Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa
File:                     A092B2C2EDF511EFBEEE0415C4F9AE02.roa (raw, json)
Hash identifier:          YHitP3vSnXExNp8jX7fXCVgI3nNnapYNAMvTqoYfbzk=
Subject key identifier:   2A:1D:70:69:63:55:96:45:CD:04:51:3D:A1:F5:B0:36:39:55:7E:20
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF2E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:40:41 +0000
ROA not before:           Mon 06 Jul 2026 16:40:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134286
IP address blocks:        103.109.6.0/23 maxlen: 24
                          103.139.59.0/24 maxlen: 24
                          103.148.165.0/24 maxlen: 24
                          103.178.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 14:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61230 (0xef2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:40:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bda89-3c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:92:f5:7a:56:2d:fe:fc:5e:fd:58:8d:c7:
                    9a:14:af:8d:65:62:42:d7:21:f5:ae:e4:45:78:2d:
                    03:a2:9f:e8:ed:a5:b2:fc:d7:a2:fa:81:24:02:b9:
                    67:26:17:ff:df:ed:b9:f4:17:0b:76:3d:3c:de:45:
                    ab:74:5b:9d:49:ed:2b:dd:50:7a:7f:c6:e9:43:64:
                    a3:59:f8:b2:4b:36:79:07:06:7a:18:37:f8:4f:a2:
                    18:03:ae:19:17:7e:f3:e2:11:8c:50:e6:49:41:ed:
                    28:77:2d:83:30:e8:d9:98:63:b9:9c:46:b5:96:86:
                    76:09:65:4d:19:e3:5d:ba:c7:63:31:e5:f5:d7:7d:
                    d6:03:9d:cc:01:d9:11:6c:c2:7a:09:6e:7e:f4:bb:
                    27:47:ea:90:91:16:e0:21:9f:cc:5c:ec:3f:b7:a9:
                    45:63:f9:a5:1b:9d:7d:9b:3c:41:d8:97:c7:c7:e9:
                    d9:98:c7:2d:e9:3b:78:46:d8:6d:31:51:34:de:d8:
                    3b:e3:3d:5e:6b:26:f1:d7:02:ed:88:e8:c0:d5:bd:
                    5f:8b:50:db:ac:23:a7:0c:ea:a4:e7:75:6e:13:9b:
                    fa:1d:9f:c0:1e:ed:39:4c:38:6e:93:f2:af:7e:68:
                    83:97:ce:ad:16:0b:3a:09:9c:eb:e4:c7:75:a4:1c:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1D:70:69:63:55:96:45:CD:04:51:3D:A1:F5:B0:36:39:55:7E:20
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A092B2C2EDF511EFBEEE0415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.6.0/23
                  103.139.59.0/24
                  103.148.165.0/24
                  103.178.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:e0:a2:95:d8:c4:0d:c9:76:4d:df:d1:35:da:ad:70:65:
         bf:24:60:6a:80:c8:4b:f4:ba:cc:5a:7e:c8:7f:bb:f3:db:89:
         17:62:c6:2c:42:ad:23:77:46:09:fd:6c:49:b8:68:fe:72:92:
         c1:46:1b:b8:b2:9c:73:8c:88:91:a4:f6:52:bf:47:d6:ea:90:
         1e:e2:01:cd:27:c9:c6:1d:46:cb:cc:9f:b9:eb:39:a1:90:41:
         f3:f8:86:a2:1d:6f:19:82:b9:19:f8:44:ed:77:b5:97:10:d0:
         ad:19:d2:bb:88:52:ef:91:9a:ff:da:6a:6b:13:9a:df:92:17:
         81:31:9a:ea:17:53:ad:35:72:cb:49:f1:ca:e7:07:da:97:db:
         1d:11:a1:79:09:11:2b:dd:d2:9b:24:27:4b:ba:00:75:d8:50:
         91:29:4d:6c:07:ae:11:f5:26:a5:96:19:7d:a0:1d:e4:a6:81:
         41:d9:26:9d:b2:10:4b:0f:d6:31:70:05:f2:92:ea:e9:ff:a3:
         a8:44:76:20:ef:6b:8f:06:fe:35:8c:9e:3b:8c:e3:b0:bb:9e:
         8f:97:3f:3f:10:a3:bc:a8:3d:c5:d6:71:dd:c3:ce:c7:96:74:
         e4:f7:c3:db:78:e9:a4:32:b0:f2:2c:28:4f:44:8c:1e:28:e0:
         cf:81:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 18:20:15 2026 by rpki-client