Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D6478A6789611EEB5C0F64FC4F9AE02.roa
File:                     7D6478A6789611EEB5C0F64FC4F9AE02.roa (raw, json)
Hash identifier:          RHXl18KcbtRcnR28dh7k0hLBuuysquhnkceFNRGuFDw=
Subject key identifier:   12:C3:1A:1F:B2:5F:CC:DF:4E:A5:06:D1:87:13:95:F5:1D:F3:D9:D3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4B2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D6478A6789611EEB5C0F64FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:27:22 +0000
ROA not before:           Mon 06 Jul 2026 17:27:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149247
IP address blocks:        103.179.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62642 (0xf4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:27:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be57a-2e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9e:db:fc:88:72:57:cd:3d:66:26:d5:84:e3:
                    16:7d:3f:95:9a:69:14:6b:6b:04:76:57:2a:c0:d4:
                    fd:76:0c:91:5a:60:cd:5c:ed:ed:42:94:1a:5a:d3:
                    e5:c4:8d:07:14:5b:c8:75:b1:33:99:42:d8:58:0c:
                    b3:44:07:f1:50:42:45:d4:58:9a:2b:01:20:f2:ba:
                    8a:56:08:d2:36:a0:b5:e6:43:fc:33:91:14:84:41:
                    5d:fa:31:4d:87:e7:c7:4a:8f:cf:83:57:9c:1c:66:
                    cb:0f:f1:a8:02:4c:de:53:55:e5:53:bc:c4:f7:82:
                    4c:47:c3:99:73:16:1b:f7:b8:ea:d5:42:40:1d:2b:
                    69:ea:9a:e3:73:eb:c6:ec:8b:cf:25:7c:ac:27:77:
                    55:ec:3a:1b:7d:a9:09:21:79:53:4a:b2:e0:08:90:
                    0f:a4:c7:42:7a:0e:e2:7b:70:1e:a0:0a:f6:20:46:
                    99:65:2c:a5:77:b0:29:dd:1c:57:ff:65:fa:23:a1:
                    59:79:c0:5f:e6:03:cb:c4:6f:e0:eb:06:07:b0:e8:
                    b8:65:ce:bf:77:60:06:1c:02:7c:bb:96:a2:47:de:
                    08:3a:c2:f7:e8:c0:d5:ec:39:ca:ac:e9:fd:05:8c:
                    2a:80:00:41:65:ed:d6:a0:87:0c:80:e7:3f:8d:c7:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:1A:1F:B2:5F:CC:DF:4E:A5:06:D1:87:13:95:F5:1D:F3:D9:D3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D6478A6789611EEB5C0F64FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:0b:6f:71:93:07:90:41:b8:db:93:4d:6a:c8:ac:cf:1c:
         ea:de:01:e2:ec:14:a5:a8:cb:75:c1:ac:0c:c2:24:c7:41:e0:
         d7:37:0b:47:5b:05:b3:68:d3:be:cb:54:fc:2a:d2:7b:f3:75:
         20:df:79:09:9f:e9:b6:9d:0e:84:a8:f5:05:38:8d:f2:b1:be:
         de:31:27:30:88:26:38:61:c6:15:90:c5:6e:76:a3:85:c1:8c:
         cf:54:61:76:81:af:f3:f6:90:4f:5c:33:0e:41:2e:a5:63:07:
         53:21:a9:ab:07:a5:36:93:29:d4:67:c1:83:fd:20:86:1d:03:
         8d:66:ec:08:7f:5e:7d:9a:24:05:91:c9:f3:94:f0:05:5c:76:
         9e:98:dd:0d:2e:fe:9e:34:eb:6e:22:e4:ab:e3:dd:66:2a:c2:
         28:f9:74:86:ee:fe:d1:d6:fb:a6:be:be:6c:79:8c:89:9c:d4:
         de:e2:d0:79:08:db:d3:7d:ea:10:47:2a:52:40:4c:55:69:92:
         53:dc:5f:95:c5:13:02:de:4e:4f:48:57:cd:07:25:7d:65:a2:
         a8:0b:db:03:51:dd:50:35:5d:7b:8e:e7:eb:fb:39:36:4a:00:
         7b:2b:96:5d:cf:cb:b5:5a:73:90:46:80:ca:45:8c:39:86:eb:
         34:e8:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:08 2026 by rpki-client