Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa
File:                     F71A706068F511EF9E747344C4F9AE02.roa (raw, json)
Hash identifier:          t87g7xxCPjKP1rkT+mZdy8puSWMhDzp3JdE6iIKUUkw=
Subject key identifier:   3D:A9:11:2C:C9:4C:30:E0:2E:62:B4:6D:AE:DA:4C:FF:1D:17:68:96
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEF9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:38:58 +0000
ROA not before:           Mon 06 Jul 2026 16:38:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134013
IP address blocks:        103.94.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61177 (0xeef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:38:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bda22-68c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:e7:ef:f5:43:09:5c:3d:c3:e7:cc:29:6d:
                    75:88:1d:2f:f5:92:48:89:74:47:c1:b9:d5:58:9e:
                    2b:b5:67:66:e1:ac:53:e3:76:1d:60:5d:f7:d6:08:
                    c8:bc:d3:8a:0d:03:83:c6:da:65:0c:a4:94:23:12:
                    1e:b6:83:d0:80:50:bf:ef:bd:f4:12:22:0e:15:e1:
                    9f:2a:fd:df:a2:b3:2c:73:d7:22:b8:69:dd:8f:4b:
                    c4:1a:f8:2d:a5:57:0f:ba:69:19:b2:ce:65:78:16:
                    87:89:f9:96:74:66:07:d3:ba:20:23:ec:b3:af:0f:
                    f8:59:50:59:82:ec:49:07:d1:3f:82:7b:f9:47:2c:
                    71:e9:1d:5b:9c:c9:ef:62:34:4d:28:81:85:f8:66:
                    ba:53:16:32:ad:98:e6:53:9a:43:54:39:2c:dd:db:
                    c4:ec:4c:6f:92:35:22:4d:dd:c9:58:7e:64:fa:9a:
                    c2:b0:25:8d:06:67:a8:63:69:38:a2:af:c5:d2:f1:
                    40:5c:01:6a:a9:97:f3:e5:fa:cc:5a:20:87:e6:dd:
                    76:18:1b:74:6a:87:c2:94:dd:67:78:74:4c:15:32:
                    75:9f:88:ba:31:47:01:e0:4a:90:02:8e:38:c1:b9:
                    d5:48:60:ae:2d:29:50:0b:d0:35:d3:cd:ea:ce:79:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:11:2C:C9:4C:30:E0:2E:62:B4:6D:AE:DA:4C:FF:1D:17:68:96
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F71A706068F511EF9E747344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:e1:58:75:e3:49:bf:a3:fc:95:1a:de:57:72:0c:9e:a9:
         4c:36:8d:e0:63:7a:18:e6:4d:8b:06:34:a1:18:78:ec:59:ad:
         5d:fa:ee:a1:9f:3f:e5:0f:ca:74:4c:af:cc:fe:b8:15:c7:1c:
         61:b4:bd:d2:60:65:4b:da:48:2d:4b:48:eb:af:16:6c:1a:a1:
         09:92:3e:04:06:34:4a:74:ba:9a:ea:b1:00:91:c0:72:eb:ec:
         99:39:95:8f:75:37:a3:58:92:68:a1:a6:13:1f:ab:5f:94:2b:
         3a:fe:63:0a:2e:2d:76:e4:79:bb:cf:90:7c:4e:3b:ed:9e:5c:
         ea:54:2a:4e:00:5f:d7:e3:60:48:2b:4c:e7:be:53:d1:9f:a1:
         29:d1:cf:65:28:71:fe:d8:62:9c:38:84:a9:15:4b:ac:c3:4b:
         6d:fa:65:49:ce:39:e1:42:11:a0:75:58:92:24:cc:bb:66:76:
         fa:91:29:a5:94:d5:7d:d3:98:01:e6:38:6e:f7:2d:f6:ae:28:
         63:e1:28:f1:8c:ea:2a:2d:8f:fa:60:37:a3:ee:a9:54:00:f1:
         6a:61:17:44:af:ab:e7:8b:f7:95:c3:29:bb:fc:d7:3a:fa:57:
         32:18:73:c7:50:a9:a6:85:b9:a3:fd:9a:71:3d:4d:09:10:6c:
         78:1b:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:07 2026 by rpki-client