Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
File:                     7AF2C29C50C811F09EF54B31C4F9AE02.roa (raw, json)
Hash identifier:          YTRTTxAoOuduYEtCiwkMqucnJnkRWP138bJsPpjcIEA=
Subject key identifier:   4B:FE:45:60:A9:2A:3F:66:03:D6:ED:28:26:FE:EE:E7:6E:1A:21:39
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1A79
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
Signing time:             Wed 22 Apr 2026 17:20:48 +0000
ROA not before:           Wed 22 Apr 2026 17:20:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135567
IP address blocks:        103.70.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Apr 22 17:20:48 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e90370-2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1b:5c:d8:ce:85:05:a7:36:ba:aa:80:b7:f9:
                    fc:7f:67:5c:50:b7:1b:2c:74:c1:e1:60:b4:bb:2c:
                    91:e4:e0:2b:a5:0f:0c:8a:65:67:30:f1:26:b1:6b:
                    7a:82:4b:1f:d7:30:63:01:1a:52:7e:b8:d8:d3:bc:
                    84:c8:b1:f5:23:6a:fd:ae:8d:da:57:c8:3e:05:8a:
                    2a:7a:42:af:74:ea:56:14:75:ce:97:db:cf:17:b5:
                    e0:bd:a0:9f:98:15:03:0b:75:2b:47:e3:0b:60:c9:
                    2c:0e:1e:ff:7c:70:a2:f7:8d:98:22:e7:f8:b9:38:
                    f4:83:a3:69:0c:9b:16:84:3b:65:3b:dd:58:e0:68:
                    3c:d2:e5:71:fa:21:45:58:61:92:f6:0d:e0:a8:e0:
                    03:23:0f:11:c4:e2:d7:21:34:f0:af:9a:29:e0:b8:
                    3b:01:e9:c5:c7:4a:52:93:2e:e2:ea:b0:46:39:74:
                    c2:70:8f:98:3b:e5:82:85:53:36:05:09:ba:29:39:
                    4d:43:fc:2b:6a:9f:8f:32:bb:95:3d:91:5e:a6:8d:
                    20:92:4d:d3:96:e3:ee:9e:27:f4:6f:42:e4:91:19:
                    b0:f9:7a:93:50:3e:b9:cc:31:43:db:a5:38:db:7d:
                    0a:9c:4a:6c:3f:51:2a:ab:d9:08:a2:c5:d6:60:0d:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:45:60:A9:2A:3F:66:03:D6:ED:28:26:FE:EE:E7:6E:1A:21:39
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:5c:a1:6a:85:af:cd:e1:48:61:22:6f:cf:ff:5c:d0:9c:4e:
         ca:5d:31:09:43:31:d1:de:f9:4e:47:95:4a:a5:26:22:78:d8:
         fd:2a:6f:61:a4:2c:f1:26:b7:72:52:bd:6a:c0:2a:78:03:b6:
         04:cc:c2:38:dc:f7:f3:21:81:5b:fd:be:e4:37:4f:fc:f2:78:
         d0:c7:15:99:6d:df:21:fb:ec:2f:2d:2f:a7:aa:b3:77:6d:a1:
         49:3c:f0:41:23:22:72:67:62:50:b7:14:b9:a7:e9:91:6c:0a:
         04:94:d6:d6:f0:38:f3:9b:f6:e2:9a:f2:e4:74:61:5c:bb:69:
         23:1c:bb:2d:25:39:70:26:94:82:27:5f:64:71:38:c4:1d:3a:
         81:8e:a6:2b:2a:27:0a:70:3c:68:dd:2d:0d:77:14:4a:1d:25:
         f5:95:0c:94:01:52:0c:96:5b:a5:e0:98:5f:3a:51:db:06:f0:
         c6:95:65:9e:cf:8f:d7:23:0e:25:b1:3f:6a:da:5c:71:42:4e:
         2d:ea:85:3f:f5:85:b1:30:b9:fb:9d:ce:97:1a:87:32:7a:6f:
         a0:25:4b:2f:82:cd:3b:67:b9:c2:a6:05:e9:7b:c7:ef:eb:ca:
         71:1b:26:77:7f:92:ea:6c:9f:a9:2f:88:67:80:22:64:67:c4:
         12:0e:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:00 2026 by rpki-client