Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AE99CA0DF711EBAB06BC0BC4F9AE02.roa
File:                     96AE99CA0DF711EBAB06BC0BC4F9AE02.roa (raw, json)
Hash identifier:          /VWH0XeXK21SGnlq3W0ykP+RQ5+y54LfW7u0+wMu49Y=
Subject key identifier:   15:43:76:BE:C7:B0:FE:2A:ED:20:95:D8:6F:DD:27:E0:6B:28:C1:A1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE9D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AE99CA0DF711EBAB06BC0BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:35:59 +0000
ROA not before:           Mon 06 Jul 2026 16:35:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133640
IP address blocks:        103.193.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61085 (0xee9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:35:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd96f-f9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a8:b9:40:19:7c:e1:7a:ab:ae:30:76:ff:4a:
                    69:26:d5:5e:49:f5:91:29:3e:30:96:ce:d7:d6:cc:
                    22:61:40:e0:68:ad:32:57:4c:89:01:a5:70:4e:51:
                    5d:ad:61:13:c1:87:50:b2:6c:0d:da:89:c9:e0:1a:
                    7b:c6:83:3c:26:83:8f:df:f4:fd:4c:ee:9d:2a:97:
                    59:ad:6b:f8:1c:03:28:34:ad:ce:f0:cf:13:e3:dc:
                    71:e1:ae:88:d2:f6:c6:17:32:f0:5a:3a:66:78:4e:
                    08:ce:48:2b:c5:6b:e8:eb:b8:c7:85:e4:68:a5:15:
                    ef:9d:ac:c2:d3:f7:cf:2c:76:b8:c8:86:3b:cf:73:
                    63:06:f7:4c:65:7f:79:5f:bd:47:12:0b:c8:79:23:
                    ff:78:24:49:d3:6b:d9:ad:03:42:b7:ab:ff:05:17:
                    5e:3f:61:2e:fb:24:6d:40:39:5a:99:85:c9:74:3d:
                    18:36:a7:5b:36:82:dd:5d:3f:91:86:9a:4a:ed:bd:
                    3b:81:cb:5f:ba:14:9f:11:85:8b:64:37:0a:b1:c4:
                    c5:c1:13:48:f3:12:32:83:3f:2b:e5:22:0a:5d:3b:
                    38:a1:33:22:a3:d8:38:35:a5:cd:8c:12:de:cc:fc:
                    bc:57:a9:5a:8c:45:e8:81:cb:df:c5:56:68:e1:a2:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:43:76:BE:C7:B0:FE:2A:ED:20:95:D8:6F:DD:27:E0:6B:28:C1:A1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/96AE99CA0DF711EBAB06BC0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:09:eb:b4:39:18:80:c9:4b:0a:70:67:0f:e2:16:c4:fc:
         43:3e:c4:41:14:ad:ae:60:1e:80:e2:12:a9:77:bf:74:3a:44:
         05:38:5f:68:41:54:e7:f0:71:e9:2e:80:5f:b2:3e:6a:46:6a:
         bb:94:ce:a8:cb:08:87:9d:70:fe:81:0a:3f:d3:34:5a:3e:c3:
         8c:aa:52:9d:26:e1:4b:a9:16:35:2e:fd:4b:d4:15:58:d8:00:
         5c:e8:6e:9c:f7:48:d9:fe:93:9a:a0:0f:61:23:b6:65:97:f9:
         4c:28:8e:1a:9c:4b:41:99:d6:ee:22:26:bf:28:34:ba:a0:3a:
         84:c3:ea:af:e5:ad:d1:37:ad:29:26:82:43:a7:4d:3d:52:00:
         2f:ad:ec:aa:e0:83:90:5f:fb:a6:6d:74:8f:54:68:39:ec:4e:
         47:14:ce:84:44:69:0e:c6:39:a4:84:5c:0e:dc:8c:07:a8:c2:
         88:ae:bb:6f:ee:d0:0b:51:a9:16:95:12:b2:52:7f:de:88:fe:
         10:d0:f2:4e:49:7b:a6:87:6b:73:39:ba:80:ab:4a:4d:73:f2:
         97:11:7f:7e:7e:e9:6d:19:4e:19:5b:a4:24:d5:4e:4e:47:2d:
         6e:fc:14:7f:ae:27:21:a9:5b:4e:af:72:bd:11:2e:d9:13:c3:
         2d:c4:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:50 2026 by rpki-client