Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa
File:                     F36066086CB011F1B20C35898447A888.roa (raw, json)
Hash identifier:          4zO4OTwMbi6cs0CEz9q9djqWruSIt/qlFOWMRq0Hv6Y=
Subject key identifier:   1F:F8:63:D9:C2:FA:48:C4:D7:09:0E:BB:7E:36:9A:AE:4F:6A:C3:4F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F305
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa
Signing time:             Mon 06 Jul 2026 17:12:56 +0000
ROA not before:           Mon 06 Jul 2026 17:12:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141318
IP address blocks:        103.159.102.0/24 maxlen: 24
                          103.159.103.0/24 maxlen: 24
                          2406:cf40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62213 (0xf305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be218-9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:eb:e0:ff:58:5a:ca:22:d3:46:2a:ea:d8:
                    0f:17:16:52:8d:3f:83:47:5a:26:a3:64:14:5d:64:
                    c6:26:89:45:99:fa:07:09:68:2e:2d:e6:dd:2a:36:
                    bb:4d:41:64:24:c7:34:64:fd:55:91:6e:73:b3:e5:
                    4b:a3:70:59:0f:ba:e3:32:b8:08:34:d5:54:06:22:
                    b1:62:68:44:02:9d:91:a7:ee:f5:6a:74:90:72:d4:
                    d6:ed:28:8f:60:37:08:8e:f7:d6:89:f9:3f:1f:6f:
                    7e:c8:81:23:69:8d:b6:ae:82:56:40:68:aa:2a:5d:
                    8f:e7:26:33:00:c2:10:8b:10:c8:c8:83:9a:f4:c0:
                    8f:67:2c:05:06:f5:f5:74:e9:64:90:6e:8d:d2:bd:
                    50:93:ca:16:ac:af:0b:ee:61:58:17:1d:54:fa:cf:
                    d9:0c:bd:60:61:ae:85:6a:8b:d1:e0:ac:cf:ff:ee:
                    be:03:02:7e:cc:84:ba:66:9b:ea:e0:95:cf:4e:b1:
                    bb:ef:0e:33:3d:d6:cd:b3:a1:40:df:7e:5e:e4:cd:
                    82:c8:8f:95:01:af:41:45:6b:0b:96:ce:94:92:c4:
                    6b:46:96:a8:89:41:2d:90:b9:2c:51:05:4f:b6:4d:
                    61:12:5b:e5:78:24:77:57:1f:00:f3:7e:f2:c4:db:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F8:63:D9:C2:FA:48:C4:D7:09:0E:BB:7E:36:9A:AE:4F:6A:C3:4F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.102.0/23
                IPv6:
                  2406:cf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:49:9e:00:26:b9:0d:b2:61:44:c2:d9:6a:0d:f5:bc:8c:f5:
         a7:75:97:ba:0c:e5:f5:52:aa:b0:87:43:88:af:57:c4:4a:67:
         eb:c2:7b:18:4b:9f:5b:e2:60:b9:4d:1b:1c:e7:b4:f9:e3:3e:
         90:5f:be:38:7a:53:1c:c1:9c:5c:35:1d:57:18:30:de:47:62:
         cb:ef:34:03:9d:bb:df:1f:66:39:66:92:90:ad:13:f5:cf:3e:
         ac:1d:e5:c5:74:8e:87:ad:15:10:44:dc:c2:8a:42:6e:bc:55:
         52:6f:c5:3a:48:2b:47:8e:a3:89:c7:3b:c2:11:27:2e:6a:ee:
         ef:0c:d5:0b:26:6c:eb:33:36:02:23:01:a0:03:ff:1d:62:5b:
         ed:d6:ac:35:a4:92:30:14:ab:7a:41:2c:35:35:b1:e3:a7:5d:
         45:1d:d3:be:c0:84:af:21:e9:7d:e3:43:c8:72:c2:e2:62:ec:
         69:94:dd:9c:2a:04:a4:64:93:56:6b:5b:c2:f5:86:0a:76:39:
         a4:5f:ce:1a:ad:3a:1d:13:11:8b:da:f0:f5:dd:f1:9c:6b:5c:
         14:dd:b3:52:52:0f:e9:37:5a:3e:aa:2f:27:46:fd:51:0f:d5:
         9b:bf:b5:5f:50:fd:d3:2d:e1:ca:c0:5b:a0:a3:ac:4a:76:d8:
         e2:bf:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:23 2026 by rpki-client