Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B899690275D911F1B46C33AD6CA30FBC.roa
File:                     B899690275D911F1B46C33AD6CA30FBC.roa (raw, json)
Hash identifier:          fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=
Subject key identifier:   38:97:A8:B4:46:7C:BD:4E:32:91:AB:91:0B:44:CC:17:AB:22:EE:29
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0C2A
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B899690275D911F1B46C33AD6CA30FBC.roa
Signing time:             Thu 02 Jul 2026 05:48:59 +0000
ROA not before:           Thu 02 Jul 2026 05:48:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.246.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3114 (0xc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Jul  2 05:48:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a45fbcb-c2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:c3:48:53:5e:f6:de:a6:97:b5:a2:8f:cd:
                    34:f5:f6:e4:9e:77:93:4e:64:80:d4:e0:e1:a0:4c:
                    86:d8:e5:a7:2b:02:ed:86:05:b9:01:33:d6:bc:f9:
                    b1:93:f2:db:35:8a:d4:87:f6:0c:41:7a:4d:57:bb:
                    18:c1:64:ba:f4:0b:1c:80:47:aa:b3:51:cd:e8:e4:
                    2c:21:c3:06:e9:88:19:bc:0d:f9:8d:97:ae:d0:57:
                    ff:d7:56:96:8c:aa:af:7e:b4:19:7e:50:07:15:a4:
                    18:47:a1:a6:e5:13:9a:6d:b3:65:b7:e2:5c:74:80:
                    3c:af:b5:b0:30:a0:28:18:c1:41:e9:57:3d:21:9d:
                    55:a6:7c:f3:54:a8:39:e8:1b:7a:0e:94:5e:e2:9e:
                    85:92:48:0b:c7:2f:41:ae:a5:02:33:41:3e:92:2a:
                    bd:9c:6e:65:8f:46:d1:13:e0:22:b4:b1:4e:ab:fb:
                    0a:65:8e:78:28:bd:70:48:cc:83:42:1b:ba:43:c0:
                    fb:2f:53:0a:19:b0:d2:32:92:f1:8f:5e:f2:97:01:
                    4b:97:a6:1b:1a:63:3c:34:dd:f6:87:37:90:77:5b:
                    f2:a0:ef:f0:56:38:24:8e:c6:76:a6:bf:76:6b:be:
                    f0:a0:99:ef:c1:75:35:67:57:0f:5c:01:8d:ad:70:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:A8:B4:46:7C:BD:4E:32:91:AB:91:0B:44:CC:17:AB:22:EE:29
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B899690275D911F1B46C33AD6CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:77:f7:28:b3:18:3c:0e:e5:45:1d:72:fb:5c:22:17:f1:65:
         0d:0d:ac:3b:b7:97:5f:80:27:39:49:d9:af:ca:4d:73:9c:a4:
         c2:4d:b9:df:f8:1c:59:8b:fb:b3:ba:0b:bd:4c:5c:92:6b:ba:
         d4:9a:6c:96:ff:36:be:f7:56:1c:24:a7:74:81:5a:dd:52:c2:
         8b:3b:c3:c1:f2:2a:41:b8:48:d8:64:2c:00:33:b6:e0:db:de:
         c8:f1:2b:75:9b:37:96:df:9c:01:0c:dc:f2:81:ec:b2:e8:bd:
         a6:b7:81:d4:6e:62:57:46:6d:66:0f:05:51:0a:4e:70:42:3f:
         65:08:ea:f5:bb:35:c1:36:34:ec:84:c1:45:66:50:90:1d:ac:
         9f:29:5d:56:e5:b9:f3:af:d4:80:88:22:ec:67:8c:5c:81:e0:
         26:5f:42:ce:24:c0:af:4f:62:60:19:26:c3:9f:7b:cc:64:56:
         39:9e:94:81:d3:21:63:cc:b6:30:82:a3:35:a3:ac:41:cf:3d:
         1b:33:07:0b:34:cb:62:0f:40:8b:27:fd:20:f9:8a:5e:e0:60:
         73:74:c7:54:91:9f:79:3d:c2:53:c5:ec:09:1d:88:4f:05:7a:
         0e:41:9b:b2:be:04:0f:0b:f3:74:3f:ff:4a:43:30:ba:0c:ab:
         7e:3c:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:44 2026 by rpki-client