Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
File:                     EF8735005E5211EC95FF2E63C4F9AE02.roa (raw, json)
Hash identifier:          s4ljxU3fMcu9Gf2T+iqdwTyC1vz9y0wBylfTi8O0ZHQ=
Subject key identifier:   9F:5B:D4:3F:76:8B:4F:B4:D0:98:4C:79:83:BB:44:9C:5B:A4:B0:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F111
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:56:20 +0000
ROA not before:           Mon 06 Jul 2026 16:56:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136713
IP address blocks:        103.103.92.0/22 maxlen: 24
                          2401:2c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61713 (0xf111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:56:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bde33-a4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:8c:40:63:b1:e5:57:d9:8e:16:4e:f6:b9:
                    cc:ca:90:51:c9:a4:5d:e0:ea:25:f9:c5:8c:d9:8e:
                    94:a8:ad:f6:65:c5:c9:a0:90:f7:9a:ec:af:6a:fc:
                    fc:8a:8f:d0:7d:b2:6c:9a:8d:35:71:7e:62:42:04:
                    3d:fb:28:17:23:cf:ef:f4:7b:dd:f3:29:01:04:43:
                    0b:f6:14:a6:73:6b:c9:3f:19:70:86:4f:a0:53:25:
                    2f:ea:61:3a:09:7b:00:d4:3c:ef:ba:1f:6d:8d:8d:
                    f1:da:e8:eb:14:22:b5:81:2b:05:aa:6b:76:eb:1c:
                    50:bb:45:46:97:5e:9a:7a:a6:ed:3b:c3:89:92:6b:
                    54:e6:f7:ed:59:bc:1b:8e:cb:78:bd:4d:09:13:71:
                    67:5a:3e:05:a0:2e:c4:9d:96:ef:aa:f1:61:ae:03:
                    51:0d:86:a7:d4:44:cf:ea:3b:00:b8:7d:cf:57:41:
                    f5:7d:25:c9:2c:62:cc:ab:bf:cd:8e:71:96:e6:95:
                    f2:bb:9e:48:66:41:b2:21:d5:e8:30:a0:c7:32:58:
                    0e:51:0d:79:f4:57:0b:a5:90:90:7a:3f:4a:4e:55:
                    3e:d5:d5:30:e0:70:6b:c6:1e:2e:04:33:2f:da:d7:
                    61:ff:20:eb:9f:f0:51:67:65:8a:60:24:54:6a:4a:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:D4:3F:76:8B:4F:B4:D0:98:4C:79:83:BB:44:9C:5B:A4:B0:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.92.0/22
                IPv6:
                  2401:2c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:bd:55:f7:87:89:0d:6a:68:7c:d5:a1:30:24:a6:6b:ec:
         0a:91:82:57:c7:89:f3:c4:93:2d:6f:e3:4f:1e:21:e2:00:4e:
         eb:94:df:1c:1f:f4:46:bb:a4:df:27:e6:02:21:89:99:bd:e1:
         16:12:85:7a:1a:41:90:a7:15:4a:0f:d4:f6:5b:5d:59:f8:65:
         09:e2:bd:e5:f9:7c:13:85:c9:7c:45:4e:07:61:2e:94:43:41:
         61:80:f3:48:a7:78:a7:20:60:15:45:2b:f9:78:72:16:bd:fc:
         b5:3a:ab:e6:66:5f:c2:c9:e1:02:b5:7f:3b:76:06:bd:eb:0f:
         e1:24:ed:3c:be:eb:bb:5e:9e:ce:f3:a3:0c:6c:1c:84:15:1d:
         ae:15:7d:4b:c2:f0:1e:bd:23:a8:b5:55:54:7d:b0:3c:d1:f6:
         82:15:e7:5e:a7:2b:a7:ae:9d:49:71:30:63:6a:e5:be:d3:a9:
         0e:f6:d1:db:16:2c:ed:10:d1:be:54:4d:e9:b6:9b:84:8d:16:
         65:0d:7d:77:1b:f9:85:db:54:de:67:2a:8f:7e:03:6d:b6:21:
         be:69:a1:0e:b4:fb:75:a6:a1:6f:17:c0:49:c6:a0:ed:05:bf:
         5f:89:00:a0:e4:8c:c0:6d:29:b4:01:d4:71:c7:1d:a2:93:8f:
         d5:bf:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:07 2026 by rpki-client