Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa
File:                     8A1AFDE4013111EF9F5C142DC4F9AE02.roa (raw, json)
Hash identifier:          a8kl+47L3EcnCJiVTWgoO0GDKWHqGg7BK0sTVCDokCk=
Subject key identifier:   AC:5D:7D:D2:5B:AC:42:64:70:39:4E:A8:DD:41:1F:F6:2D:E6:92:2D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3DB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:20:12 +0000
ROA not before:           Mon 06 Jul 2026 17:20:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142508
IP address blocks:        103.170.6.0/23 maxlen: 24
                          2407:aa40::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62427 (0xf3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be3cc-df3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:cb:e5:f6:52:b6:08:c9:30:bf:23:cd:ac:
                    d6:af:3e:6e:78:18:78:71:38:f9:2c:1d:69:96:04:
                    64:d5:8d:7f:5a:2f:e2:e9:5c:8f:19:65:8a:a4:11:
                    b7:c7:c9:66:d8:a6:fc:11:d9:80:b4:49:2d:fe:52:
                    6d:e7:fd:27:72:3d:9a:dc:31:a3:ba:12:5c:d5:e4:
                    8d:2c:10:68:e6:c7:43:63:44:96:7e:75:a6:33:dd:
                    7e:5a:a8:a8:13:c5:57:38:69:78:6e:1f:3d:cd:84:
                    2f:b1:ae:6d:47:7a:30:ec:92:e7:49:b2:b1:a4:a7:
                    9e:69:3a:26:82:78:47:0c:fa:67:8a:db:25:dc:af:
                    a7:3d:4f:34:b8:d6:69:61:e2:84:bb:a0:f8:e7:34:
                    12:bc:2c:91:c6:25:6c:9b:cf:12:8c:70:34:c3:17:
                    63:9c:fc:6d:10:ad:b4:43:cf:d5:c3:f0:0d:f4:ed:
                    3d:5d:72:90:8f:0f:ab:88:5a:85:31:15:b3:d0:d2:
                    2c:d5:00:ac:0d:a4:a2:78:07:5f:b1:68:27:4b:de:
                    1b:1d:5f:0a:ac:97:9a:bf:69:5c:ea:e2:c4:7b:69:
                    d9:7e:65:7c:11:9c:ff:02:86:e1:2e:18:fb:46:b4:
                    bb:84:f4:c0:cd:06:e7:7b:75:c0:b9:fa:da:f5:6f:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:7D:D2:5B:AC:42:64:70:39:4E:A8:DD:41:1F:F6:2D:E6:92:2D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.6.0/23
                IPv6:
                  2407:aa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:66:04:f9:db:78:fe:8f:ea:80:a8:a9:32:82:1c:9a:18:
         b3:7f:70:1c:0a:e0:4c:71:42:1b:8c:78:65:73:ef:8d:c5:90:
         1a:a4:e9:b5:bd:5f:62:40:a8:e1:b6:15:ec:1f:30:73:c3:0d:
         c2:4f:4c:30:13:0e:85:f7:eb:6a:4c:8e:1b:62:80:70:49:8c:
         9a:cf:5e:f8:a5:d6:c5:97:94:59:91:95:90:09:ba:03:a8:8d:
         70:36:f0:ee:0f:89:e0:d7:c9:72:3a:8e:ac:55:96:44:e0:e3:
         74:04:c4:b5:3e:18:f0:a0:29:03:56:68:7e:b5:0b:c0:44:dc:
         2f:d5:18:81:9f:60:93:6e:0e:91:66:4b:fd:f0:bc:41:dd:99:
         2a:b6:67:ae:aa:90:06:c1:43:74:8e:f4:35:f6:85:8e:2e:64:
         a2:5a:e0:9f:7d:2d:11:25:f1:f4:8a:14:a0:8f:8a:24:b2:6c:
         97:77:1d:0f:62:19:81:c6:3c:14:b6:5d:6c:ff:1e:c7:88:83:
         fd:da:fc:5f:d1:d4:24:ff:70:01:89:ba:f6:d5:83:76:51:39:
         ef:cb:0f:f8:7a:fc:9a:26:33:34:03:87:23:98:e2:c8:52:e9:
         d7:a3:80:f9:65:28:64:fa:c4:13:93:ca:ec:ff:4c:b5:19:81:
         7c:66:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:09 2026 by rpki-client