Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa
File:                     93E047423F7B11F0A30C8320C4F9AE02.roa (raw, json)
Hash identifier:          l5JfzCKvioKZpvUmOAlU5W5UP8xyNDtDT/W4f22eHRA=
Subject key identifier:   BC:4F:D0:1A:F7:5F:19:22:CC:E3:9D:12:C0:60:B9:B1:72:A0:8B:90
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:02:25 +0000
ROA not before:           Mon 06 Jul 2026 17:02:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138244
IP address blocks:        103.94.27.0/24 maxlen: 24
                          103.191.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61895 (0xf1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:02:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdfa1-c80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:11:28:d7:9a:0e:79:b5:56:9c:8a:ab:87:
                    ad:af:da:d4:fd:14:d7:00:5c:a8:7d:8b:71:48:d8:
                    46:a7:e0:e3:3d:e4:80:78:89:25:07:cb:a0:a3:55:
                    f9:bb:45:83:f7:98:50:7f:9b:08:f1:78:d9:8f:22:
                    9f:d7:fc:3f:66:25:ad:be:e9:d8:63:63:7b:33:98:
                    02:d6:f0:d7:ac:5c:ec:1c:17:bc:76:29:51:c5:68:
                    ef:18:a6:ac:ad:50:93:7f:da:ce:1c:72:90:0f:78:
                    01:db:b1:95:d7:99:2a:5d:fe:d3:be:bd:ca:4d:30:
                    43:0c:f9:95:86:a8:80:b2:8b:9e:21:8e:64:a1:7b:
                    ef:bc:b5:e3:a5:ef:2a:5a:5a:28:2b:d0:6c:e2:56:
                    59:53:3e:7a:13:0b:14:28:54:0f:d2:61:0d:0b:85:
                    c1:fd:51:85:49:c2:01:a3:b9:03:2b:fe:2e:d3:25:
                    bd:3c:cc:55:f2:42:8d:7d:32:0d:07:72:d2:0c:44:
                    4b:c4:b2:6d:cc:8b:f3:ee:30:52:9a:41:fc:53:12:
                    18:9c:46:27:30:af:da:e8:65:d7:d3:2c:d2:ce:73:
                    8c:0f:ef:f4:40:f3:9e:4f:c3:1c:a0:49:41:57:aa:
                    44:20:8f:49:05:99:af:2a:b7:36:b0:58:e2:81:0d:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4F:D0:1A:F7:5F:19:22:CC:E3:9D:12:C0:60:B9:B1:72:A0:8B:90
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.27.0/24
                  103.191.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:6d:f8:94:eb:77:e0:91:a2:e6:6e:eb:da:90:51:e8:8e:
         0b:09:c1:ec:1a:ce:c0:8f:e9:ab:3d:d0:46:02:3a:f1:51:76:
         be:43:86:16:32:c2:27:24:a4:70:89:ef:48:b9:d0:62:00:f9:
         e8:eb:89:e2:e5:60:71:ce:55:66:0a:b4:8b:82:16:f2:83:0c:
         35:51:46:9a:18:41:4e:04:ef:21:0d:46:bd:5d:3d:e2:c2:4f:
         9f:ec:f9:e1:ff:20:40:97:8c:6e:d2:7a:30:a2:7d:40:a6:6b:
         60:d1:6a:35:bf:42:27:14:39:4b:0e:a3:df:b5:56:71:cc:e8:
         1e:ea:69:b9:48:ee:a8:f1:f6:ed:db:2d:08:6f:87:ef:29:fb:
         61:b6:71:af:d6:15:8e:0c:db:c0:bd:03:61:db:0d:19:0e:54:
         13:d7:71:70:66:06:bc:fa:f4:db:b8:c7:c2:06:10:4e:9b:da:
         56:42:bb:53:14:e6:1d:f7:db:93:c2:3c:be:e8:d6:5a:96:f3:
         d4:ba:ce:c4:46:f7:c2:07:0b:df:c2:ca:21:da:ce:4c:ac:80:
         d1:1b:03:8f:6c:e3:53:45:ef:02:aa:05:94:a7:0f:fe:59:98:
         19:26:47:29:66:87:eb:f7:6e:63:ec:4a:c3:6a:c2:6b:49:d9:
         a6:bd:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:30 2026 by rpki-client