Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
File:                     8892F972445A11F18C6F017390833773.roa (raw, json)
Hash identifier:          I2eODJwPmg8GLeal9VrdP8E3pyN8VLQsH8EMmVjNl+4=
Subject key identifier:   55:B2:00:E1:91:48:C7:C2:40:0A:39:DF:7A:A2:CB:93:39:93:73:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DF8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
Signing time:             Thu 30 Apr 2026 06:05:05 +0000
ROA not before:           Thu 30 Apr 2026 06:05:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132420
IP address blocks:        103.59.180.0/23 maxlen: 24
                          103.65.20.0/23 maxlen: 24
                          103.171.44.0/24 maxlen: 24
                          103.171.45.0/24 maxlen: 24
                          103.175.22.0/24 maxlen: 24
                          103.175.163.0/24 maxlen: 24
                          103.178.248.0/24 maxlen: 24
                          103.185.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57228 (0xdf8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 30 06:05:05 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f2f111-24a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:c0:8a:a9:4e:4b:c9:a0:7f:bc:7a:40:4c:
                    82:19:55:81:ee:e0:1d:a2:91:b0:08:6b:cc:bb:b5:
                    dc:30:59:0b:e8:f7:29:36:bb:fc:af:b5:f8:3b:30:
                    4f:04:ba:06:77:cd:df:99:d1:72:39:c1:b3:2b:71:
                    25:12:0f:4a:84:e6:68:47:16:d2:9a:f7:df:2c:33:
                    f0:a1:53:83:f0:c7:7d:eb:81:19:0d:ea:d4:d4:7c:
                    e5:4c:e5:7d:21:18:ba:dd:9a:a5:aa:ce:35:96:ed:
                    63:3d:1d:9d:e9:ce:86:65:c5:82:14:c5:eb:b5:bf:
                    20:bf:d8:63:2a:7c:46:c4:c9:75:36:bf:b2:9f:fe:
                    34:4a:44:bd:c6:53:60:0e:9e:b0:a4:38:11:32:1d:
                    a4:22:91:bd:87:1a:ba:c9:b6:55:e9:ea:f1:82:b3:
                    6c:6c:39:3f:04:9c:cb:0f:21:06:7a:7d:bf:ba:71:
                    26:c2:0a:b3:fb:99:e9:d0:35:1e:f6:54:9f:83:61:
                    00:c5:8c:ba:a1:aa:71:a7:fa:e1:c8:e3:00:86:d7:
                    36:a4:e4:ef:0b:2c:06:30:4f:d4:44:f6:48:58:58:
                    ac:8c:19:56:68:ec:28:f1:f1:0d:23:0d:f2:14:eb:
                    11:57:14:f3:65:fa:b0:73:75:1f:bd:e7:cb:2a:a1:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:00:E1:91:48:C7:C2:40:0A:39:DF:7A:A2:CB:93:39:93:73:DB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.180.0/23
                  103.65.20.0/23
                  103.171.44.0/23
                  103.175.22.0/24
                  103.175.163.0/24
                  103.178.248.0/24
                  103.185.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:8d:d5:fc:62:c4:b1:ac:07:5f:cf:2c:d6:b8:d6:bd:16:
         9b:ff:32:d6:b3:03:60:23:b3:c2:90:e4:d1:e5:ec:c9:4e:90:
         7d:4c:de:67:f0:e4:60:69:ad:82:0e:54:cc:f7:5f:78:19:1d:
         e3:88:59:53:b6:60:e2:84:67:b2:fc:c3:0f:0c:d3:c3:1f:96:
         3b:6f:12:9d:b3:0b:cd:a0:08:c7:09:89:b8:c6:9a:32:74:84:
         04:75:dc:c3:9d:3f:69:87:2c:94:8c:2f:b4:f0:8a:6a:42:94:
         b8:55:63:ce:76:d4:00:a3:70:93:01:a8:a2:39:5e:f7:53:98:
         41:78:d0:52:ba:fe:e9:73:49:1c:93:ad:41:f1:a8:b4:42:46:
         2b:2a:cf:03:2f:d0:38:f1:83:20:c0:0b:d8:bf:bb:f1:af:cc:
         6d:4b:aa:26:6a:0b:c2:a9:2f:e8:c2:8f:9b:bc:6a:9e:42:b0:
         33:0c:06:0a:7c:e7:a2:cb:d7:d1:7a:3e:1b:db:d0:e4:2e:63:
         de:79:ec:ee:25:ba:8d:8c:5f:db:7e:93:2e:24:44:61:37:e5:
         5b:c2:e2:6f:5b:87:65:9b:14:24:95:de:a6:96:9a:a0:ae:89:
         fe:21:55:eb:6e:ef:a9:47:51:2e:43:18:1b:74:5f:99:b1:dc:
         77:a4:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:37 2026 by rpki-client