Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD0E1316361B11F09FD94255C4F9AE02.roa
File:                     FD0E1316361B11F09FD94255C4F9AE02.roa (raw, json)
Hash identifier:          GQEsMQYihXnIbqlXm0JBBPYnrgt83bzkh6e77mpGxYU=
Subject key identifier:   A3:1B:13:AA:32:66:F1:A7:24:31:A1:F6:FC:09:80:84:FB:75:BD:88
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F03C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD0E1316361B11F09FD94255C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:49:24 +0000
ROA not before:           Mon 06 Jul 2026 16:49:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135776
IP address blocks:        103.182.66.0/23 maxlen: 24
                          103.220.32.0/24 maxlen: 24
                          103.220.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61500 (0xf03c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:49:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc94-65a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:f4:67:31:8e:e9:5e:32:7e:5d:f0:e4:90:
                    ff:35:8f:90:58:f8:aa:79:a0:8c:79:49:a4:4c:53:
                    ca:ba:a7:20:0b:dc:0c:27:2a:5b:a3:52:ba:a2:29:
                    79:9e:3c:71:37:b1:ec:6c:42:d5:7c:44:0c:5b:03:
                    6e:c5:d9:e3:1b:42:0e:f8:70:17:d2:95:80:59:a4:
                    3a:b3:5a:2b:34:ca:a8:18:bf:65:56:0b:c2:e8:0c:
                    9f:a8:0a:0c:91:ae:86:9f:3f:02:d4:64:d7:46:f5:
                    79:63:55:f4:f3:7a:d0:ad:30:31:b9:df:48:c0:65:
                    3c:0c:06:9a:8f:43:54:2e:89:12:1f:03:5e:2e:fe:
                    87:fa:00:80:47:b8:10:dd:11:a6:a8:12:ca:13:0f:
                    8f:26:28:5a:c1:f3:92:60:79:b8:90:8d:7f:89:2e:
                    41:3f:a2:78:29:56:6c:1b:51:5e:a7:b3:ae:f4:9a:
                    b2:e6:9c:ee:b0:70:4e:f1:98:2e:ec:e6:fe:6b:4b:
                    9c:d3:b5:f5:53:7e:bf:d6:38:cc:cf:16:9b:85:6d:
                    f0:8e:68:99:2c:3c:6e:25:99:b8:5c:2c:21:02:14:
                    ed:0e:1c:88:38:e7:b2:44:4d:d7:73:3c:65:88:92:
                    8d:3e:f0:37:65:e8:76:8a:c5:62:ba:99:77:83:bc:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:13:AA:32:66:F1:A7:24:31:A1:F6:FC:09:80:84:FB:75:BD:88
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD0E1316361B11F09FD94255C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.66.0/23
                  103.220.32.0/24
                  103.220.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:5e:1d:ea:42:82:7c:59:5d:b0:78:dd:71:18:e9:3f:93:
         3f:81:c3:f0:fd:20:cc:0a:45:84:84:de:44:fa:8f:17:0e:2a:
         76:cb:47:d0:5b:33:4f:14:ac:91:25:cc:6b:d8:97:54:a1:a4:
         65:9f:ca:b9:9a:22:37:dd:ec:2c:27:9a:9d:f0:93:ba:88:c9:
         50:bc:24:20:d6:5a:4b:76:78:75:0d:49:38:0c:f5:b1:b6:38:
         a4:a5:dc:08:2b:49:87:ea:b2:dc:86:ad:78:58:61:6b:ed:14:
         1c:dd:cf:94:2f:d3:73:94:5e:ad:22:d3:b2:65:9f:c4:7d:8e:
         15:20:04:b6:51:e7:db:11:6a:ec:44:fc:ab:cc:6d:7e:23:3f:
         a1:dc:a3:c4:fb:b9:67:8c:a9:3c:54:75:3c:d4:4d:c2:ab:3a:
         be:78:59:c4:57:ce:29:78:5e:63:43:c1:22:25:68:4a:45:83:
         46:b4:96:04:90:a1:6d:ac:7b:71:fd:79:96:8a:83:ae:fb:1f:
         03:41:b2:11:0d:2e:8c:f5:55:87:08:1b:d8:19:5d:70:46:b0:
         6e:ab:0e:64:5b:e2:97:0b:2c:da:5e:43:56:1b:eb:66:50:7d:
         3e:de:bc:e3:5b:91:b3:c5:63:be:90:63:4c:1a:6d:03:1e:fc:
         ea:6f:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:43:17 2026 by rpki-client