Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9945CEC485BA11EC94CD2D6CC4F9AE02.roa
File:                     9945CEC485BA11EC94CD2D6CC4F9AE02.roa (raw, json)
Hash identifier:          kF0RqXuXJoGsI4oRgpKPil6WSDMW1TLftYjEMR2aIqs=
Subject key identifier:   73:EF:EA:D9:3B:76:5A:E4:8D:28:48:B8:76:6F:AC:1B:DE:98:44:61
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFA2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9945CEC485BA11EC94CD2D6CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:44:28 +0000
ROA not before:           Mon 06 Jul 2026 16:44:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134941
IP address blocks:        103.12.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61346 (0xefa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:44:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb6c-532c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:b8:fc:a3:5d:37:1b:21:69:9d:da:db:d2:
                    df:37:4d:84:d9:e6:e8:64:15:30:12:da:d3:77:00:
                    8e:19:3b:db:01:9e:c0:38:17:b2:48:ec:ff:17:8d:
                    05:5a:b7:74:1a:62:a5:47:0c:16:31:c1:37:4a:3b:
                    20:5e:54:2f:60:27:10:0b:0a:8a:07:67:60:96:22:
                    be:47:a3:0c:62:b1:77:20:ea:12:8f:28:bd:d4:d9:
                    41:44:28:88:42:01:a3:e9:b3:f9:1e:a0:c1:62:40:
                    0a:e7:b4:23:db:87:a4:02:a4:18:91:9a:23:c4:6d:
                    d9:1a:88:a9:4e:ef:f8:d5:c8:23:02:7c:64:62:45:
                    be:ff:cb:d0:cd:fa:ac:34:dc:08:2a:d5:f2:84:37:
                    ad:bf:38:8b:c4:0c:3a:ca:e2:f3:11:b6:38:4d:b7:
                    6d:43:17:04:08:e9:7c:03:c7:a6:6e:34:25:a7:06:
                    c9:b3:a0:a3:88:89:85:cd:31:8c:36:8e:c3:6e:51:
                    dd:c5:57:75:99:73:31:48:d8:56:06:83:1e:aa:5d:
                    4c:07:d5:ab:b2:93:44:41:23:7b:0b:96:e1:8e:b1:
                    af:11:93:bd:78:ce:af:38:71:8a:4a:0e:fe:a3:06:
                    0f:02:2b:03:a1:0b:af:84:90:8f:bb:41:54:7c:f7:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:EA:D9:3B:76:5A:E4:8D:28:48:B8:76:6F:AC:1B:DE:98:44:61
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9945CEC485BA11EC94CD2D6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4c:8a:44:de:17:06:ac:0b:0e:83:eb:f4:43:69:51:fc:2d:
         4a:9a:2a:bd:cc:a4:5d:d4:58:2c:28:52:7c:9c:18:48:6e:11:
         69:46:56:54:d6:09:c8:21:bc:45:41:9c:c9:eb:70:d5:76:51:
         84:32:27:0b:b8:e0:f9:98:c9:a7:8d:b8:c1:dd:30:af:42:58:
         9c:38:d6:c6:64:60:ef:2e:c6:5c:05:8b:0f:eb:72:59:22:f9:
         e9:09:26:61:a0:ea:bc:dd:76:4b:89:36:28:b2:95:ab:54:ba:
         8e:a6:11:23:73:cd:29:30:8c:3a:5b:ca:93:60:bc:e0:1d:e1:
         31:94:f6:21:bb:ad:4f:19:35:e3:93:42:2d:e9:6d:35:47:57:
         58:b4:11:30:57:f0:b9:78:fc:fd:c7:21:d8:03:f2:ce:7b:0c:
         08:28:72:49:8f:bf:33:9d:99:01:e6:83:3d:1d:37:8c:2e:3d:
         05:11:45:07:c7:53:e8:48:25:05:4c:5a:b9:e7:b0:23:06:0c:
         58:35:e6:68:38:8c:e4:40:85:99:6f:15:80:05:ff:7c:9a:db:
         70:ef:0c:ba:f4:a3:32:65:0e:06:f7:4d:17:86:11:59:83:b3:
         04:e9:50:e4:3d:bf:a2:15:ce:b6:fd:34:bc:0e:71:6a:81:ba:
         39:80:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:55 2026 by rpki-client