Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2784F09660BA11F1AE35C9677F47A888.roa
File:                     2784F09660BA11F1AE35C9677F47A888.roa (raw, json)
Hash identifier:          oL4jr/1YdLDU8/EKrYtOfzdrG59YiQyRCoxJvjs7Ewg=
Subject key identifier:   4F:D5:9E:E8:4C:2A:9E:0D:53:08:15:D6:D3:24:AA:BB:0C:B0:BA:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FC85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2784F09660BA11F1AE35C9677F47A888.roa
Signing time:             Tue 15 Sep 2026 12:48:36 +0000
ROA not before:           Tue 15 Sep 2026 12:48:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154466
IP address blocks:        103.80.152.0/24 maxlen: 24
                          103.80.155.0/24 maxlen: 24
                          103.204.0.0/23 maxlen: 24
                          2001:df1:2740::/48 maxlen: 48
                          2400:ff20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64645 (0xfc85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 15 12:48:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa93ea3-5088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:90:9d:5d:06:a0:06:ec:d8:61:9f:c7:9f:
                    77:71:53:03:b2:52:dc:66:0b:ab:46:57:0a:50:89:
                    33:e3:33:6a:84:a5:8b:81:e1:6c:26:ff:14:a8:39:
                    a2:4a:33:75:aa:05:76:83:88:93:d5:6e:e0:5e:59:
                    25:6f:eb:8f:1b:ca:0c:c1:70:a2:77:dd:e3:ae:07:
                    2c:23:68:b0:10:87:eb:83:f7:a0:1d:e9:5e:41:43:
                    02:f8:5d:e6:0d:e4:b2:07:31:4d:28:f9:08:9e:7b:
                    96:d5:45:01:75:6d:d1:1d:15:49:0b:39:56:7a:3f:
                    ad:5d:d1:32:35:cb:63:e7:ef:65:69:b9:c7:63:d2:
                    b6:03:3f:bb:a6:2a:9c:a5:cb:bb:4f:20:d4:f1:95:
                    54:0b:25:02:1a:c9:9c:6a:29:62:fd:0f:d7:af:1d:
                    be:c0:f5:78:ed:c2:25:aa:58:0f:97:ba:3b:c6:02:
                    cb:e6:e5:05:9c:b7:d2:4e:33:71:ee:50:b5:56:b0:
                    10:0a:26:d4:1f:31:39:01:44:f9:71:b4:56:66:76:
                    4f:94:27:ab:e2:54:e5:2a:1d:ff:a7:ee:e8:a8:e6:
                    83:49:93:e0:20:a1:34:28:6d:b4:69:42:53:e0:28:
                    d6:5e:f6:12:9f:b7:f7:ec:ad:3b:2e:bc:13:7f:07:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:9E:E8:4C:2A:9E:0D:53:08:15:D6:D3:24:AA:BB:0C:B0:BA:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2784F09660BA11F1AE35C9677F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.152.0/24
                  103.80.155.0/24
                  103.204.0.0/23
                IPv6:
                  2001:df1:2740::/48
                  2400:ff20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:92:93:43:a9:00:ea:86:b6:fb:56:b9:e1:17:dd:ba:e2:
         30:3c:27:be:9a:45:c2:a5:7e:04:49:76:df:69:93:b8:2e:db:
         69:9e:f4:0f:86:d9:64:c3:84:e2:5c:08:b7:0e:fa:bb:8e:9e:
         3a:35:e5:33:9f:7c:2f:7b:76:fd:54:f7:58:ef:33:85:af:70:
         11:95:c9:40:17:5c:f0:7d:45:f1:57:14:96:b7:bc:a1:25:9e:
         c1:98:83:39:20:45:a6:6f:af:ab:98:9d:6e:cc:40:dd:ad:16:
         21:ad:15:12:d9:85:ec:f8:fd:1a:d1:e5:e5:d4:09:22:c7:31:
         2f:68:6a:c6:dc:24:58:f0:7c:49:73:9d:fd:2a:c7:88:22:a4:
         10:c6:7b:0b:eb:43:78:70:8b:d6:72:8c:8d:03:85:49:2a:48:
         46:21:ec:2f:53:66:97:77:29:11:3b:37:45:a1:6c:52:03:27:
         48:0d:40:c1:22:c3:02:5f:2f:a7:0f:73:2c:1e:fa:6a:2b:cd:
         cf:ae:dc:33:42:39:94:f0:e6:fa:4a:87:f0:ab:72:25:c8:64:
         dd:6c:aa:c7:3a:76:6c:fe:ad:34:a8:0d:2e:bd:22:2c:60:ff:
         be:27:f4:45:da:cb:f1:5c:4a:00:6d:95:b9:5d:a8:96:33:cc:
         54:3e:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:26:13 2026 by rpki-client