Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8540482A4011F0BBEBBC4BC4F9AE02.roa
File:                     EF8540482A4011F0BBEBBC4BC4F9AE02.roa (raw, json)
Hash identifier:          Oih0uofUe6yUtfzzs3TLAHuS0ePAmQF1CunRauID2/k=
Subject key identifier:   38:8D:73:D3:B5:8B:6F:38:42:C3:18:76:FF:6A:E0:EB:12:C3:FE:5E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F318
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8540482A4011F0BBEBBC4BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:13:33 +0000
ROA not before:           Mon 06 Jul 2026 17:13:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141484
IP address blocks:        103.160.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62232 (0xf318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:13:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be23d-ff30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:08:f5:23:d8:a7:70:e4:fc:02:8d:84:6a:
                    e7:21:77:87:61:99:c1:5a:20:cb:9f:35:fd:82:b3:
                    c8:74:ab:08:dd:fb:30:93:6c:eb:15:81:38:b5:40:
                    5e:96:14:15:11:27:0c:4c:e8:32:8c:94:af:2b:a4:
                    25:61:d3:6e:7f:b2:df:c4:12:53:2f:b5:f8:05:77:
                    de:f3:59:c0:2d:79:71:2b:48:3c:d7:96:c5:67:c8:
                    6b:84:c3:38:51:d4:bc:b2:81:ad:2a:87:82:c9:9e:
                    cc:7e:d1:22:b4:ac:91:c7:64:58:b9:6e:32:19:ef:
                    3b:c0:d5:37:9d:b3:f3:50:f4:78:f9:94:b7:7b:6c:
                    4d:ec:f4:a2:30:01:df:7e:05:38:f6:4f:04:d7:72:
                    bc:0c:80:29:b9:78:ff:c2:2c:9a:80:47:29:6b:ff:
                    97:95:c2:e6:cd:c9:01:46:ae:e1:65:78:56:d2:85:
                    5a:be:ea:bc:66:41:08:ad:9b:00:4a:49:41:b2:22:
                    06:49:95:4d:41:b7:a0:62:ca:5d:c4:96:81:1a:50:
                    cd:8e:7f:18:20:17:c0:d3:b6:f4:28:30:92:c0:46:
                    6d:c0:d2:07:ac:96:ef:c7:d9:92:a8:b3:0b:6a:3f:
                    39:48:0a:e7:2f:02:b7:68:f5:03:49:2a:54:67:4d:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8D:73:D3:B5:8B:6F:38:42:C3:18:76:FF:6A:E0:EB:12:C3:FE:5E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8540482A4011F0BBEBBC4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:44:97:8a:0c:91:fd:ef:10:33:27:d7:b3:71:5d:f2:d5:
         0c:a3:5a:d8:81:58:be:53:5f:83:1f:70:25:0a:55:d1:fa:bd:
         df:18:e8:ba:39:e0:fd:fa:53:3c:df:4c:5c:34:5c:62:e7:60:
         a0:85:fd:5f:17:68:7f:5d:23:91:38:7f:25:94:89:3f:2a:f9:
         9d:9f:6a:ee:1d:7a:85:fb:f4:05:d2:38:3a:4a:af:67:6e:fb:
         ae:f8:d5:7f:08:5f:de:58:1b:da:cb:e4:4f:0e:b7:52:6c:ab:
         4e:1e:cb:95:8b:44:59:b9:ea:c1:32:80:87:30:08:93:de:00:
         8c:4f:4a:46:24:8c:bf:34:16:f0:d1:03:6a:4e:8e:b8:ed:b8:
         21:4a:df:55:b5:03:47:f7:cc:25:09:78:41:b6:5e:d5:30:58:
         8a:d9:0b:de:23:de:4e:b8:7b:89:70:39:e4:b5:3c:5d:36:48:
         72:95:cf:fa:cf:00:43:04:d3:a6:8e:f1:88:f1:06:76:17:41:
         6c:88:c7:b7:b6:79:18:30:ae:cd:7c:39:75:ea:08:01:e2:8c:
         02:f4:31:cf:92:85:ba:73:c6:4c:71:b5:e9:8b:76:25:b7:08:
         65:6f:f8:b3:bc:34:93:e3:6d:84:8a:89:18:9c:7c:f4:b5:96:
         eb:7b:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:03 2026 by rpki-client