee:97:7b:a2:6a:fd:f2:73:
         cb:cd:c6:a3:f8:4b:2c:3d:15:7f:17:0f:19:a5:e7:d4:93:3b:
         93:99:31:50:d4:60:f7:6b:52:0b:60:0c:1b:62:6d:7a:ad:0c:
         ee:ff:49:e3:cc:b4:33:6d:7b:ae:8b:12:bb:ff:a5:f8:1d:ab:
         56:63:26:17:f4:02:5a:fe:70:31:25:8b:fe:90:5a:cb:0a:aa:
         1d:29:74:f5:5c:19:d3:20:1f:99:86:e5:ae:f0:93:61:f0:eb:
         52:b8:be:db:ec:58:91:1b:fc:1e:97:df:57:1e:43:e7:2a:8e:
         1c:50:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:29 2026 by rpki-client