Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa
File:                     5DCF562E198B11EEA06C1429C4F9AE02.roa (raw, json)
Hash identifier:          IMqSkr9Un1zv5dBvJkgvgb8bJURKttIbmpBUK/0NKiA=
Subject key identifier:   69:E2:BB:B5:15:3B:89:FE:C5:EC:94:33:38:69:FE:69:D5:27:09:3F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5CD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:36:35 +0000
ROA not before:           Mon 06 Jul 2026 17:36:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151113
IP address blocks:        103.69.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62925 (0xf5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:36:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be7a3-d6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:0d:2a:b1:33:c3:ed:0b:b5:4f:18:4a:01:
                    50:1e:e6:b0:79:97:cd:b7:60:cd:60:02:63:69:b9:
                    6a:65:9b:88:4e:00:80:42:75:d7:7b:6b:e6:ac:8a:
                    e9:64:41:aa:de:50:ce:72:8b:c6:fe:55:ff:cd:d8:
                    74:6d:43:70:f5:81:54:80:63:e3:b2:c9:00:53:b1:
                    53:0b:31:bd:1a:54:67:f0:d7:ff:a7:58:ad:b5:f4:
                    b5:51:c3:23:0c:7f:4a:b9:a1:d9:b1:7b:aa:58:bf:
                    d6:4b:4b:dd:c7:55:a8:18:a7:69:3d:5a:f8:35:5a:
                    b4:89:23:3c:7d:a7:ec:d0:40:9a:36:b0:26:cc:67:
                    7b:06:f5:95:01:b5:2e:15:6a:7d:a0:37:57:f9:9b:
                    a0:a2:c5:1a:83:de:9b:56:f2:2b:90:93:77:38:97:
                    8e:2e:ed:04:f6:66:20:02:0b:01:15:b3:6f:b7:45:
                    47:47:52:e6:54:ce:3c:53:28:2e:41:94:2f:68:79:
                    ab:b5:b7:89:c1:16:13:2a:a7:84:36:54:aa:ad:ac:
                    d6:24:8f:89:68:32:fc:d2:76:42:c5:65:54:c7:52:
                    a3:a9:1f:f5:da:3d:f1:cb:90:c6:43:9f:05:2b:41:
                    9d:87:5c:66:d4:f1:3a:78:77:4d:ed:3b:3b:e7:74:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:BB:B5:15:3B:89:FE:C5:EC:94:33:38:69:FE:69:D5:27:09:3F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DCF562E198B11EEA06C1429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:5d:c0:52:5e:89:b0:41:7b:aa:4e:a7:c2:e9:9c:7c:96:
         9d:a4:c6:94:33:7e:10:80:c6:35:88:79:9d:93:ce:86:98:a0:
         2a:9e:31:e6:5e:a6:a9:b9:1d:16:09:3c:0b:fd:62:8d:44:34:
         53:79:55:b2:c7:7b:1c:60:2b:07:db:77:cf:3b:be:33:75:fb:
         56:fe:55:b2:9c:e6:44:eb:c9:53:b2:a7:07:d7:67:a7:b5:2e:
         f6:11:7c:e5:d4:ca:83:3d:36:04:88:09:73:bc:38:39:95:a2:
         49:88:d9:6a:b3:22:c0:23:29:3a:9d:78:e5:5e:26:fe:a3:1d:
         7f:8e:4e:0f:55:b0:08:a3:86:9d:c4:f6:77:59:aa:ad:d7:93:
         f6:86:d7:3d:cd:40:14:c9:94:3d:be:11:76:32:73:5b:f0:3f:
         5f:e1:b8:a6:e2:19:66:67:c8:f9:70:e2:30:da:40:a2:0c:cb:
         b7:ae:87:f1:7a:0d:5c:fd:82:36:6c:8c:1a:57:88:60:90:bc:
         f9:c7:f4:ab:16:93:ff:7a:c4:4d:91:fe:c2:48:10:fe:82:5a:
         a5:a7:6b:e7:18:e7:f2:aa:a0:6e:c0:be:82:b5:8b:13:21:b2:
         e0:e6:81:87:43:d2:42:97:d6:69:da:c7:c5:de:06:7c:76:63:
         c8:e6:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:51 2026 by rpki-client