Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
File:                     ED69316EE56711ECBF1FA967C4F9AE02.roa (raw, json)
Hash identifier:          ibM+Ue/uycRrkQ/PYakUWnWHdQsiEc49HDTK4WJc6Rs=
Subject key identifier:   74:F5:F3:FC:BC:3D:9F:FB:A0:53:8E:06:0A:72:F1:34:09:20:4B:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F09A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:52:28 +0000
ROA not before:           Mon 06 Jul 2026 16:52:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136307
IP address blocks:        103.188.220.0/23 maxlen: 24
                          2001:df0:c740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61594 (0xf09a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:52:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdd4c-16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:f9:0f:c6:25:24:74:e2:99:73:a0:69:51:
                    13:79:fc:b0:08:fd:37:61:91:3f:ea:55:36:e8:de:
                    7f:76:39:ec:7d:af:ca:0a:2b:3c:35:36:61:bc:fd:
                    5d:c6:46:a3:cf:61:0d:4e:19:32:33:c3:3b:98:59:
                    f6:0e:fc:fc:2d:dd:5e:06:9b:77:47:7b:9e:ac:68:
                    b0:79:a5:03:57:d6:38:69:3c:55:44:70:dc:c2:f3:
                    ac:d0:55:bc:06:d3:e0:89:7a:c5:08:a3:fb:00:c3:
                    fa:2a:70:ae:fc:51:93:b6:3a:96:49:85:e4:40:66:
                    47:0d:60:3f:cc:32:ad:1f:71:e5:8f:0c:d7:40:34:
                    67:a9:80:54:7a:98:f2:9d:e8:68:04:cc:be:3c:ce:
                    4c:45:2e:1e:95:f0:e3:0f:36:01:f4:cf:03:47:91:
                    18:df:2b:ac:2b:c2:bf:4e:42:9c:a0:5b:5d:08:c0:
                    7a:f3:0d:fc:b0:76:b7:cd:b8:39:07:0a:95:45:aa:
                    7e:ac:93:d2:89:48:88:30:38:52:f3:77:6b:c9:4f:
                    4f:4a:4a:c1:95:22:0e:ad:ed:dc:6a:6b:49:30:b6:
                    94:ca:cd:cb:8e:21:99:6b:95:94:7e:48:df:4a:56:
                    30:f6:a5:a9:04:20:58:21:94:ec:58:2e:0c:6c:1c:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:F3:FC:BC:3D:9F:FB:A0:53:8E:06:0A:72:F1:34:09:20:4B:E3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.220.0/23
                IPv6:
                  2001:df0:c740::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:44:a0:e1:57:bb:7b:ef:53:3a:04:db:b5:3c:b9:bb:31:9c:
         1b:ca:4f:e3:0b:dc:5f:84:a1:4a:86:64:8f:7d:58:29:4e:ab:
         4e:06:32:17:f6:1b:12:f0:a3:2e:3a:2f:9f:46:53:62:a4:b5:
         e7:ef:0d:ae:20:5b:65:01:aa:33:0f:b8:b6:d3:da:e0:32:a2:
         73:b9:55:34:c3:77:7f:a1:45:85:c5:d1:10:65:51:e7:b6:4a:
         81:1f:85:20:60:70:5c:21:5c:ea:8f:e1:6f:47:f2:5b:02:55:
         d5:b7:41:c8:34:55:c6:bd:7e:03:87:82:c1:7e:9b:64:3d:70:
         e6:88:6e:e5:ca:54:0a:3e:50:26:8e:64:b3:88:ad:9f:fb:d7:
         b9:38:be:30:00:1a:6a:d6:a0:14:b0:48:38:e8:fd:8e:39:1c:
         c6:fc:64:97:ac:3f:0a:de:2b:7a:dd:f4:9b:2b:0f:00:f4:e6:
         82:09:0f:3d:f1:4e:19:7f:29:78:5a:d2:33:b2:6f:f3:47:67:
         48:b5:6a:34:85:0c:2b:e8:90:01:54:b9:25:f1:e1:df:3d:67:
         e1:ba:c3:16:31:ee:f4:f9:22:40:e5:c2:2b:52:42:83:70:24:
         68:e6:b6:cd:45:94:cf:4d:53:9c:5e:e5:db:32:e9:07:fd:28:
         1a:d1:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:54 2026 by rpki-client