Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B91911D68C4711ED846F2486C4F9AE02.roa
File:                     B91911D68C4711ED846F2486C4F9AE02.roa (raw, json)
Hash identifier:          O0jkQFfn3RcegSk21z0yH7muMBxT+kMR8lZZAv507T4=
Subject key identifier:   66:CB:63:B3:46:52:B5:5A:D3:1D:0A:00:77:71:E2:EE:15:A7:FD:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F58B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B91911D68C4711ED846F2486C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:28 +0000
ROA not before:           Mon 06 Jul 2026 17:34:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150609
IP address blocks:        103.64.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62859 (0xf58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be724-6f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1d:f4:36:4d:62:da:53:91:08:be:62:11:17:
                    41:f0:cc:b0:2b:61:14:3a:d0:b9:a7:bc:bd:15:cb:
                    00:68:dd:d7:8c:8a:2a:ac:60:d9:e8:43:9d:7c:f5:
                    bf:dd:76:6d:28:24:24:6f:7f:cc:11:44:fc:3f:bf:
                    1d:0c:c6:7a:d4:62:9c:08:44:f8:92:82:f4:09:9f:
                    c4:e8:b7:39:96:b7:12:da:7d:68:72:e0:4f:cf:6b:
                    dd:e8:64:79:8e:39:3a:7a:42:aa:93:a9:4a:38:c5:
                    fc:29:5a:f2:b4:36:c4:9a:46:39:48:be:a6:aa:56:
                    ec:de:3b:9b:4f:1e:ea:1d:15:42:5c:74:05:6d:4a:
                    ab:94:43:36:53:92:6a:a4:03:7f:51:2c:aa:d3:8e:
                    02:7b:12:a9:b4:0a:4f:76:c8:15:2a:5f:5e:38:12:
                    24:38:a7:f0:fa:40:3c:9e:37:b5:d1:8b:f5:e6:d4:
                    b4:e4:04:18:2d:ec:36:f5:4a:2d:9c:81:1d:37:1c:
                    c6:2f:74:00:f4:cd:fd:c3:78:53:99:39:80:27:85:
                    9b:6d:a2:e6:11:cc:39:19:4e:a2:3e:5c:c8:1f:a9:
                    1a:4f:5d:fc:5a:66:9d:65:5f:b3:32:cc:28:8c:ec:
                    cd:3a:ae:ba:33:16:09:3e:77:ee:ef:2e:7d:97:2e:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CB:63:B3:46:52:B5:5A:D3:1D:0A:00:77:71:E2:EE:15:A7:FD:BE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B91911D68C4711ED846F2486C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:64:db:1e:72:4b:35:32:51:af:b5:b5:2d:07:0c:ab:fe:
         ed:9f:5e:95:30:e3:61:21:cb:41:cd:d1:8d:49:b1:f1:6c:ef:
         f0:df:81:11:74:7c:1d:61:82:f5:e1:5d:f3:09:b0:44:6e:4e:
         a2:37:ca:ba:3e:5c:cf:59:30:c3:34:8f:ef:33:06:ec:e6:85:
         dd:24:0c:31:65:26:56:f1:92:6e:26:8d:f6:8c:91:9f:f0:2e:
         c9:d1:4b:eb:42:56:3a:21:9a:f3:e7:7a:55:46:cc:45:7f:63:
         b3:ea:d7:ca:9c:7d:3c:89:8f:7a:12:84:dc:ef:0f:8b:80:47:
         79:fb:39:e4:ab:1c:18:23:aa:7c:6e:aa:c8:87:f5:30:55:5a:
         d4:bf:f5:be:24:3d:30:24:50:f9:58:1e:c5:5d:57:76:c6:83:
         67:ec:93:88:82:b9:e9:81:3a:19:6c:de:6f:a2:3f:96:f2:7c:
         cd:d4:de:fd:97:16:4f:15:23:5e:a7:9d:51:80:e5:bc:e2:cc:
         99:4c:37:3a:9b:ad:24:11:3e:64:63:df:16:0a:3b:97:2e:38:
         ea:fa:a5:0e:75:c1:a3:a7:c2:30:74:e9:2d:8d:24:6b:69:8e:
         72:5f:44:db:f6:cd:e8:ed:a4:b5:4c:57:70:a6:82:7d:19:2c:
         46:91:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:02 2026 by rpki-client