Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa
File:                     72422FF6360C11EB89D30139C4F9AE02.roa (raw, json)
Hash identifier:          SRV04e7gY2lrX5Txwe6Y29Xh+kwlXlPw6ZtL7aCREU4=
Subject key identifier:   0C:62:AA:0E:A1:3F:95:12:4C:5B:19:50:2F:72:A8:A8:80:A4:E3:C1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2F0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:12:15 +0000
ROA not before:           Mon 06 Jul 2026 17:12:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141290
IP address blocks:        103.159.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62192 (0xf2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1ef-f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:71:4b:24:b8:4a:8a:63:5a:3c:fc:63:e8:
                    a1:47:7e:8a:fb:02:17:bd:35:b0:96:91:0c:47:b9:
                    b9:7f:56:48:76:fc:d6:9b:66:11:ea:24:4e:e4:17:
                    af:4b:33:64:fb:d2:d9:6f:f5:94:08:39:57:44:c4:
                    a9:0e:4a:da:bb:43:5a:b3:5f:59:1b:0f:4f:fa:66:
                    04:21:86:2c:22:36:f2:62:4f:d0:05:9f:67:f8:56:
                    a0:cd:7c:21:dd:cb:d9:73:ed:b8:13:95:68:b6:25:
                    fd:81:5b:f0:61:4d:9c:7d:c4:a1:d3:ad:d5:5f:f6:
                    80:48:61:6d:41:b5:6c:c0:8c:1b:76:e1:8d:cc:f3:
                    09:a5:8a:e5:15:b7:97:a5:f6:55:04:91:21:b0:b5:
                    b4:93:9f:5c:bc:48:e2:b6:e4:11:df:81:55:9d:e3:
                    f8:b8:1d:d5:4d:86:48:c3:42:1e:6f:a4:05:0a:c5:
                    53:3f:0d:87:3b:64:97:b7:29:db:91:13:4a:cc:f0:
                    a2:c1:b5:45:4a:df:5c:3b:50:8a:ea:ad:d0:89:3e:
                    ff:14:8c:ea:e8:7b:97:9c:a3:c0:84:42:b3:36:22:
                    47:63:90:98:bb:06:cd:67:d3:30:30:40:98:59:3a:
                    7c:c4:2f:25:ce:5b:12:07:1f:71:0e:fb:2a:ab:95:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:AA:0E:A1:3F:95:12:4C:5B:19:50:2F:72:A8:A8:80:A4:E3:C1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:24:91:1e:94:24:0a:b0:04:89:e7:dd:a4:cd:08:d9:27:cb:
         f8:b8:06:20:e1:9b:e3:44:a3:d0:e0:02:84:5a:e1:6f:cf:a5:
         ca:96:88:1e:35:72:46:c0:45:48:19:72:6c:f8:5f:3d:f4:15:
         47:dd:48:ad:09:cd:22:00:d4:0b:e5:29:d5:e7:47:8e:52:8f:
         96:44:d7:58:4b:8a:19:28:67:c2:42:89:54:04:1b:55:06:a0:
         9b:40:45:88:b9:ab:b3:4e:ca:29:5a:b5:a9:bc:63:f5:ea:61:
         a4:69:53:ea:ae:39:31:f1:6b:a6:8d:c4:3d:3f:c6:16:51:4a:
         18:41:b8:01:92:28:f5:bb:a2:e0:90:fe:6d:af:8f:a3:68:c9:
         a9:2e:30:63:c9:27:fa:f7:2b:7e:d6:6e:10:40:30:3a:96:23:
         9c:08:2a:d1:eb:94:15:9f:83:99:45:6f:bc:45:70:bd:a2:fb:
         6a:f5:f7:e8:ae:72:4b:67:76:1d:b6:da:d8:b6:53:8c:ba:76:
         72:a9:8d:52:c2:f4:df:75:a8:67:4c:41:1a:1c:6d:08:72:08:
         0c:bc:50:03:36:74:6b:1d:f3:14:56:fd:4a:b5:56:86:d8:d4:
         74:1d:1f:03:cd:d9:05:48:50:3c:ee:f3:a5:0d:55:6b:d5:fd:
         01:88:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:18 2026 by rpki-client