Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa
File:                     8F909F1A240B11F0B5394082C4F9AE02.roa (raw, json)
Hash identifier:          Vn79EF3wY8pz5TAw4Eu+E5nzGFThLr/06vHMGDvtq0A=
Subject key identifier:   BE:71:4D:75:0D:27:96:5C:DE:EF:08:C2:08:A3:95:37:61:27:29:27
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:29:14 +0000
ROA not before:           Mon 06 Jul 2026 17:29:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149566
IP address blocks:        103.187.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62701 (0xf4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:29:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5ea-9653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:6b:64:91:8e:36:9e:40:91:32:b6:5c:f3:
                    06:35:ad:92:9c:12:3c:8e:ad:2e:70:ff:db:1f:74:
                    56:b7:0d:91:85:61:95:bd:ef:db:89:4b:8d:72:7e:
                    a2:c8:40:bd:44:4c:1b:a0:43:1d:7f:42:ea:77:e7:
                    ff:23:bc:ce:45:8f:db:5a:d3:7f:9c:ae:f6:ae:a4:
                    92:25:bf:86:31:89:11:41:74:97:e4:f7:87:64:8b:
                    fa:50:be:5f:fe:1e:91:88:0a:b6:ef:53:99:00:98:
                    e4:4d:fc:50:d2:f3:58:f2:ee:31:42:9a:7b:cf:11:
                    1f:af:1d:9a:0c:4e:b0:2c:2c:19:f1:25:9a:74:04:
                    f6:12:93:d9:46:19:b5:67:1a:e3:0d:e5:e0:3f:da:
                    8c:f9:63:80:05:08:07:ff:34:83:33:b0:32:0e:d5:
                    ab:66:ab:83:aa:70:0a:36:b9:1e:38:ce:3f:94:c9:
                    3e:c4:89:9c:63:c5:98:ae:78:15:09:c6:c6:7e:4f:
                    de:df:31:b0:bb:6b:96:fd:2a:09:73:2b:79:eb:98:
                    dc:e6:75:9f:19:ab:54:b8:f4:28:2f:d1:dd:c7:e4:
                    69:6f:9c:11:73:bf:38:bc:c7:4f:40:a5:d3:9f:4a:
                    c4:bd:7d:9d:d3:25:b9:81:08:42:d0:89:36:fa:9b:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:4D:75:0D:27:96:5C:DE:EF:08:C2:08:A3:95:37:61:27:29:27
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F909F1A240B11F0B5394082C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:06:fe:03:5c:b8:b0:14:52:c1:24:07:b8:ad:ff:55:20:
         cf:33:46:d3:8e:0e:ae:68:e1:89:36:94:ba:3d:3c:e8:8b:ad:
         d5:b1:63:3c:ef:74:08:e7:f9:40:63:e6:06:ee:17:94:5b:fa:
         6c:27:9c:67:a5:4b:4e:2d:19:90:74:b4:6b:18:e5:26:84:b1:
         15:dc:0e:8b:4c:f0:53:80:03:f4:e5:a6:32:27:f3:4a:5e:82:
         d1:e6:78:85:73:2b:ff:44:72:b7:3f:fa:eb:4e:82:31:ac:42:
         79:8d:ca:1d:26:63:bd:61:2d:42:8a:81:1a:1d:01:50:fe:19:
         6f:3b:3c:74:43:83:e3:34:a3:45:c2:9b:8c:96:d9:24:f0:fd:
         be:2c:b9:64:86:f6:fc:b0:56:5e:3e:fe:5f:37:ab:4c:f2:18:
         b5:9e:67:e1:ac:08:d2:1c:42:f3:5a:8d:57:0d:b3:45:18:c8:
         70:5e:6d:98:39:b2:d4:36:5a:16:db:4f:7a:b6:51:8d:c6:85:
         ec:26:c8:f6:27:e1:02:56:3b:76:d1:83:ef:eb:30:6a:41:ce:
         8d:bd:eb:fa:17:a3:82:69:e3:36:75:3f:d1:9e:f2:12:98:78:
         1b:7b:2c:03:bd:a2:d5:7a:f3:27:79:d3:ce:08:be:43:d5:1a:
         b2:a9:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:43 2026 by rpki-client