Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa
File:                     AA815CE2370111ECA56A865CC4F9AE02.roa (raw, json)
Hash identifier:          x3X5ehb39JQstqk0AwpzSUjPwKOpVWQvE981bec8IkY=
Subject key identifier:   64:76:E0:FD:00:92:B6:12:DA:4E:07:65:76:C2:7B:E9:3D:4A:C2:58
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E807
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:23:39 +0000
ROA not before:           Sun 31 May 2026 17:23:39 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146925
IP address blocks:        103.172.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59399 (0xe807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:23:39 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e9b-3e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:c9:fb:9d:0b:e0:a1:22:e1:b2:54:7d:14:
                    29:0b:bd:b5:5c:a5:27:c3:16:3f:f1:65:7c:38:fc:
                    f5:05:b3:fd:92:7c:3d:90:d2:e4:21:12:3b:99:c3:
                    84:af:50:d5:a6:43:8f:c9:c7:76:f1:b1:a9:01:a0:
                    c9:ce:ce:e9:1b:88:f2:f7:67:b7:97:34:79:bf:43:
                    13:2c:7f:8e:bb:36:25:22:b7:89:13:e9:1b:b6:cc:
                    b4:02:9d:67:e7:03:15:62:b8:3c:eb:1e:31:29:1a:
                    b8:62:2e:21:a3:e5:e0:28:54:a7:0e:4e:9f:10:e5:
                    7d:e6:de:cb:0e:c8:d2:e0:ea:f7:f4:ae:90:a0:63:
                    c5:c3:e2:26:69:47:93:82:5b:38:7b:a7:bb:59:3b:
                    ff:98:df:8d:25:65:e1:1c:f9:90:49:9b:92:c2:b6:
                    3a:af:7e:d2:6b:2c:65:58:5c:85:77:c8:15:66:8a:
                    c8:9b:ee:f3:d1:5b:7c:b9:2b:70:34:28:bf:f9:24:
                    71:5e:85:9a:1d:99:e2:74:de:cd:26:b1:b4:cb:ef:
                    18:78:73:90:27:9e:4e:2f:a0:79:c0:e0:b6:44:2d:
                    b3:8d:bb:db:9c:73:a0:8d:6a:73:d6:9d:e9:a4:15:
                    4d:97:3e:42:55:7e:c5:31:8c:a9:49:8b:93:55:e0:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:E0:FD:00:92:B6:12:DA:4E:07:65:76:C2:7B:E9:3D:4A:C2:58
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:21:f1:2a:0c:00:d7:68:e3:b8:3e:10:71:53:e1:9d:9a:
         d1:18:ec:44:de:62:65:7a:7b:68:e2:b5:e7:07:38:75:cb:6c:
         ef:df:44:3f:73:7f:a1:ab:87:93:50:b1:3d:59:d9:6a:fc:7c:
         ce:de:75:e6:a0:80:aa:75:1d:eb:88:88:e0:84:43:3d:cd:0d:
         f3:2a:2f:4c:88:8b:c0:58:d3:65:86:4d:fe:b6:f8:76:06:e6:
         e4:50:8a:82:c9:cf:52:87:a9:c4:89:46:b6:32:14:17:8d:d7:
         c7:44:b3:c2:f4:56:80:e4:40:27:8d:ff:69:96:c9:81:75:79:
         08:c0:f7:fc:58:35:0e:d4:04:9f:fa:4d:4d:67:ff:7c:70:34:
         e3:c4:9a:fa:2d:05:b4:6d:bd:02:18:71:47:b3:4c:fb:bf:2c:
         6b:3a:a3:81:0f:f1:f8:2f:cf:14:c7:6d:52:4e:e8:f6:19:0f:
         66:a6:e5:aa:d2:9a:48:ed:13:9e:fe:b9:16:b9:f0:16:7e:8f:
         89:75:4e:5c:05:a3:fb:0e:16:f2:16:62:02:4e:4c:9f:d1:16:
         1c:04:d7:2b:c2:8c:b3:2d:da:27:1c:8b:1e:2f:3e:46:7f:a4:
         ef:50:62:16:7d:34:ca:69:ec:50:8e:15:6f:ff:68:59:ed:50:
         27:45:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:28 2026 by rpki-client