Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa
File:                     C67219F6D4D111EBBFFECF71C4F9AE02.roa (raw, json)
Hash identifier:          U13urmnF5jtzok2zgBcykc8PMlmQzo3p3jqKZPN0RxA=
Subject key identifier:   C6:72:8D:14:30:74:AA:98:A8:D5:97:FD:38:56:A6:DE:96:04:D2:23
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3BE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:19:15 +0000
ROA not before:           Mon 06 Jul 2026 17:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142466
IP address blocks:        103.168.222.0/23 maxlen: 24
                          2001:df6:df80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62398 (0xf3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be393-4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:99:96:4b:c1:9e:7a:91:ce:40:42:22:3a:
                    3e:00:38:fa:21:9b:f5:89:a7:ef:38:32:d0:14:e6:
                    b8:68:9f:28:70:1f:7d:a5:4d:e4:db:24:bb:fd:6d:
                    3e:3d:df:d1:bc:ee:31:79:d9:72:e2:8c:cf:93:04:
                    b3:4a:82:1b:71:39:6c:a6:bd:04:cc:aa:92:4b:6b:
                    9f:a2:69:43:28:25:c3:83:d5:01:49:76:ba:24:d3:
                    38:17:79:b7:02:30:5b:8f:5a:98:fb:bd:e5:94:ff:
                    5c:d0:53:f2:e4:4f:ca:d3:c2:cb:82:03:cd:0f:fe:
                    17:55:e1:9d:fd:af:ed:b4:e2:ce:77:dd:c4:5a:e3:
                    71:ef:42:a0:18:47:12:8c:ff:c2:21:80:aa:9d:50:
                    e8:98:26:2c:52:aa:9a:92:a7:93:3c:a3:7b:bb:3e:
                    e3:3d:3e:a6:11:ba:c6:b3:62:ca:84:9f:41:f2:3a:
                    4c:1d:a1:3d:67:48:20:13:8c:27:fe:19:d9:7f:a7:
                    ce:ba:88:d0:a1:9f:75:58:2d:de:02:91:17:f3:f7:
                    1e:1d:c7:e5:21:37:87:5e:6a:62:78:23:ef:45:c0:
                    64:8a:88:35:1a:3c:4f:26:79:ab:5d:41:43:4e:fa:
                    75:c0:83:5e:bb:6a:23:e6:24:14:36:a8:78:3a:ad:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:8D:14:30:74:AA:98:A8:D5:97:FD:38:56:A6:DE:96:04:D2:23
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.222.0/23
                IPv6:
                  2001:df6:df80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:85:43:00:e8:3b:75:48:d6:b5:d5:7c:e7:ad:97:e6:1d:
         eb:ce:3a:26:52:f6:e0:b5:5a:0c:12:6d:ed:af:b8:0b:f2:3b:
         a9:08:c5:8c:82:99:4b:b4:60:37:92:23:8e:aa:c9:6f:70:bc:
         65:0c:c4:e3:8d:a7:99:7c:66:52:4b:af:d2:92:5d:6f:bb:c8:
         2b:57:9a:fe:8f:d6:dc:a0:ff:79:be:da:97:9e:f7:4c:fc:a0:
         84:01:5e:6a:38:37:02:1c:73:40:3f:50:a1:6f:e7:d8:7e:53:
         7e:e4:4b:2e:f1:eb:7c:4d:1d:84:83:d5:09:c1:a9:a6:d2:d6:
         67:f6:11:ba:34:90:1d:20:34:c2:ac:a5:ce:75:c1:18:3a:20:
         a3:2c:34:e9:19:c0:74:c8:f5:ee:b3:90:00:24:ff:20:d1:23:
         e3:75:31:a8:03:92:cf:0c:e7:cd:46:2a:0f:52:40:08:b8:1d:
         68:cd:10:cf:44:52:0c:0d:2c:3f:8e:07:3b:29:2f:d2:9a:4f:
         d9:db:40:cd:08:31:4f:32:99:e8:4c:13:e4:7a:ce:3b:3f:34:
         af:fa:72:02:1d:16:1b:26:dd:7a:02:99:a9:cd:4e:3c:7d:95:
         b6:df:7a:1a:df:25:ab:a9:10:39:4e:3c:9f:a9:b5:0b:76:99:
         dd:c0:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:49 2026 by rpki-client