Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB1CEEA4511E11EDB9A4DC87C4F9AE02.roa
File:                     FB1CEEA4511E11EDB9A4DC87C4F9AE02.roa (raw, json)
Hash identifier:          awaYEsbEq3Gp3FgXGZbFl/KwUOsV1ucXIedrfhw3QF0=
Subject key identifier:   6A:E8:2D:7F:47:61:83:53:05:05:E8:90:03:28:10:AE:95:01:EB:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F366
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB1CEEA4511E11EDB9A4DC87C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:16:15 +0000
ROA not before:           Mon 06 Jul 2026 17:16:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141793
IP address blocks:        103.164.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62310 (0xf366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:16:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be2df-d223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:79:36:31:0a:c8:df:a1:cb:8f:43:cf:57:
                    7a:a0:ef:71:ef:68:37:31:c0:71:ab:e2:76:37:eb:
                    83:2a:21:db:67:d8:25:11:26:ab:7d:95:b6:3c:d9:
                    1c:a8:de:41:f7:d0:b9:91:dc:9c:5e:54:72:1e:4f:
                    f0:89:db:de:15:2f:6b:f2:c4:e2:10:f9:a7:e0:e1:
                    0f:80:84:72:3d:fe:a3:96:dc:61:b3:fc:8a:e4:f3:
                    6a:ea:7c:1d:97:ee:e1:2d:69:94:a4:49:69:07:2e:
                    74:fe:21:70:90:2f:b2:6e:7b:c4:ba:27:58:7e:04:
                    ee:17:5f:23:8f:b6:71:28:89:ea:d4:77:b9:45:40:
                    91:d6:01:1c:0c:8f:e9:00:30:7b:15:6e:fd:f6:3c:
                    7d:a5:9a:3a:59:cb:63:7b:c9:f6:35:fc:ae:52:7e:
                    80:68:4d:d9:c8:84:f2:9d:37:ac:98:3e:8b:1f:3d:
                    3a:c5:2d:49:da:3a:c0:ed:91:da:a0:02:c8:35:29:
                    3e:66:0f:ac:e0:23:b8:68:f8:e2:1b:d8:e9:46:9f:
                    9c:da:c4:d5:48:f8:63:90:87:7b:43:85:a3:70:fe:
                    f0:d3:a1:99:d5:8d:1b:0d:2c:06:61:1b:20:0b:8f:
                    44:45:6d:ed:6f:7d:77:c1:c5:2d:5d:9f:9e:f3:ba:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:2D:7F:47:61:83:53:05:05:E8:90:03:28:10:AE:95:01:EB:E3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB1CEEA4511E11EDB9A4DC87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:db:3b:d9:53:0c:e0:2e:23:bc:e0:b4:30:de:d8:be:b8:b2:
         de:22:27:b8:e8:87:2c:a8:88:a7:19:98:59:3c:f0:8c:ea:54:
         a2:7b:31:5a:b2:b4:21:6a:83:f9:72:08:85:ce:5e:5e:71:32:
         ee:00:98:91:77:19:24:91:35:de:51:ab:0c:06:64:d5:70:c9:
         86:2e:be:44:96:52:84:a3:95:bd:df:a6:f3:91:4f:61:ba:0b:
         58:e4:f6:df:1f:d4:3a:c3:d9:8d:1b:9d:7a:94:b7:1f:15:fa:
         53:09:4e:26:b7:37:16:04:fb:55:1d:c6:33:b8:08:d2:a8:a2:
         f6:16:bb:54:aa:cc:fc:c0:ba:8b:24:02:e3:b1:12:d6:ea:07:
         67:af:09:f7:3c:25:eb:be:89:40:fe:77:60:25:95:7c:b9:26:
         46:a7:26:3f:51:47:db:f3:cf:50:fe:47:1f:09:ff:20:45:05:
         b5:f6:56:8d:cd:4f:a3:5f:13:f8:d8:3e:cd:d5:09:87:03:e4:
         47:a4:db:8d:a4:a1:79:60:8c:23:5a:f2:69:47:6c:be:74:49:
         22:20:78:f0:1d:4e:ff:04:f0:5a:aa:a2:cf:bb:89:7b:5b:65:
         aa:8b:db:9d:44:65:b4:66:1e:04:2f:56:ba:4b:43:40:f3:90:
         5a:3a:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:48 2026 by rpki-client