Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF227161D3211EDA463105DC4F9AE02.roa
File:                     AAF227161D3211EDA463105DC4F9AE02.roa (raw, json)
Hash identifier:          Gt1IEFoytgngd0F7V/WyrDzQ82hazlKfz3DrVHfMxRw=
Subject key identifier:   58:05:36:D5:2B:55:90:1A:11:3D:B0:8F:63:E7:58:D2:F2:30:DE:B2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F43D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF227161D3211EDA463105DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:23:36 +0000
ROA not before:           Mon 06 Jul 2026 17:23:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147199
IP address blocks:        103.175.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62525 (0xf43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:23:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be498-bf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:e4:db:46:35:62:df:79:bc:f2:e4:bf:b6:
                    2e:32:a7:c0:7d:4e:6e:77:fe:c8:59:01:a4:cd:80:
                    e1:e2:ac:42:2a:2f:19:38:8f:ce:8b:5d:b6:49:f7:
                    63:c4:4f:f0:26:9c:47:c8:9f:cf:cb:f3:88:6d:65:
                    45:07:7e:04:e7:6b:ea:57:75:94:99:be:a0:b9:be:
                    b5:66:da:a2:51:8c:d0:05:5a:ae:a4:0b:66:0b:dd:
                    38:20:08:a4:9e:57:27:f7:8c:ec:c8:ca:31:89:d1:
                    90:b8:39:d1:c1:fd:ff:ca:13:ae:a9:46:89:07:02:
                    16:4a:22:e5:9e:8b:1e:37:3f:6a:ff:8c:4c:4b:1b:
                    4e:7b:9d:c2:00:09:7a:bb:27:76:2c:e2:0f:ff:a3:
                    be:a4:38:af:c1:10:a1:ff:cf:c9:4e:d9:8c:1c:bf:
                    f6:46:cd:bb:4d:b3:f5:d8:0d:8d:6d:37:1d:91:15:
                    f8:d9:77:c0:de:93:fa:62:2b:28:ca:f7:61:5f:51:
                    a0:45:0d:a6:f0:11:ed:ea:43:ce:1a:1f:35:a0:a5:
                    de:1a:cb:71:12:c6:69:1b:85:c8:ad:3d:87:df:7f:
                    10:22:97:7a:61:a0:23:ec:83:7e:7f:9d:09:a2:d3:
                    60:b1:04:0b:14:7e:ee:7c:79:ad:0e:c9:6e:49:cf:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:36:D5:2B:55:90:1A:11:3D:B0:8F:63:E7:58:D2:F2:30:DE:B2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAF227161D3211EDA463105DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:d1:fa:38:4c:03:9a:d3:ec:b6:dc:c7:62:32:c1:22:27:3f:
         af:0d:ab:4e:7c:c5:85:6f:59:c2:dd:24:c3:4a:b6:09:d9:f7:
         35:68:dd:9f:8e:18:3f:1f:98:4a:4f:df:c6:38:61:da:9c:5b:
         bc:6c:89:a4:32:26:65:b4:97:aa:5a:77:38:d6:72:a4:38:d8:
         b5:ec:e4:2e:a4:83:6b:e1:87:f8:07:c6:99:9b:6e:b5:f0:cc:
         0e:e0:98:2f:10:1b:74:ac:f6:9e:08:4d:cc:11:5b:7e:6e:1b:
         a3:34:02:4b:86:c0:e6:9b:2b:78:47:68:6c:fe:8d:4f:a0:b4:
         9b:7e:db:d9:7a:42:48:25:2c:0b:b1:96:ef:ae:59:3a:79:a7:
         23:5e:67:d3:78:f0:72:13:04:5f:ad:d8:fc:bb:47:06:68:cb:
         14:7d:14:54:f8:05:54:a2:fd:9e:44:a9:ea:7c:3f:e0:08:28:
         7e:7b:72:c3:05:c0:63:7a:b5:92:76:f1:ae:17:d0:00:56:27:
         9f:0c:07:24:a5:37:fe:89:90:a3:8b:92:d4:6b:0d:a1:b5:49:
         10:34:60:5d:34:b1:d1:e4:82:1d:e3:f1:d0:07:e5:17:41:5c:
         64:c4:1c:5c:ee:60:bc:a6:3f:5b:9b:1d:90:c1:6b:b0:2c:6e:
         41:51:34:e5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPQ9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjMzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU0OTgtYmY3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmZ5NtGNWLfebzy5L+2LjKnwH1Obnf+yFkBpM2A4eKsQiovGTiPzotdtkn3
Y8RP8CacR8ifz8vziG1lRQd+BOdr6ld1lJm+oLm+tWbaolGM0AVarqQLZgvdOCAI
pJ5XJ/eM7MjKMYnRkLg50cH9/8oTrqlGiQcCFkoi5Z6LHjc/av+MTEsbTnudwgAJ
ersndiziD/+jvqQ4r8EQof/PyU7ZjBy/9kbNu02z9dgNjW03HZEV+Nl3wN6T+mIr
KMr3YV9RoEUNpvAR7epDzhofNaCl3hrLcRLGaRuFyK09h99/ECKXemGgI+yDfn+d
CaLTYLEECxR+7nx5rQ7JbknPkmcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRYBTbV
K1WQGhE9sI9j51jS8jDesjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBRjIyNzE2
MUQzMjExRURBNDYzMTA1REM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWevFjANBgkqhkiG9w0BAQsFAAOCAQEAeNH6OEwDmtPsttzHYjLB
Iic/rw2rTnzFhW9Zwt0kw0q2Cdn3NWjdn44YPx+YSk/fxjhh2pxbvGyJpDImZbSX
qlp3ONZypDjYtezkLqSDa+GH+AfGmZtutfDMDuCYLxAbdKz2nghNzBFbfm4bozQC
S4bA5psreEdobP6NT6C0m37b2XpCSCUsC7GW765ZOnmnI15n03jwchMEX63Y/LtH
BmjLFH0UVPgFVKL9nkSp6nw/4AgofntywwXAY3q1knbxrhfQAFYnnwwHJKU3/omQ
o4uS1GsNobVJEDRgXTSx0eSCHePx0AflF0FcZMQcXO5gvKY/W5sdkMFrsCxuQVE0
5Q==
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:39:49 2026 by rpki-client