Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa
File:                     682214D6505711F08AA6EA60C4F9AE02.roa (raw, json)
Hash identifier:          CYn5FbDQJwvgrpDM96NCRvn3NqNQHPz+9lH49qoII28=
Subject key identifier:   78:61:CB:D4:99:4B:83:60:46:3A:64:B8:49:CC:24:EC:E8:A1:29:5D
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1AAA
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 17:17:28 +0000
ROA not before:           Wed 22 Jul 2026 17:17:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132386
IP address blocks:        103.70.250.0/24 maxlen: 24
                          103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6826 (0x1aaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jul 22 17:17:28 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a60fb28-29b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:aa:d9:1a:00:ba:ce:f0:48:e0:36:0e:06:
                    9a:a2:d2:fd:e8:82:94:cc:8c:51:bb:42:47:78:62:
                    6d:41:2f:c6:af:5d:4b:e7:a0:84:80:49:61:a6:de:
                    61:2d:af:57:f1:a8:6d:31:27:58:bf:c1:ba:b5:9e:
                    ed:29:94:91:1b:a6:cb:86:f3:01:77:83:c7:7a:ac:
                    10:ba:17:18:b1:6e:7d:b3:a4:fb:d1:72:f6:fb:37:
                    51:7d:a1:99:2b:4e:cd:13:1f:12:30:b5:ce:a6:b7:
                    d0:60:14:0e:93:2c:b9:0d:55:5e:22:d6:8e:e9:3e:
                    be:dd:67:b7:cc:1c:75:12:f0:7b:20:87:ea:83:5f:
                    80:27:2d:db:8a:c3:2b:ee:08:34:61:24:4e:4e:3d:
                    55:83:66:8d:cb:31:2c:57:32:38:69:c7:1c:ef:4f:
                    b6:51:e5:ac:3d:44:32:65:3b:3a:e8:4a:18:ce:31:
                    66:0c:c7:96:70:d9:6a:72:ed:a7:36:4c:ef:68:da:
                    89:00:b0:5d:f9:82:58:aa:19:ce:9f:d0:46:67:ba:
                    56:14:3e:f3:9f:00:e2:0b:22:09:5e:89:d9:99:f1:
                    79:db:02:c4:d7:15:06:11:07:0f:9e:27:7a:d1:23:
                    58:0e:bb:23:f5:38:7e:54:89:b8:bb:26:ff:4b:70:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:CB:D4:99:4B:83:60:46:3A:64:B8:49:CC:24:EC:E8:A1:29:5D
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:32:61:6a:f7:5a:8d:4b:1a:db:b3:06:7f:48:3a:97:96:2a:
         36:a9:d2:79:29:1f:8e:05:11:cf:2a:bd:bf:b9:f5:fb:17:86:
         ee:bf:a9:72:12:70:5f:bb:99:d5:30:88:e7:95:f3:98:3c:e4:
         fb:d0:fa:b4:17:db:a5:0e:0f:6d:05:40:c5:3c:a9:ab:55:51:
         47:f1:c1:a7:9d:6b:63:d3:8e:62:ad:ec:b9:a4:d7:7e:19:47:
         94:73:f9:e4:a6:d1:84:32:b2:3b:2c:f7:f1:a8:f1:84:a9:f2:
         05:aa:db:b5:30:67:d3:d1:17:0e:75:b6:df:44:32:ae:a3:b4:
         47:38:0e:dc:75:2a:53:3a:9e:cc:f1:02:7f:f9:af:06:04:8c:
         7e:f7:da:c7:b2:1a:f8:75:74:a0:d2:cd:5a:fd:06:b6:c1:d6:
         5b:23:d1:b3:40:d5:da:b6:35:b1:d9:da:0c:3f:17:10:04:ca:
         f7:3f:cd:3d:26:ff:75:96:3c:be:4a:46:12:08:80:71:8d:c2:
         5a:94:c0:c7:5d:64:9b:89:a7:41:3d:fc:47:43:d5:9c:4c:12:
         90:32:48:d0:9b:1c:0e:48:ed:24:4e:70:db:1b:16:74:05:ea:
         29:27:f3:89:db:1b:d3:0d:9c:a5:5d:8b:10:a7:0e:da:71:f5:
         68:6f:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:02 2026 by rpki-client