Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1587F88C41311EFA132A80AC4F9AE02.roa
File:                     D1587F88C41311EFA132A80AC4F9AE02.roa (raw, json)
Hash identifier:          7s5M8Q4G0ID0ra/IDMC2NI9dH7LWqbtPJcTqi514O7Y=
Subject key identifier:   03:F4:48:15:AE:21:3E:32:61:14:53:7E:F5:B8:A7:96:F9:42:E9:FF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F591
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1587F88C41311EFA132A80AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:34:39 +0000
ROA not before:           Mon 06 Jul 2026 17:34:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150615
IP address blocks:        103.49.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62865 (0xf591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:34:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be72f-5631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:8a:09:9b:bf:ab:66:9d:9c:b1:16:69:f5:
                    6f:fe:ad:e2:cd:83:6d:9b:72:ec:db:45:0a:b3:00:
                    e7:8a:d9:db:14:f9:75:d7:cb:58:17:2a:07:ec:2a:
                    ae:16:fe:73:4f:10:6b:4f:bb:c3:10:e4:bc:cc:e6:
                    48:08:9a:1d:87:d8:2b:3f:21:a5:e5:1c:57:02:ce:
                    9b:9a:3d:3a:8b:59:56:76:a4:b3:fc:b3:4a:01:dc:
                    dd:30:5d:90:ab:65:1e:46:90:37:f1:2b:d2:aa:f4:
                    4f:56:5f:a3:9d:64:1f:4a:e2:b4:fa:b1:33:d6:18:
                    28:ca:1a:bb:24:e9:0c:9a:f5:ec:6a:b1:40:d6:9f:
                    b5:cc:2f:75:80:89:bb:91:91:9d:22:cf:fa:1e:d6:
                    75:19:68:7f:e5:7e:8c:7b:36:5b:16:70:ad:44:7f:
                    be:5a:58:08:e4:96:a8:8e:49:f7:d8:54:b6:12:bd:
                    9e:96:df:bd:bd:77:a5:77:9f:b5:60:0a:71:90:62:
                    bd:75:b0:11:30:ab:ca:7d:3f:9d:fa:07:b7:1f:6c:
                    f7:9c:15:9d:12:f7:83:15:07:ef:05:b6:df:ff:75:
                    be:e8:4a:70:e9:1a:54:59:ab:c7:53:ee:51:41:70:
                    98:08:16:07:50:f9:38:ab:5f:1b:73:c0:f3:c3:25:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:48:15:AE:21:3E:32:61:14:53:7E:F5:B8:A7:96:F9:42:E9:FF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1587F88C41311EFA132A80AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e0:af:78:57:be:27:c7:33:89:46:c4:86:44:ae:e8:f8:52:
         4f:be:97:79:29:3c:b1:43:7f:b7:30:1b:1a:e9:da:d1:72:f7:
         22:12:e9:c0:1d:db:b7:03:80:22:e0:d9:02:a9:4a:19:6f:1e:
         1c:c4:6d:a2:f6:a2:9d:c5:d0:31:f9:62:1c:ff:b9:d9:90:06:
         06:53:8b:c6:ef:be:88:7d:4f:3e:79:ed:f9:42:d7:45:5a:93:
         7a:d6:b1:71:e0:25:f5:fe:b6:6a:39:1a:8b:77:cf:26:1c:9a:
         94:ae:dd:7b:75:5c:ec:f1:d4:e1:8d:17:b4:ee:e8:bc:fa:73:
         ff:a9:51:fd:2d:c1:66:91:32:83:9d:b8:f5:e6:e1:4b:96:fb:
         38:5a:56:d1:fc:46:01:8f:70:d2:59:81:76:e6:c5:66:3e:f0:
         f6:ee:a7:71:9f:fe:ab:cf:66:89:e3:dd:83:1f:7c:27:30:e4:
         bd:c6:31:bf:2a:ce:86:41:e8:05:f5:14:d2:48:62:85:5b:3e:
         49:c0:e5:68:0f:d6:38:78:25:ad:c7:de:36:60:7b:0c:e9:85:
         99:fa:17:0f:45:f7:9f:cd:2b:d8:88:d9:ff:57:44:57:23:d2:
         18:9e:6b:ec:d9:00:14:0c:2c:65:e8:4f:fa:ca:5c:ae:47:dd:
         fc:f6:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:50 2026 by rpki-client