Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa
File:                     7DDF3CEE685911F09A046E78C4F9AE02.roa (raw, json)
Hash identifier:          wBcJfVWApptJekblxnIgoMq3l0FxdVvaCwJ5HoRaYqE=
Subject key identifier:   33:47:50:95:4A:AE:E3:10:ED:AD:3D:EF:15:DB:3C:EB:80:BB:B8:7F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:44:05 +0000
ROA not before:           Mon 06 Jul 2026 16:44:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134924
IP address blocks:        103.173.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61334 (0xef96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:44:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb54-17fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:3d:2b:c7:a5:c4:ed:48:8f:f9:fe:64:f9:
                    34:9d:58:0a:48:be:c8:af:e7:bd:3d:ef:e2:02:3e:
                    8b:38:12:af:14:78:fc:74:29:8d:c9:a0:14:cb:ca:
                    dc:37:c8:17:24:a1:a9:c7:45:fc:f6:1b:b7:19:15:
                    7b:0b:e2:08:24:73:a1:c9:20:bd:e6:2b:f1:ff:e7:
                    86:b7:97:ec:38:8a:dc:02:e9:11:34:08:94:fb:57:
                    aa:4b:62:ef:31:6c:bb:b5:60:e3:51:9d:24:7e:a1:
                    ef:e8:c4:83:2c:a2:40:17:65:02:ec:3e:27:69:11:
                    fb:0d:b5:8a:29:bf:6b:ff:d0:81:1c:e5:00:48:c6:
                    92:02:2d:ad:fc:c2:ec:80:31:a6:9c:cc:31:a3:6d:
                    0e:8b:f7:3c:c8:82:14:85:1d:56:f0:20:6e:34:a6:
                    f7:df:b0:ab:de:56:7c:06:4e:6a:be:25:af:ab:fe:
                    3e:2a:ea:ae:8c:e8:d8:c8:29:1b:50:14:24:a7:9f:
                    6c:44:84:ee:b7:83:69:2d:31:fd:80:9f:b4:75:bb:
                    6a:a3:19:01:37:94:1a:c5:5c:91:de:7d:5f:c7:3a:
                    f0:4d:68:c8:30:c0:e7:db:ef:e0:25:da:6b:06:1a:
                    39:47:55:e0:3f:1d:03:f7:d4:72:23:b1:fa:23:22:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:50:95:4A:AE:E3:10:ED:AD:3D:EF:15:DB:3C:EB:80:BB:B8:7F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:4e:bf:a8:54:df:5e:6b:70:30:c7:8f:20:27:86:15:c4:
         1c:29:10:80:ce:d9:47:00:64:1e:ee:73:3e:1c:9c:57:43:7f:
         1e:a7:91:c2:77:34:a9:c5:f5:70:7a:22:f5:0f:ad:ed:42:03:
         0d:04:25:16:fb:c4:94:78:22:28:1f:fc:60:e2:b3:4f:6c:61:
         a9:ab:2f:4d:9a:b3:b3:8a:90:ed:65:af:f8:c7:e0:cb:a9:84:
         7a:72:95:f8:02:f3:d1:05:e7:3c:4f:13:aa:3c:17:32:98:24:
         e5:48:91:e9:b0:c1:9d:d9:1e:be:93:d0:68:e2:69:41:a7:94:
         9d:45:98:ab:f7:82:94:46:d2:35:40:f4:d5:47:fc:2f:3a:3a:
         15:0a:96:5b:dc:97:63:fb:0e:da:b8:58:32:65:82:48:0e:ac:
         ef:06:6b:5a:f2:bb:fc:18:90:79:59:dd:af:c6:1e:fd:81:15:
         61:fa:b6:0d:29:2f:e4:04:9b:5e:71:d1:be:0d:03:95:4e:9f:
         d5:61:c8:1a:c4:ef:72:0d:33:c5:8e:50:66:5b:42:78:9d:ae:
         0f:95:63:d2:86:e8:6e:86:44:c0:b3:b2:d4:4b:09:31:74:6e:
         73:9c:25:dd:69:15:52:4b:be:7e:f4:27:c6:bb:99:f9:68:f5:
         8c:9b:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:45 2026 by rpki-client