Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
File:                     E3105D04777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          DrKVDvMocLXzLgvXMZCEUVeDoIKw7Tev+2Jtiw1fDsY=
Subject key identifier:   90:AE:40:19:9B:98:39:F7:BB:13:97:DF:13:4D:A6:FF:2F:80:7D:9E
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0193
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 06:32:21 +0000
ROA not before:           Tue 07 Jul 2026 06:32:21 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     59253
IP address blocks:        103.64.18.0/24 maxlen: 24
                          103.64.19.0/24 maxlen: 24
                          2405:a280:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  7 06:32:21 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c9d75-af1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:75:35:33:35:09:d0:8a:5c:77:63:9d:13:
                    b6:0f:4e:b2:33:2b:73:01:d8:d5:4c:f6:a3:ca:73:
                    6f:16:64:3e:25:aa:7b:d0:ce:4c:ff:cb:fe:2d:fd:
                    e2:34:04:ea:ac:46:db:e8:22:99:45:ce:8a:cd:ad:
                    46:b0:30:47:f2:06:74:aa:35:55:37:ec:06:8f:79:
                    fe:3c:3b:e8:63:2a:88:51:74:40:c2:4e:db:8a:37:
                    6f:6b:15:f1:10:8d:d1:c2:45:79:ed:e2:59:06:85:
                    6f:cf:b2:16:64:e9:2c:c3:4a:90:78:95:3f:c0:c2:
                    99:b4:0e:38:32:2d:5d:64:27:f4:53:df:c6:af:99:
                    e0:fe:b0:39:31:cc:5b:2a:3f:ee:d8:36:7a:cd:a0:
                    7d:57:ae:78:cf:c7:1b:8c:ca:b7:e8:ae:92:9d:83:
                    ab:bd:92:ec:f5:e2:3f:e8:33:61:7f:9e:1f:84:a5:
                    22:d3:f6:5f:1e:d6:24:b3:c5:b7:df:bf:62:5b:35:
                    18:99:fb:53:4b:b2:21:0f:99:58:87:19:d9:6d:0a:
                    2e:cc:6d:ad:8d:7b:1b:16:16:1c:ce:4f:bb:12:54:
                    0b:d6:65:09:76:64:29:32:a7:ac:76:da:60:1b:d2:
                    e2:0c:14:1a:ff:24:e9:05:a8:e0:90:7a:be:08:b9:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AE:40:19:9B:98:39:F7:BB:13:97:DF:13:4D:A6:FF:2F:80:7D:9E
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.18.0/23
                IPv6:
                  2405:a280:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:59:30:58:04:62:bc:11:ed:f7:bb:70:ae:61:43:17:aa:
         a5:38:6b:04:3d:78:09:7e:5b:77:45:e5:4e:f5:13:ec:30:16:
         cf:ab:6d:c3:2c:94:f9:c3:46:ee:01:7a:2e:e2:1f:eb:38:99:
         ee:cd:39:4c:4f:2d:03:83:c9:30:03:c8:2d:4b:f1:4b:52:23:
         50:67:d9:4f:10:41:7b:13:49:bd:07:d4:db:1b:64:b6:87:13:
         25:21:09:5b:c2:6f:bc:35:a5:28:ec:17:c8:22:58:d6:fc:7b:
         ed:02:08:09:3f:0e:04:9c:4e:c7:7c:71:0c:4c:b9:d4:35:5e:
         38:73:41:91:a3:53:0d:3a:cd:c4:ad:4e:f2:01:97:ad:72:75:
         f8:33:1e:40:70:b2:7b:87:87:b5:65:91:90:41:4e:30:01:2d:
         d5:bd:f1:50:ab:c7:8d:9f:0a:c1:86:58:ab:51:33:77:79:1a:
         55:01:1d:ba:3e:8a:02:9f:be:1b:42:0a:9c:1f:eb:ee:00:da:
         79:5f:4f:33:70:94:16:eb:a5:51:bb:24:e7:37:47:95:e6:a1:
         e7:6f:6e:7d:10:63:38:1f:d7:98:91:7e:ba:11:95:84:4c:df:
         e7:79:e0:8d:55:9b:62:fc:da:9d:d4:e0:aa:e7:d7:4b:1f:af:
         cb:01:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:19 2026 by rpki-client