Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa
File:                     DD11EB64BFE011ECBB03BB09C4F9AE02.roa (raw, json)
Hash identifier:          5qAalXCTt/9HKIZEDxzwjqCxPwsfERFo4NrwioTw/Wk=
Subject key identifier:   2E:A2:64:E2:B3:8E:B9:10:C9:35:AF:51:A3:39:E1:52:D8:9E:11:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4D7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:28:33 +0000
ROA not before:           Mon 06 Jul 2026 17:28:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149540
IP address blocks:        103.185.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62679 (0xf4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:28:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5c1-0225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:7e:99:a7:ca:21:93:65:f6:c0:86:a2:f4:
                    86:3d:48:07:10:ad:34:38:7b:2f:64:05:b8:a9:df:
                    56:c3:9e:c0:78:a7:44:19:9f:67:11:ef:1e:6d:1b:
                    4e:cf:ec:0d:c8:53:c7:f3:2f:96:25:3e:e3:c0:19:
                    fe:ee:c8:ff:ac:66:97:35:e2:ea:81:00:44:b3:07:
                    55:5b:d9:4f:3e:d6:bc:cd:4c:70:70:02:f6:6d:7e:
                    73:9f:73:ea:dc:71:ba:dd:de:ee:0d:03:63:32:23:
                    22:e6:c6:5b:9f:1d:79:35:c5:2a:2b:8b:6a:7a:24:
                    5e:36:80:dd:cd:18:09:6f:3c:19:ff:e2:b5:7b:f4:
                    6e:99:1b:04:d8:f2:af:0c:3d:65:96:0e:9a:a3:13:
                    e8:00:10:4f:1f:f8:d4:0e:21:7d:50:4d:97:02:67:
                    4b:b8:f4:5f:db:17:84:b2:a6:04:a7:91:59:6b:f4:
                    d0:59:94:44:19:82:ea:c9:65:24:7c:0a:f7:bb:f6:
                    31:d6:2a:57:90:44:6e:01:c7:d6:44:1e:67:3b:75:
                    3e:6d:de:b7:83:a2:9d:2e:60:a7:51:4f:07:77:45:
                    01:ba:99:05:8e:65:57:db:96:6d:e6:a7:40:dd:6f:
                    0d:29:2f:3e:0b:6f:42:2a:e7:97:44:94:07:85:37:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:64:E2:B3:8E:B9:10:C9:35:AF:51:A3:39:E1:52:D8:9E:11:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD11EB64BFE011ECBB03BB09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:eb:ca:2c:30:ae:14:0b:f3:30:47:36:8c:d5:14:ca:d0:f1:
         cc:80:7f:7f:83:39:b4:90:5b:81:e1:6c:99:7f:86:47:e7:6b:
         29:52:ce:81:09:4b:94:32:94:8c:8c:54:c8:c3:20:48:1a:7b:
         31:11:17:5e:6d:58:24:71:ad:28:b7:bf:e3:87:20:35:22:b4:
         00:ae:1b:65:00:be:16:d3:b4:67:c7:ed:d9:96:11:c3:01:1b:
         8d:89:90:f7:57:39:8e:a6:f4:33:1b:6d:cd:d7:6c:5a:9f:51:
         af:a6:00:c1:b6:cf:a6:f6:96:27:b3:ea:83:13:e9:24:96:76:
         e3:6e:d2:26:6e:7f:9a:5e:25:21:94:d7:df:1b:cd:1c:83:0a:
         e7:d4:a3:25:cc:82:be:2a:90:b2:5c:f2:a4:b4:ac:34:aa:dd:
         e1:e2:98:92:0a:c2:64:e7:4f:e7:f0:97:3d:40:41:68:9f:f8:
         48:30:12:77:78:aa:bb:71:2e:02:0f:97:a5:c7:82:e4:ee:2e:
         53:4a:48:c1:8b:61:6f:fb:50:d2:11:3e:f2:19:78:ad:74:25:
         a8:ff:3a:dd:5a:00:1a:a5:0c:2c:cd:99:39:f3:58:8f:01:7f:
         32:22:dd:67:ca:57:e1:fe:4d:a5:0b:aa:b6:ec:53:0f:64:28:
         6b:33:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:31 2026 by rpki-client