Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7820CED03C6211F0B5121F0BC4F9AE02.roa
File:                     7820CED03C6211F0B5121F0BC4F9AE02.roa (raw, json)
Hash identifier:          roWjJpn1tpDr9SsIMK/pLLyvLrtZ3sb8vyAs7KXW3yM=
Subject key identifier:   A8:DF:19:CD:DA:27:B6:AE:94:DC:91:8A:20:45:FD:6E:39:76:2C:06
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF59
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7820CED03C6211F0B5121F0BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:42:06 +0000
ROA not before:           Mon 06 Jul 2026 16:42:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134343
IP address blocks:        103.110.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61273 (0xef59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:42:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdadd-699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:47:ad:5b:8b:e0:56:13:0a:b4:8f:e4:6d:
                    ec:71:5c:6b:8e:e2:3e:ca:5a:de:08:1b:29:e5:6d:
                    a1:f3:fe:da:72:cd:1f:39:5a:5e:ae:4c:82:77:1c:
                    38:2f:23:0a:48:2b:fc:fd:2c:1f:9c:e1:e5:6a:b9:
                    d0:c9:9f:66:0a:c0:a9:4a:9c:db:ec:bc:d2:45:43:
                    15:f8:2b:46:ce:49:b3:68:90:81:78:b6:1b:a1:bf:
                    b5:83:a8:2a:46:27:ba:6d:91:62:87:f7:17:7d:4f:
                    44:4b:0d:ad:25:37:1c:4c:48:5f:44:90:20:48:61:
                    9f:9d:62:8e:72:31:0f:2a:8e:34:19:6d:b9:31:b1:
                    3c:05:fc:a6:84:81:be:6c:04:f9:43:61:58:14:6e:
                    96:06:7f:13:b2:b1:12:57:40:00:6f:e0:89:14:a5:
                    c2:03:c5:9e:4b:f6:e1:f7:d4:13:5d:4b:0f:e4:ef:
                    aa:05:e7:87:36:45:55:94:75:1b:fd:0e:47:0c:de:
                    b5:69:e6:a7:7d:ca:f8:dd:9a:f7:24:d6:b4:5a:47:
                    1b:60:82:9f:23:1d:31:e8:ff:0d:4c:fc:e1:8d:88:
                    a3:98:d6:79:f6:d2:ce:fb:ca:67:b0:29:a6:89:0a:
                    ab:b1:47:31:ad:93:ad:0b:cc:79:9b:2d:b8:d2:45:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DF:19:CD:DA:27:B6:AE:94:DC:91:8A:20:45:FD:6E:39:76:2C:06
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7820CED03C6211F0B5121F0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:92:1c:de:62:ae:22:76:fe:0d:0a:25:3e:0f:da:55:bd:89:
         75:08:e6:d8:22:62:20:3c:a0:f3:4e:c4:82:64:2a:b3:91:9a:
         09:b7:2e:6d:e1:66:d2:e3:17:fa:7f:1e:ec:4b:40:9c:23:57:
         22:b4:e7:fa:08:6b:f5:2e:c8:8b:ee:bd:9f:ac:46:50:d4:f9:
         0c:da:3b:94:7a:59:9d:7b:af:60:5a:1a:2f:ca:f4:e9:5a:33:
         3b:99:e4:0e:38:8f:de:45:9d:41:3c:58:67:ff:4a:7d:49:97:
         f9:34:57:68:05:81:e3:dc:b2:31:7c:b1:43:70:f3:68:54:dc:
         c9:e6:d9:3f:2c:dc:d5:a8:46:36:83:68:52:e2:84:b2:93:04:
         4c:93:46:cc:77:e5:cc:10:10:70:5a:19:89:5c:2d:88:80:ea:
         ad:8c:b2:fd:a2:40:a0:64:3c:39:dd:06:97:c0:cc:6e:e4:d6:
         71:42:3a:22:54:5d:e9:81:44:d4:a2:4a:5b:77:87:e9:78:82:
         08:c9:e0:8f:15:be:d7:f7:3b:1c:fa:41:d8:fd:81:35:f7:ba:
         00:23:5e:a5:11:ac:45:00:30:c0:88:d7:8e:ee:1f:65:d9:b8:
         46:c5:16:a2:a9:3e:83:8a:74:6c:37:43:7c:60:01:49:3d:c1:
         77:06:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:25 2026 by rpki-client