Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa
File:                     2071F5466E5111EE86A34C5AC4F9AE02.roa (raw, json)
Hash identifier:          qcz+7d8TUkqzDbaUGjiltdxapy4HXXQSZTrqVGwrWYQ=
Subject key identifier:   DB:D5:EC:CF:5E:8C:41:DF:5E:70:2C:FD:7C:C7:2A:DB:2E:26:0A:34
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D178
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:15:32 +0000
ROA not before:           Thu 08 May 2025 15:55:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     131302
IP address blocks:        103.74.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53624 (0xd178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:55:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4ba84-d98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:a9:59:d6:17:67:f5:59:d8:d6:d2:da:5a:
                    d6:36:47:53:e2:39:41:7b:19:84:99:c1:59:ef:20:
                    fb:47:31:2e:4c:87:0f:2f:98:a3:84:4f:96:33:02:
                    6b:78:c2:81:da:16:ff:8d:2e:35:d4:1d:2f:bb:10:
                    aa:d9:af:1d:bc:fa:7c:22:aa:00:f4:dd:ba:54:23:
                    54:95:17:d4:a6:53:f3:d9:25:32:23:5c:00:b5:88:
                    84:ab:18:22:20:66:90:dd:69:4f:15:d4:77:dd:91:
                    44:bf:5e:bf:2c:49:65:f5:9d:4a:35:63:fb:5d:7d:
                    e8:e8:94:e2:f4:af:10:48:23:91:65:9d:de:c7:a7:
                    83:e1:10:44:9e:65:ab:15:a0:11:0a:95:53:29:0b:
                    92:15:7f:34:bf:1e:fc:86:40:35:74:d9:c0:66:5d:
                    13:3e:8a:e7:89:2b:96:81:ac:65:1b:5e:24:72:6a:
                    d1:98:49:57:90:80:72:6d:64:57:47:6b:10:5b:6e:
                    36:97:6b:4a:94:79:41:09:26:e6:08:e1:d0:be:96:
                    1f:01:bf:ed:83:e8:b9:78:73:e6:96:8e:80:ff:e3:
                    22:b9:f6:08:e3:d1:77:bf:89:5f:72:b7:1a:97:f2:
                    77:46:9e:71:9f:f9:ed:2d:bd:ff:08:3d:b5:23:91:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:EC:CF:5E:8C:41:DF:5E:70:2C:FD:7C:C7:2A:DB:2E:26:0A:34
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:56:22:13:2f:78:9e:32:8e:a0:55:7d:27:7c:2c:f1:2b:b8:
         c3:f7:ef:55:2e:29:a6:b3:6c:35:a9:b4:bc:d6:b8:fd:60:fe:
         5f:f2:06:1d:b7:f8:51:6d:73:50:17:14:2b:86:7a:f5:57:c1:
         78:15:94:19:e4:59:37:fa:3c:c9:fa:c2:4f:29:f4:08:9a:fc:
         96:39:ee:7e:24:7e:29:37:82:3a:29:cd:5a:33:f7:6e:6a:ac:
         28:e6:01:ee:1e:96:fc:fd:25:97:34:e8:e8:fe:f1:40:4d:cf:
         1b:cf:72:01:8c:7e:ac:a6:f3:5f:95:4b:c3:c4:58:9d:1c:90:
         25:bb:41:d6:d6:57:eb:37:db:7b:5d:1c:c7:64:8a:bd:bb:85:
         5f:d7:4d:25:82:9a:90:18:60:37:e3:ad:11:21:e4:6e:25:95:
         62:6c:64:6c:e7:5b:60:81:9f:95:e7:c7:eb:3d:42:f3:60:d8:
         40:f0:fb:50:4c:6e:53:56:26:59:ac:5b:58:c4:56:c2:cf:b9:
         6f:a4:d0:83:08:f6:87:b1:bf:7b:fc:42:61:f9:ef:f8:cf:64:
         cc:fe:7f:ca:d1:fa:ae:7d:9d:c7:49:82:03:f1:a8:68:01:41:
         87:92:b8:d4:ab:e2:da:1a:d6:30:39:61:f4:9e:b0:4b:16:67:
         6e:bd:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:30 2026 by rpki-client