Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa
File:                     C71CB66859DD11F198D1697B8E833773.roa (raw, json)
Hash identifier:          3malQMISPjWIwYw4hxd24k/Zp3yjCkNj1BtHG+qYCj8=
Subject key identifier:   06:3A:C4:DD:0E:11:23:33:C3:12:83:D8:62:D5:76:98:56:1B:DA:9E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa
Signing time:             Mon 06 Jul 2026 17:19:28 +0000
ROA not before:           Mon 06 Jul 2026 17:19:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142476
IP address blocks:        103.170.194.0/23 maxlen: 24
                          2001:df2:a840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62405 (0xf3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:19:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be39f-fa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:0d:b2:0f:4a:25:2b:b7:b9:77:9e:49:c4:
                    1a:35:cd:51:29:45:97:0f:f7:84:ee:ca:f8:77:cf:
                    05:7a:43:eb:ca:45:1c:57:ad:d4:37:f2:2e:16:ff:
                    a4:2b:b8:80:31:06:b9:78:18:88:cc:32:ec:e7:dd:
                    61:b3:0f:96:98:83:7b:a5:6c:48:12:9f:29:58:db:
                    23:3d:32:4b:5a:00:5b:f1:0d:6f:72:42:45:4a:90:
                    49:b4:af:7c:8a:34:86:e1:52:68:5a:91:0b:4e:a2:
                    b4:f4:18:7e:a2:55:2b:a6:fb:e4:f4:30:f7:10:e9:
                    2e:fa:41:ca:d9:d3:7c:6d:e0:bb:19:4a:77:de:34:
                    0c:12:b3:2d:06:a9:b2:32:ad:23:b8:da:75:85:c5:
                    30:de:9d:53:bd:31:d6:64:52:68:fb:ae:3a:d4:92:
                    b6:b2:44:8b:b2:a5:f1:c8:9f:f7:2a:96:64:1d:ed:
                    5c:17:eb:6b:6f:c3:e1:d6:f8:5b:be:fa:09:fb:6d:
                    e4:f9:5a:95:a1:08:69:97:6e:33:0c:14:02:e7:c7:
                    f5:d4:78:3e:af:6a:62:5b:40:e5:bc:fa:a1:e3:e9:
                    60:16:98:85:f4:d2:31:b5:ff:9e:ac:e9:2d:6c:4b:
                    da:29:62:01:50:4c:87:7d:bd:7d:79:f6:dd:8a:7f:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3A:C4:DD:0E:11:23:33:C3:12:83:D8:62:D5:76:98:56:1B:DA:9E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.194.0/23
                IPv6:
                  2001:df2:a840::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:3e:bf:a0:91:66:bf:b9:ca:3b:86:07:07:9c:02:ce:57:
         ea:0d:cb:26:dd:56:d2:cf:fb:cc:fb:35:d3:ce:ee:e9:d2:93:
         a5:cb:fa:ea:17:58:5f:e6:2c:c0:38:33:d6:bf:0c:99:3f:3f:
         99:d6:f5:ff:58:65:91:06:05:ed:81:2e:b9:6a:37:0c:2c:4f:
         1a:52:e9:3a:52:0f:fa:6c:35:eb:dc:50:ea:ce:2b:e2:30:c1:
         24:8c:5d:6d:94:11:dd:8f:1b:28:c1:a1:62:ca:58:f1:cd:ce:
         93:78:00:f3:a9:4a:d9:b8:20:e4:d1:21:a9:8c:84:f4:c6:1d:
         16:e2:50:2c:d6:61:40:9b:73:e6:bb:ea:f7:63:80:42:df:20:
         5c:99:80:4d:9b:2c:d1:71:0a:7a:67:0c:a8:8b:2a:dd:a6:7d:
         cf:ad:54:1a:aa:e8:79:28:78:af:cd:51:bf:41:45:1f:79:f3:
         33:de:4f:6b:2b:49:b2:24:3b:20:58:bf:32:e0:77:bb:35:fc:
         47:03:b2:4f:28:09:b1:6f:25:e1:3b:fd:19:6a:5b:2a:6a:89:
         4e:f5:d7:2f:93:ac:c8:56:b4:0c:9a:31:8f:11:bf:7f:7a:6a:
         a7:fa:23:f0:66:8b:6a:06:93:d2:f8:d3:77:f1:b8:1f:8f:6a:
         e4:03:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:09 2026 by rpki-client