Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82839FE838B311ED8B6C8318C4F9AE02.roa
File:                     82839FE838B311ED8B6C8318C4F9AE02.roa (raw, json)
Hash identifier:          WIZK6GG3gwEIRjlx/m5hRr+K+NaeXAh+iJ+bF6WC8Z0=
Subject key identifier:   8C:11:20:BD:EC:AC:09:21:3E:41:91:D5:57:6A:A7:77:E7:4E:9A:D9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F43C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82839FE838B311ED8B6C8318C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:23:33 +0000
ROA not before:           Mon 06 Jul 2026 17:23:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147196
IP address blocks:        103.176.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62524 (0xf43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:23:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be495-6e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:ad:f0:64:0e:ca:d6:2b:7f:0a:96:96:db:
                    ea:8c:dd:0f:d7:d4:39:3c:8e:d2:25:ac:d0:2d:09:
                    07:36:e7:66:7a:1e:0f:52:5f:ff:77:6a:17:3e:61:
                    fa:42:53:67:5f:2b:03:3e:48:89:8b:ee:2e:af:7e:
                    7c:31:09:cd:b5:e5:d5:75:6d:b4:6e:d0:a7:1f:63:
                    25:f8:74:6e:1b:67:c5:fd:07:f4:84:b5:94:a7:6a:
                    ff:db:79:0d:87:61:5b:b4:4f:be:84:ad:22:63:08:
                    9f:9b:c0:14:2b:7f:10:45:10:b1:be:27:c2:ec:1e:
                    16:ac:dc:6d:5c:56:3f:f3:b3:e4:d9:26:a3:29:70:
                    d7:de:de:27:23:ca:31:83:77:fa:53:00:3b:f5:ed:
                    43:53:e7:64:5c:bc:8e:4f:09:a2:b6:b6:2c:71:7d:
                    7f:05:c3:fd:ba:e3:52:f9:03:8c:43:cd:95:ba:7f:
                    97:3d:59:e4:c4:29:c6:8e:c8:df:85:80:aa:3e:75:
                    3b:07:da:44:d6:f3:59:b0:ee:b7:e0:39:03:ca:fe:
                    9d:34:f2:bf:c1:41:66:c6:81:62:75:a9:dc:7e:e5:
                    89:65:c7:db:c9:dc:24:c3:a1:22:06:65:34:30:f7:
                    db:bc:dc:24:4a:4f:59:5c:58:e0:ec:7b:a4:f7:1f:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:11:20:BD:EC:AC:09:21:3E:41:91:D5:57:6A:A7:77:E7:4E:9A:D9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82839FE838B311ED8B6C8318C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:a2:63:a6:03:7b:f4:db:97:d5:b4:da:1b:5c:b9:6d:56:
         0f:b1:76:3b:eb:fe:38:b3:90:28:0b:53:d2:bd:99:9a:ee:52:
         a6:5f:f6:17:ad:46:63:d3:55:2a:9f:b2:a5:7e:91:81:c5:74:
         43:4f:ad:9a:bb:ee:d3:31:b6:09:8c:2d:9d:52:d8:3d:62:62:
         99:ed:08:d4:5f:47:fb:72:b1:52:e0:8d:15:2e:9c:f9:db:04:
         94:9d:1f:e1:f1:83:49:c6:d0:b1:0b:cc:65:ac:5e:a6:50:8b:
         74:ed:5b:3d:06:6e:a1:34:1e:46:5e:77:55:03:bc:22:95:95:
         5f:c6:21:54:b9:cd:de:d2:45:00:54:6d:f0:1e:a9:b4:45:89:
         09:98:d0:2c:d1:07:08:ff:97:e7:72:1c:26:21:92:02:f6:5a:
         e2:ed:5c:76:b7:00:5c:f1:e1:3f:d6:1b:f5:93:4e:13:f0:5c:
         d0:75:3a:85:ad:f9:ca:04:71:37:37:5c:65:ba:a1:38:24:34:
         01:78:ca:20:79:be:59:ce:f9:31:67:2e:c1:2c:2b:4d:62:66:
         15:26:e0:56:4e:53:0e:a2:19:9a:20:2e:8d:1c:7e:41:44:33:
         02:e1:e8:3d:0a:2d:6d:56:57:05:28:c9:ea:67:a9:94:1e:26:
         61:2d:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:08 2026 by rpki-client