Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/A792C8E8828A11F1B05D07B564A30FBC.roa
File:                     A792C8E8828A11F1B05D07B564A30FBC.roa (raw, json)
Hash identifier:          PJ6jn1pqQTBOGCOs6UPeC/wKHYpoUXcoKXwbpFaxUkA=
Subject key identifier:   C3:03:72:A2:34:B5:29:B8:C8:98:72:6E:51:F3:00:89:12:64:02:C7
Certificate issuer:       /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1
Certificate serial:       0159
Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/A792C8E8828A11F1B05D07B564A30FBC.roa
Signing time:             Sat 18 Jul 2026 09:25:45 +0000
ROA not before:           Sat 18 Jul 2026 09:25:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140849
IP address blocks:        103.152.104.0/24 maxlen: 24
                          103.152.105.0/24 maxlen: 24
                          2001:df4:a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1
        Validity
            Not Before: Jul 18 09:25:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a5b4699-6c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:58:4f:5e:9f:21:3b:97:19:cd:a7:0d:fa:
                    73:58:a9:3c:b6:72:19:44:1d:0d:1a:21:3a:46:92:
                    b8:04:cd:52:ee:a1:54:2d:ec:42:be:3c:60:35:79:
                    87:38:7c:41:1f:67:83:52:96:40:b7:03:31:15:54:
                    a6:75:c2:49:5d:2f:77:04:07:f8:6d:c6:fb:aa:a8:
                    2d:23:a7:4f:d5:bb:43:09:2b:bc:0e:a2:d9:10:c8:
                    2b:fb:49:a3:15:bb:68:dd:1d:d0:89:4b:72:72:5b:
                    0d:64:f3:11:10:29:c3:43:90:d5:3f:97:6a:9f:48:
                    05:47:b3:a9:b4:53:69:da:8d:1f:d5:50:08:10:f2:
                    29:69:b7:14:32:b3:88:56:09:1c:ee:2e:ec:e3:b1:
                    f0:f0:26:2f:e5:ef:3a:63:38:bc:23:57:b1:cd:75:
                    ff:88:6d:ca:16:13:74:31:5c:4a:2b:86:dc:b5:27:
                    0a:81:59:d4:39:86:96:96:0b:9a:e7:50:b4:ff:59:
                    e3:ca:64:9a:3b:61:71:2f:36:23:48:54:f2:ab:b1:
                    0e:74:73:45:76:93:07:e6:5f:e2:dd:7e:35:cd:6a:
                    ac:8f:ec:6c:19:7f:8a:3c:3a:da:cd:32:c6:4d:f9:
                    b3:9d:e3:98:fe:db:63:5f:b6:03:26:3d:28:0d:46:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:72:A2:34:B5:29:B8:C8:98:72:6E:51:F3:00:89:12:64:02:C7
            X509v3 Authority Key Identifier:
                keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/A792C8E8828A11F1B05D07B564A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.104.0/23
                IPv6:
                  2001:df4:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:b9:be:eb:d2:90:ea:45:90:1c:d8:00:3c:09:aa:b4:20:04:
         a4:17:37:86:e8:13:3b:bd:26:d7:bd:30:2e:01:53:8b:76:44:
         e7:91:76:21:5d:28:10:55:e5:dd:6e:76:bc:65:5f:02:60:9e:
         e9:66:7c:bb:e9:cf:13:d0:a7:83:b9:25:ec:cf:b9:e7:a3:49:
         bc:f2:80:66:94:37:60:58:e5:7d:00:9c:fe:6e:ca:d1:d1:3a:
         74:c5:f7:9d:a1:8b:3d:5f:4b:a7:6a:5e:da:aa:89:11:31:3e:
         7f:7b:29:62:a9:c7:54:71:cf:82:68:a5:dd:a3:ae:e8:e3:01:
         75:85:03:48:cf:90:d4:01:d5:e1:72:06:94:b3:1b:54:7f:bf:
         40:6e:ca:88:31:34:f1:d5:91:27:60:de:72:b9:3f:dc:63:ee:
         95:54:0d:28:8e:fe:c7:11:3e:f7:cc:12:9c:de:ce:6b:d4:05:
         9e:ce:5c:9a:58:4a:fc:5b:88:d9:e3:46:cb:27:bd:0c:27:0d:
         96:cb:e5:f1:ab:2e:ae:f8:8a:8c:2f:27:3a:98:ae:7e:16:af:
         13:e3:ba:37:f6:52:18:46:80:50:d9:f0:aa:07:bf:16:9c:41:
         f1:af:bb:26:df:45:6c:0b:1f:3b:ce:c9:d2:60:b7:bf:d5:42:
         f8:5d:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:32 2026 by rpki-client