Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa
File:                     C0681BF2CF4911EF8531B085C4F9AE02.roa (raw, json)
Hash identifier:          FuAuOSeZqyhv7xBUkLpYtgZN4CG+Zmtssp+xgIjrFpk=
Subject key identifier:   94:F6:47:D9:B6:D8:96:C4:DB:E2:B9:97:57:4E:94:00:63:1A:4E:76
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       07CB
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 22:23:27 +0000
ROA not before:           Mon 06 Jul 2026 22:23:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     932
IP address blocks:        43.254.216.0/22 maxlen: 24
                          103.238.224.0/22 maxlen: 24
                          103.244.88.0/22 maxlen: 24
                          116.206.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  6 22:23:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c2ade-9954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:49:46:aa:8d:19:24:0f:62:b7:d4:b0:2c:
                    65:51:fd:4f:44:68:f5:f2:1f:cf:ad:8c:dc:d8:1e:
                    9a:79:1a:e5:37:85:5c:61:dd:58:5b:00:20:8e:14:
                    d1:7d:f9:e3:a9:c1:43:d8:ac:42:c4:98:b8:04:f4:
                    9f:c2:54:58:26:b6:0c:1e:46:e5:99:00:31:d5:cf:
                    b6:d9:8b:77:93:6f:49:d5:04:9e:0c:95:9e:d0:58:
                    48:c9:e8:cc:d3:66:a8:d9:55:d4:bb:ea:f8:b3:18:
                    85:68:72:7d:ad:7d:c9:70:ac:47:cd:16:a1:75:b6:
                    7b:ce:84:75:3e:7e:8a:2c:97:b7:f3:70:7d:97:52:
                    91:71:ed:9e:2a:8e:15:60:9e:90:db:8b:88:48:33:
                    5c:a7:35:d1:2f:f2:87:13:2c:b7:24:a7:ba:bb:df:
                    4a:a5:dd:c0:17:54:17:cf:f4:4d:cd:f2:5e:48:fc:
                    7a:60:df:be:47:5d:b6:60:a0:13:8f:a7:b1:8b:49:
                    47:b3:6c:8e:0f:ca:d3:6f:bc:4d:1d:2a:c9:0d:3d:
                    54:40:27:0d:81:3f:71:fe:37:79:5e:3f:e1:ee:08:
                    36:6a:ae:27:86:17:e3:23:72:24:87:b1:59:49:8a:
                    e0:12:62:ec:c8:e9:15:8a:37:a9:ad:a3:09:94:49:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:47:D9:B6:D8:96:C4:DB:E2:B9:97:57:4E:94:00:63:1A:4E:76
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.216.0/22
                  103.238.224.0/22
                  103.244.88.0/22
                  116.206.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:01:9c:f1:3b:b2:f4:01:b0:b6:98:3b:8c:53:fe:ec:e2:6b:
         b9:48:0d:1d:85:1d:69:00:57:83:18:ff:69:8b:0c:b6:c7:49:
         4b:17:92:77:de:39:48:68:9e:a3:60:c2:e3:82:b1:28:1b:15:
         56:f8:8e:a9:a2:11:8d:ef:e1:c4:67:83:b9:1a:1a:ed:49:1b:
         ad:cc:ad:70:5d:45:b3:32:15:ba:56:14:8f:1c:14:5e:fe:17:
         67:0b:35:83:07:54:15:5d:4a:81:70:54:66:c5:1a:87:68:12:
         b7:54:8e:13:d0:d7:31:b9:dd:db:63:34:38:0b:c0:30:43:24:
         f0:cb:5c:13:c7:9d:81:f5:d6:f3:e9:74:e3:a3:7c:90:59:28:
         4a:27:e7:8c:8e:74:8a:95:41:65:9d:e0:c1:e9:aa:71:e4:9c:
         2a:2b:f1:aa:e7:b4:7d:e1:f7:a6:b0:6e:62:bb:b0:a1:26:93:
         22:d4:24:47:db:69:06:1c:bb:09:f7:d5:c1:5c:e9:ca:68:43:
         b2:60:e2:9d:d3:21:d0:23:29:52:f1:96:f4:2f:9a:98:5f:f0:
         03:86:39:8d:9b:a8:b3:9b:e2:40:86:2d:7b:6c:75:36:42:1a:
         c1:9b:b3:fc:f2:49:79:1d:a3:c9:b4:75:16:26:9f:85:05:67:
         66:66:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:02 2026 by rpki-client