Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
File:                     99170A903E2511EBB1B0E431C4F9AE02.roa (raw, json)
Hash identifier:          H5ebVWGbVcj6OcY5VHI/nzx6Q18q2dD/TM8MDtxtokY=
Subject key identifier:   89:AA:DB:75:30:97:17:B0:FB:78:71:79:A9:CE:23:1F:13:73:AB:1D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:12:24 +0000
ROA not before:           Mon 06 Jul 2026 17:12:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141295
IP address blocks:        103.160.49.0/24 maxlen: 24
                          2001:df5:9880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62196 (0xf2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1f8-db51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:f7:35:33:ac:46:4e:56:ba:b8:20:71:07:
                    fd:da:30:0d:5f:ff:59:e6:51:91:82:96:04:03:d9:
                    32:d0:d0:89:2b:dd:08:55:6b:31:ff:7a:66:b4:1e:
                    2f:a4:8b:85:e9:59:a5:76:48:df:3d:42:60:44:90:
                    2a:a7:17:cf:1d:1a:c5:5e:a7:eb:3b:2d:55:64:59:
                    08:6b:86:4f:2d:42:b0:51:9e:e6:be:60:d0:9e:27:
                    5c:1f:9f:5d:75:33:78:3f:14:93:fa:9c:c5:a5:2e:
                    4b:d9:f8:16:66:1a:ea:db:f1:05:ef:68:65:b2:06:
                    fc:48:82:30:e4:e1:a4:9b:f1:b8:ca:d4:71:a0:c0:
                    1d:5f:a2:4f:ad:08:e3:30:8f:a9:ba:3b:77:e6:34:
                    3e:76:ad:e5:1f:13:a1:59:eb:6a:a3:b7:aa:ee:bc:
                    26:27:1d:c3:85:ee:c1:2a:14:bb:5d:00:34:f9:41:
                    97:59:40:dc:af:59:c9:01:60:1e:2c:ed:d1:5f:ac:
                    90:a8:3d:30:d1:93:30:8a:a6:a7:04:d8:6a:d7:a9:
                    1e:01:0c:8b:b7:0c:1e:f9:0b:d0:4d:e5:68:75:19:
                    32:85:45:fe:d5:be:9a:45:a3:50:6e:31:98:3f:e1:
                    fb:74:f5:3a:01:7b:a0:b9:52:70:39:62:39:a2:88:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:DB:75:30:97:17:B0:FB:78:71:79:A9:CE:23:1F:13:73:AB:1D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.49.0/24
                IPv6:
                  2001:df5:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:b9:98:f5:de:97:8d:aa:29:3a:64:0c:77:dc:c1:d7:d9:
         aa:f8:52:4c:e3:39:be:c9:cc:d4:a5:98:9e:4c:61:b0:58:84:
         5e:e2:65:2d:b3:ac:2f:3f:92:9c:07:a9:2d:c1:e2:80:04:95:
         77:46:7d:c9:98:d5:d3:68:79:7f:aa:f3:82:86:09:93:c3:52:
         0f:6d:de:89:f0:ad:f9:52:3b:21:6a:d8:f7:eb:fc:b6:ba:90:
         3f:da:06:33:63:e4:06:89:19:46:e2:5f:f4:58:6c:3c:aa:91:
         71:b4:ef:45:45:aa:ef:c8:d5:42:5f:be:63:f0:a7:13:c9:5a:
         41:56:6d:e8:ab:59:d0:50:4c:a0:60:58:36:4c:81:59:45:12:
         4c:c9:5e:89:b2:df:a8:34:b9:d8:cf:1a:87:4a:f5:ea:bc:4e:
         e0:d7:51:d7:3f:d0:44:53:db:c4:68:29:cc:26:fd:0f:0b:56:
         ed:0c:ee:de:15:3d:5f:c1:78:af:cf:ea:d3:e6:85:40:9e:b4:
         86:a8:6a:ee:0c:50:7d:91:9c:58:a0:79:24:20:ad:79:fb:4f:
         a7:88:28:51:34:be:39:0d:88:d4:e2:3c:d3:0d:a7:37:bc:f4:
         14:ac:cd:67:9b:c4:21:0c:d1:48:d8:04:52:57:c7:20:8f:f1:
         a6:29:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:40 2026 by rpki-client