Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AEDFE6654A711EFAA16D77DC4F9AE02.roa
File:                     6AEDFE6654A711EFAA16D77DC4F9AE02.roa (raw, json)
Hash identifier:          +Q7c5Pu7cwXU2wuccAGhmHYiVOjLw0wbvRRwgHZWpb8=
Subject key identifier:   30:EC:06:BA:80:B8:0A:F5:40:89:E3:2F:FF:41:ED:03:A6:6F:35:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F417
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AEDFE6654A711EFAA16D77DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:22:12 +0000
ROA not before:           Mon 06 Jul 2026 17:22:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146903
IP address blocks:        103.173.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62487 (0xf417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:22:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be444-6b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:17:35:b9:57:d9:3a:06:48:92:93:2f:b4:
                    12:d1:82:8f:86:5e:3f:62:2a:76:28:78:d6:70:cb:
                    2e:45:e7:eb:17:2b:49:f8:98:58:11:01:20:6c:88:
                    43:71:9c:49:5f:88:17:ea:21:51:b0:b5:ea:2e:73:
                    b5:81:97:38:a7:4f:73:24:91:e6:b3:5a:dc:52:76:
                    ec:06:07:35:0f:0e:33:29:e3:57:1b:40:d1:71:b2:
                    25:d9:99:3e:18:c2:97:21:32:07:14:3b:f4:5a:52:
                    3e:9a:33:ab:85:c9:45:e2:8f:b8:6c:bd:a7:ce:a8:
                    f3:4f:17:1d:49:a9:ab:93:63:2b:cc:0d:4a:c0:77:
                    77:bc:c3:27:c5:86:25:b9:e0:f6:20:3c:93:15:21:
                    60:36:af:74:f8:ed:bc:aa:b0:f8:3a:d3:72:dc:f4:
                    f2:36:8c:bf:90:36:d5:f1:57:7c:77:d1:64:fd:10:
                    fb:8d:79:9c:5d:4e:59:1a:cd:5a:9c:0e:c0:10:29:
                    8c:50:08:47:08:2f:f0:e0:90:2d:02:7a:dd:3b:fc:
                    d2:fc:33:fd:b4:96:09:4d:37:ab:bb:08:d3:01:fe:
                    51:20:d2:d3:94:29:f8:9d:43:cc:9f:ee:aa:35:36:
                    72:54:71:99:71:04:24:18:07:16:b0:8e:06:bb:2a:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:06:BA:80:B8:0A:F5:40:89:E3:2F:FF:41:ED:03:A6:6F:35:9A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AEDFE6654A711EFAA16D77DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:2d:e5:12:ea:b6:9b:f6:b7:9e:07:6e:10:53:aa:44:e5:
         ac:fc:23:be:70:14:70:1f:cb:37:49:38:ac:22:63:01:70:41:
         c4:4c:b8:5f:48:39:4d:a1:85:09:48:f4:96:83:62:3a:63:45:
         f9:35:f6:5d:6a:d5:6a:71:79:06:f4:da:19:7a:e1:1b:ba:88:
         be:03:48:16:0d:5a:34:99:77:30:ae:26:a5:39:64:91:42:d2:
         01:97:6d:7e:90:d7:c4:85:cb:75:31:72:47:a8:5b:17:e6:ce:
         ae:f9:fa:6e:33:c2:d8:b1:46:1b:3e:54:9f:25:0d:00:d0:3e:
         ea:aa:d4:a9:5e:3d:cb:c1:ef:ad:0b:f2:67:65:c7:c9:3f:e4:
         04:e9:f6:2a:bc:fa:1a:e8:e7:4c:8c:d5:1b:2f:0c:db:f0:b2:
         f8:1b:bd:52:0f:7f:66:dc:c0:57:81:a0:62:ff:22:db:0e:5e:
         fe:2e:76:80:61:a0:75:8e:1b:1f:55:fb:0d:09:d2:45:a5:da:
         87:04:f3:a9:f8:4a:25:c4:58:9f:20:44:ac:c1:b2:23:3a:76:
         ff:c8:c3:3b:99:55:80:b8:d1:e2:dd:11:84:56:b0:bb:16:ab:
         fb:cb:b1:c8:fd:66:3e:7e:5b:a9:83:b4:a5:b5:fa:41:7e:34:
         46:b8:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:27 2026 by rpki-client