Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DB0D96CA89F11EBAAF68E6DC4F9AE02.roa
File:                     8DB0D96CA89F11EBAAF68E6DC4F9AE02.roa (raw, json)
Hash identifier:          CCb08o7pjDfXVjy7Y8RFc+AjHyhfikHx1DZ+jIjAIKU=
Subject key identifier:   03:F7:9E:5E:47:F3:AA:05:E0:3D:C5:5C:1E:81:A4:E9:87:56:42:5E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE4B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DB0D96CA89F11EBAAF68E6DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:33:16 +0000
ROA not before:           Mon 06 Jul 2026 16:33:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133002
IP address blocks:        103.251.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61003 (0xee4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:33:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd8cc-5ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:d0:07:8b:98:0e:f5:8d:87:6b:48:1c:94:
                    01:c4:c4:71:18:8a:19:fe:82:d1:0d:a4:ce:68:45:
                    69:30:50:b1:f1:03:4b:2d:2d:dc:16:2d:40:6d:62:
                    c5:79:66:94:48:42:8e:c6:10:e1:37:02:c2:15:7f:
                    c0:da:17:17:5d:51:bd:29:82:2e:03:ed:91:3b:1c:
                    99:d4:57:f5:0e:0a:20:a9:93:ca:22:60:14:25:67:
                    7d:63:25:ef:7c:20:e0:c2:5d:d2:b9:bf:94:06:6b:
                    7e:0e:45:24:5f:ba:c8:76:c0:56:dc:6c:8e:be:a5:
                    27:61:41:57:0e:24:63:10:24:92:3f:0b:d3:d1:b6:
                    b2:0d:ed:01:30:81:4c:96:32:36:3a:18:ed:4e:eb:
                    e2:68:7d:13:09:14:94:77:26:b5:cc:66:01:12:f8:
                    62:02:a3:c9:d7:6c:4a:a7:77:10:c5:16:99:bc:03:
                    50:47:bf:74:0b:40:df:3a:62:f6:46:a2:c9:64:ce:
                    28:e3:63:d4:af:0a:30:11:26:7c:05:27:2a:66:1c:
                    9a:f1:ba:28:bd:ef:c7:10:2e:cb:51:c4:77:de:18:
                    bc:06:d8:5a:12:28:4d:6b:fe:fe:64:13:c4:2f:e7:
                    5e:c4:2d:78:d6:b6:5c:f0:89:b9:0d:78:23:f7:4a:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:9E:5E:47:F3:AA:05:E0:3D:C5:5C:1E:81:A4:E9:87:56:42:5E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DB0D96CA89F11EBAAF68E6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:0a:fc:bb:ae:c6:c4:24:89:e1:e7:38:e7:3c:fa:75:09:
         b9:0f:70:d5:50:0f:57:9a:a1:63:d3:90:cf:23:b0:7d:ec:0d:
         cf:e6:ad:42:35:d9:d3:92:d6:f9:95:9e:5c:3d:3c:73:6c:56:
         da:98:04:5c:52:ae:69:78:24:6d:97:ea:be:db:26:f1:b4:fb:
         0c:02:2f:9c:25:cb:b0:9b:a6:bb:48:f1:b6:e0:20:9e:af:8d:
         72:ab:34:fa:1d:fa:f3:70:76:f7:55:ae:9f:55:29:23:55:c2:
         75:09:01:a7:4e:1b:1c:c5:7d:56:41:fb:fd:26:03:13:19:b5:
         70:ae:27:92:6e:29:fa:6c:49:55:bf:c8:d0:5d:0b:55:71:84:
         92:26:5d:5d:11:2b:1a:c5:30:93:07:ce:b3:20:1c:48:e9:bb:
         a6:54:9e:e0:36:b1:c7:99:b0:30:d3:03:1a:63:55:50:65:52:
         88:0f:8c:10:ea:a8:b0:42:36:c1:c9:b4:fc:82:5e:a6:be:15:
         39:b5:ed:f0:c2:09:42:2b:be:f3:70:1b:66:e3:93:67:ad:af:
         1b:67:10:bc:8a:e6:7f:1a:6b:14:ae:5d:20:d6:70:e2:ed:f1:
         f9:3f:00:1e:68:44:86:77:8e:3e:77:03:1f:69:3b:70:d2:3f:
         d9:50:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:09 2026 by rpki-client