Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
File:                     F8A8459E839811EE9359CD1BC4F9AE02.roa (raw, json)
Hash identifier:          KN2+CjS/QMreTe8yH2ZPCamEsRomLql9Y83yXVfhGEY=
Subject key identifier:   DB:35:F7:B2:51:03:BD:E6:28:F6:41:0E:A0:FE:47:F4:3A:1D:FB:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1B4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:01:49 +0000
ROA not before:           Mon 06 Jul 2026 17:01:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138035
IP address blocks:        103.187.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61876 (0xf1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:01:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdf7d-3850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:6c:c2:fb:bb:a6:f5:78:43:9c:15:38:cc:
                    8b:7e:be:35:67:55:fd:87:dc:d3:96:b0:17:ff:78:
                    2d:31:91:37:ed:ed:a9:8e:b2:f6:2b:d8:3a:d9:0b:
                    13:af:c7:37:82:0d:dc:b4:9b:d3:e1:01:35:29:95:
                    71:3c:b5:6e:ed:05:02:de:cd:4f:73:f2:28:ce:cc:
                    8b:06:82:dc:4f:e9:78:3b:18:90:64:70:c2:65:f2:
                    35:55:44:33:54:dc:ac:5b:b9:83:c1:dd:b0:9a:e8:
                    b4:58:16:4e:8c:14:e2:8f:48:c0:64:ee:d4:04:69:
                    23:88:fe:18:67:e4:bd:9f:3b:e6:ae:88:f2:50:9a:
                    1c:1a:c9:a3:2b:bf:3b:51:16:43:f2:c7:82:98:5f:
                    0f:60:6d:60:82:94:62:0e:4a:92:41:35:19:e6:18:
                    cc:ee:65:fe:10:6d:6b:82:77:a3:70:cf:eb:09:e8:
                    5c:f5:4d:92:f2:bf:b2:b7:63:10:c4:80:5c:87:37:
                    d5:13:0d:0a:78:43:83:ab:40:a8:29:de:52:fb:ff:
                    06:b2:9c:a2:67:17:05:ed:21:25:70:e7:19:34:82:
                    e3:31:dc:25:95:e5:40:73:92:49:1e:7a:1e:21:e5:
                    04:eb:00:23:df:1e:e0:67:f3:ee:f0:4d:8d:17:3c:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:35:F7:B2:51:03:BD:E6:28:F6:41:0E:A0:FE:47:F4:3A:1D:FB:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:57:27:3c:3d:95:7f:29:68:6b:b8:c2:28:e5:28:52:3e:40:
         b4:84:7e:e4:fc:45:3f:87:32:bd:64:30:90:cb:e4:cb:bd:9e:
         42:f4:54:85:4e:61:52:b7:b3:c2:23:85:b7:8e:83:57:be:66:
         ed:e0:a4:17:11:3a:57:a3:a5:3f:8f:74:84:1b:f9:3f:5f:21:
         bc:1b:82:d6:3a:0d:49:41:75:9b:3c:0e:c7:8c:ed:31:5e:b6:
         6b:fd:f0:5c:d0:1c:32:52:bc:f0:9d:52:6a:81:7f:9a:ba:af:
         06:30:6c:df:6c:c8:1b:2d:0a:95:73:4a:42:30:68:83:c4:1d:
         12:11:d0:d0:46:d5:ba:2d:85:fc:fe:f2:07:93:97:61:08:c6:
         b1:bb:f3:42:57:f8:34:54:63:f3:53:88:24:e1:71:2e:f9:76:
         08:9f:2a:58:79:be:04:ea:89:5f:d2:49:a3:b4:f8:d4:49:08:
         27:41:07:fa:2f:71:f5:7a:3d:9e:79:e1:da:3a:44:8c:d4:60:
         e0:ae:dd:10:b9:79:c3:83:94:fe:7c:6c:a6:92:61:ad:83:06:
         74:a6:d6:a5:f6:61:06:67:31:a1:2f:77:aa:c8:bc:ba:25:10:
         7c:c7:c9:37:8a:e2:16:cd:0e:ed:46:0c:65:2a:70:d8:84:9b:
         01:9f:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:36:56 2026 by rpki-client