Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa
File:                     E9AA66640C1911ED89FC7831C4F9AE02.roa (raw, json)
Hash identifier:          7ssS45A51XrTRQ5qyS6NcgTAOaGs1X3uQH8M9oKUGSo=
Subject key identifier:   94:B3:92:97:69:7C:35:70:13:33:7E:3B:D4:EF:E8:59:AF:4B:8D:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F546
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:32:19 +0000
ROA not before:           Mon 06 Jul 2026 17:32:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150062
IP address blocks:        103.186.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62790 (0xf546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:32:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be6a2-dd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:52:b0:38:8c:ef:55:e8:95:a8:dd:cd:0c:
                    b7:d1:c0:02:04:ba:84:25:d6:54:11:95:06:22:29:
                    b1:f2:c0:5b:66:ed:90:11:56:f8:e9:ab:ad:a0:af:
                    79:60:e9:00:18:e0:ce:6d:da:d2:5c:3f:10:4f:67:
                    b9:c2:12:24:a2:a8:31:36:8f:08:8e:4b:82:04:47:
                    5d:f7:ed:17:e5:54:2b:a5:06:4b:15:50:76:da:26:
                    12:9d:44:a5:89:1f:d9:ba:04:79:81:60:e6:3a:a9:
                    27:b2:d4:00:f6:a4:b4:63:8d:11:cb:67:af:ca:e7:
                    a9:2a:86:2e:48:d3:54:be:af:12:16:ae:09:ed:6f:
                    c4:59:b8:54:79:eb:41:f6:82:bc:b2:c9:58:3a:4b:
                    b3:c5:98:4d:1d:3c:16:ce:d7:e8:22:36:97:0b:93:
                    ba:b1:ed:5d:4b:3f:84:22:b8:c7:9d:06:37:38:2b:
                    6c:44:ec:9a:35:56:3b:8f:7b:e3:7e:73:41:8b:00:
                    ca:f0:77:69:cc:d8:a8:36:37:31:f7:3a:bc:2c:d1:
                    d5:e4:19:21:52:ca:0f:26:1f:64:3d:9e:e2:e5:ac:
                    8d:e2:46:76:6d:db:d5:ae:d6:3c:eb:c5:ac:15:0d:
                    73:8f:c2:5b:bb:a9:b8:23:54:67:1a:e3:30:69:e3:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:92:97:69:7C:35:70:13:33:7E:3B:D4:EF:E8:59:AF:4B:8D:CB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:f4:49:f1:ce:91:58:d9:02:f1:d2:e8:e1:1e:b8:30:69:49:
         f8:54:7b:70:10:67:3e:89:3c:cf:74:6d:91:3f:15:19:79:88:
         1a:5e:f9:86:de:f3:6c:4c:59:9e:0d:d8:69:1e:38:44:29:56:
         f8:fa:ff:81:8d:1f:59:b4:66:61:94:8c:e7:0e:18:11:f4:f2:
         0b:e4:7a:7f:e4:6d:b5:f7:42:af:2d:20:34:f7:a2:56:ff:48:
         9c:33:68:0a:81:6b:1c:cf:b1:9a:b3:10:70:dc:4a:80:f5:00:
         8a:fe:7a:db:1f:74:c3:cd:32:5f:88:d1:96:82:03:ad:cb:b5:
         b8:71:79:2f:6c:c5:39:71:9d:16:6b:dc:97:1c:86:18:e9:ce:
         dd:a7:73:e8:e8:36:32:d2:3d:f1:0c:1c:05:2b:9e:60:33:aa:
         20:4f:dd:e2:cb:cb:5f:3d:32:3b:c3:5a:6d:31:6a:1d:b4:45:
         ad:0c:80:a7:a8:17:3d:db:60:4d:4c:6a:7f:52:72:2f:db:c3:
         f9:13:a4:7b:0c:2e:3a:80:1c:73:11:05:84:68:97:99:25:ce:
         ce:a1:c2:18:ff:0d:0c:b4:11:57:6e:4c:21:5a:39:28:0c:6f:
         a4:20:2c:8b:9d:ec:7b:e4:d2:58:2d:95:8b:eb:5d:18:73:58:
         90:1f:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:45 2026 by rpki-client