Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE837B30780111EB911DB27FC4F9AE02.roa
File:                     CE837B30780111EB911DB27FC4F9AE02.roa (raw, json)
Hash identifier:          ZDcglOtiVHwkuvnoaA/64Yac/6aOM5siH5LCQtWiFDs=
Subject key identifier:   D0:9B:4A:7C:F1:C6:51:9E:AE:40:30:B3:B1:17:B2:7D:10:9F:45:90
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE837B30780111EB911DB27FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:11:16 +0000
ROA not before:           Mon 06 Jul 2026 17:11:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141246
IP address blocks:        103.157.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62161 (0xf2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:11:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1b4-33d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:37:99:40:95:20:5d:6a:dd:ea:1b:16:ef:c9:
                    a8:ca:c9:95:ce:5b:ad:47:08:56:8f:18:8b:5e:97:
                    93:bf:44:1a:e8:1e:bd:85:5a:38:c9:7d:e3:67:ad:
                    08:18:bd:76:cd:2e:da:55:6a:4c:89:f5:dd:73:2a:
                    53:e1:09:20:33:5c:0d:61:8e:8a:ea:e9:03:b2:4d:
                    8b:d8:c3:b1:4c:48:8e:18:1b:1a:fb:7a:7b:90:e0:
                    9b:63:d8:96:e1:66:1a:a6:db:e3:5a:bd:69:bc:de:
                    b7:b6:c5:91:5c:a1:c5:80:23:6f:43:5b:ae:5d:0c:
                    58:e8:7b:0f:18:c1:95:b1:d0:03:e1:16:81:56:21:
                    dc:e3:c4:50:41:b8:a4:aa:3f:88:0a:82:66:d3:88:
                    28:f0:38:64:7a:4e:bd:20:c8:87:20:58:fb:a8:60:
                    25:e0:00:20:2d:a5:b8:9b:4f:41:3a:fb:1e:20:3c:
                    47:40:7b:bc:50:60:90:7e:ab:40:26:1d:91:20:14:
                    cb:af:9b:43:ca:17:23:1d:66:3c:14:bf:a9:eb:e0:
                    94:da:5d:5b:78:0e:2c:74:a4:94:d9:aa:01:e5:3f:
                    d9:fc:13:83:d5:e6:4c:64:9c:56:c3:2a:a0:95:01:
                    74:f4:52:dd:83:de:02:9a:ac:ad:bf:64:18:78:68:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9B:4A:7C:F1:C6:51:9E:AE:40:30:B3:B1:17:B2:7D:10:9F:45:90
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE837B30780111EB911DB27FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:8f:fc:93:db:71:84:64:86:90:3d:1c:e4:6a:7c:01:f0:
         45:4e:5c:09:62:7c:c9:21:9a:15:9b:1d:11:1e:90:b4:fc:a4:
         24:54:f7:17:96:64:4b:09:7e:55:e4:5a:51:ca:1f:3b:66:00:
         dc:60:db:c0:05:58:20:46:4e:c5:39:2e:38:bd:8d:f7:3f:9c:
         d8:4a:77:c3:8b:b7:c4:e2:d4:6c:ae:29:af:2f:b3:bd:e2:be:
         21:25:8d:6d:7f:bb:fc:a1:c7:8d:3e:4b:17:21:0b:00:61:8b:
         60:cc:28:8b:3c:b3:e0:5a:0f:24:7d:ab:c8:0d:f9:ad:33:a5:
         8d:9f:f8:52:1b:85:01:54:d6:a4:1e:d7:f6:0e:4d:c1:d5:44:
         cf:9e:5e:36:90:a9:86:a7:9d:1f:dd:d7:c0:e1:5f:ec:84:91:
         b9:0a:6c:32:5d:11:41:09:40:59:d8:10:c1:03:f7:26:0f:e7:
         62:18:67:43:d1:56:39:58:58:89:55:d2:50:f1:14:9b:7e:56:
         bb:fc:ce:cc:b7:95:ba:e6:ea:e6:5e:c3:30:09:22:42:a0:39:
         b8:58:b0:9a:ff:b2:b5:8f:f7:ea:2f:cd:d8:75:60:e4:fe:b1:
         5b:69:5b:d7:bc:45:d0:bd:b0:c2:54:e9:ea:21:89:49:05:51:
         6c:9f:37:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPLRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTExNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxYjQtMzNkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO03mUCVIF1q3eobFu/JqMrJlc5brUcIVo8Yi16Xk79EGugevYVaOMl942et
CBi9ds0u2lVqTIn13XMqU+EJIDNcDWGOiurpA7JNi9jDsUxIjhgbGvt6e5Dgm2PY
luFmGqbb41q9abzet7bFkVyhxYAjb0Nbrl0MWOh7DxjBlbHQA+EWgVYh3OPEUEG4
pKo/iAqCZtOIKPA4ZHpOvSDIhyBY+6hgJeAAIC2luJtPQTr7HiA8R0B7vFBgkH6r
QCYdkSAUy6+bQ8oXIx1mPBS/qevglNpdW3gOLHSklNmqAeU/2fwTg9XmTGScVsMq
oJUBdPRS3YPeApqsrb9kGHho1bcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTQm0p8
8cZRnq5AMLOxF7J9EJ9FkDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFODM3QjMw
NzgwMTExRUI5MTFEQjI3RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWedtDANBgkqhkiG9w0BAQsFAAOCAQEAoMeP/JPbcYRkhpA9HORq
fAHwRU5cCWJ8ySGaFZsdER6QtPykJFT3F5ZkSwl+VeRaUcofO2YA3GDbwAVYIEZO
xTkuOL2N9z+c2Ep3w4u3xOLUbK4pry+zveK+ISWNbX+7/KHHjT5LFyELAGGLYMwo
izyz4FoPJH2ryA35rTOljZ/4UhuFAVTWpB7X9g5NwdVEz55eNpCphqedH93XwOFf
7ISRuQpsMl0RQQlAWdgQwQP3Jg/nYhhnQ9FWOVhYiVXSUPEUm35Wu/zOzLeVuubq
5l7DMAkiQqA5uFiwmv+ytY/36i/N2HVg5P6xW2lb17xF0L2wwlTp6iGJSQVRbJ83
zQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:43 2026 by rpki-client