Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D181C048CF8111EC82B62361C4F9AE02.roa
File:                     D181C048CF8111EC82B62361C4F9AE02.roa (raw, json)
Hash identifier:          4QfuR2DUpiDCAk/KbLpq7hgiQu9dyOeBszW+2RmXTm4=
Subject key identifier:   ED:B8:54:A1:74:F5:E8:41:DF:23:67:A0:05:7B:18:19:A4:0B:F1:9B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F275
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D181C048CF8111EC82B62361C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:08:08 +0000
ROA not before:           Mon 06 Jul 2026 17:08:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139558
IP address blocks:        103.148.96.0/23 maxlen: 24
                          2001:df1:fac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62069 (0xf275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:08:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0f8-dbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:31:b5:9f:67:23:cc:e2:de:9c:81:8b:fe:
                    6d:cf:dc:d2:6d:13:3f:0e:50:eb:ac:45:a4:66:94:
                    6f:4b:5a:07:14:dc:0a:b4:c1:3e:85:8e:9a:ca:40:
                    87:45:be:a6:ca:38:c9:89:bc:d4:c6:64:24:b8:a6:
                    d7:b8:45:e5:88:25:f4:77:a9:21:95:20:dc:4e:ec:
                    b5:fc:e9:2f:a9:2b:d7:97:04:40:1a:bc:9c:06:40:
                    6f:46:b1:05:50:55:34:ca:73:16:5c:13:84:cc:15:
                    e8:3d:89:ef:73:75:5b:4d:44:c7:38:39:31:41:f4:
                    fd:f6:55:d7:fd:81:a0:41:02:28:71:4e:50:f6:a2:
                    b3:cd:2d:e8:d9:b2:5f:19:3c:68:cc:07:75:77:bd:
                    a3:45:69:45:db:b6:1d:b1:c0:40:dd:9b:4b:31:b7:
                    6c:71:a6:4d:61:b0:6f:8d:15:25:31:cd:5a:2b:1b:
                    86:92:49:a4:f5:cc:fc:59:8e:38:4d:03:7c:c6:45:
                    9a:ec:b3:74:6a:80:9b:46:80:c8:b3:da:ab:08:d0:
                    24:03:fc:26:36:75:76:64:d2:aa:cc:fa:f5:30:08:
                    6b:3d:39:25:f0:ec:a2:54:f5:01:24:87:f8:cb:34:
                    f3:8d:b8:b9:0b:6b:e9:b5:6b:c8:12:d2:20:4e:39:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:54:A1:74:F5:E8:41:DF:23:67:A0:05:7B:18:19:A4:0B:F1:9B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D181C048CF8111EC82B62361C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.96.0/23
                IPv6:
                  2001:df1:fac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:5d:b6:7b:b6:a4:7c:42:d0:0b:fc:3b:c5:f6:68:83:c9:
         c1:27:8c:0a:4c:b2:e0:3c:a2:d0:da:50:35:33:88:1f:5a:09:
         62:e5:45:e0:fb:76:2e:d3:7c:6c:22:8c:d0:71:d8:ec:ac:0a:
         50:5d:a5:d2:b2:6d:33:b5:0d:c7:fa:60:f0:08:7d:49:7c:f1:
         0a:25:6a:a7:96:df:1e:86:b8:51:d1:22:28:0a:02:04:9a:c6:
         10:c1:a5:94:ca:50:b6:08:72:ce:f0:34:07:e5:4f:3b:69:e7:
         0b:c6:52:90:83:d6:03:9b:23:df:f6:b0:fd:6e:cb:e7:8c:7d:
         96:51:1d:68:40:cc:eb:a2:a8:cc:d1:b6:33:00:23:f5:a6:69:
         63:6d:1b:a3:c8:2f:2f:5d:4c:35:c0:78:32:17:50:89:ff:8c:
         02:b0:d8:19:98:ca:6c:86:51:45:06:d5:4d:ef:3a:37:f2:5c:
         a7:49:4e:aa:e0:29:b7:bd:e3:14:f1:0f:55:cf:fb:9c:6d:c7:
         10:b5:eb:56:5f:28:3e:a2:48:91:d2:98:e0:5a:8e:21:62:9c:
         75:2b:cf:73:51:07:8f:e5:b6:40:f4:ca:93:b5:ad:d8:1c:68:
         dd:56:d0:d1:6b:42:cc:7a:b8:98:8f:9e:bc:de:79:18:18:33:
         46:e7:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:44 2026 by rpki-client