Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A1EEA5234D511F1B4418DDACB833773.roa
File:                     7A1EEA5234D511F1B4418DDACB833773.roa (raw, json)
Hash identifier:          ToHys3fgFDUPQornujaLieKk8VXXwCkuCr4YPWnb/Rc=
Subject key identifier:   58:43:C0:AC:30:AD:7B:8F:7B:6C:40:34:B7:53:30:97:C5:79:74:C6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DE31
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A1EEA5234D511F1B4418DDACB833773.roa
Signing time:             Mon 13 Apr 2026 09:32:50 +0000
ROA not before:           Mon 13 Apr 2026 09:32:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141784
IP address blocks:        103.164.94.0/24 maxlen: 24
                          103.164.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 11:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56881 (0xde31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 13 09:32:50 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69dcb842-6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:2f:02:c3:2f:7e:4b:56:25:d0:38:3e:c9:
                    9c:95:49:41:d0:ee:d4:42:6d:11:1b:90:67:30:5f:
                    e5:22:5d:21:07:10:33:6c:38:5a:3a:84:78:b3:0e:
                    2c:f0:f1:3e:b4:09:cf:a6:5c:cf:4f:34:6d:67:ad:
                    72:63:c4:a5:9e:b0:fb:da:71:4b:b2:69:e4:81:b5:
                    e4:27:49:27:2c:24:ab:8c:58:ff:55:32:8b:37:0c:
                    a3:3f:e2:5e:3d:28:12:af:cc:ff:29:4e:19:c5:0a:
                    c3:12:01:18:10:b0:8b:97:13:c5:63:97:a3:0c:49:
                    65:7a:c5:14:c6:62:7d:66:b0:b3:e5:be:34:f4:e0:
                    65:55:50:35:2b:2c:dd:a4:3f:9e:e8:ed:73:ad:b8:
                    42:32:c3:d4:23:d0:c5:0c:b8:cb:a8:59:35:d2:56:
                    78:3b:44:2b:24:f4:a8:b8:f3:a7:8c:5a:62:9c:e9:
                    2f:dd:15:2e:2e:54:d3:39:8f:b6:fa:20:32:d4:3e:
                    51:5d:eb:ac:87:80:2b:9a:91:e6:41:3c:74:24:8a:
                    7c:4b:20:a0:d4:e2:d8:1d:14:75:26:89:03:3e:f3:
                    ec:19:fb:56:ab:c6:91:ee:e2:fd:a9:12:df:ed:4a:
                    9f:e8:1f:58:0c:00:4a:fc:ee:d8:b0:22:03:90:2c:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:C0:AC:30:AD:7B:8F:7B:6C:40:34:B7:53:30:97:C5:79:74:C6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A1EEA5234D511F1B4418DDACB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:06:76:47:fd:c5:52:68:0c:35:54:ac:6c:a2:44:c3:bd:6e:
         94:ea:48:8a:a1:d3:ae:32:ce:14:d2:c4:6b:fc:e0:ef:0e:d2:
         de:8e:72:30:58:87:11:fb:0c:a9:0c:f6:36:b3:10:2c:11:0e:
         6c:29:f7:43:c0:a4:b8:d9:6c:19:2e:d0:d0:98:8a:4e:e8:fe:
         2e:72:9d:95:51:c0:a3:36:36:0a:01:a0:b0:be:c9:9c:31:32:
         93:d6:7f:ac:8a:e8:48:fe:14:5b:1f:f2:12:14:3b:ed:a1:9c:
         90:78:38:99:6c:62:e7:32:6b:bb:66:5c:f3:71:de:b6:91:90:
         04:58:e3:ae:7e:5b:95:b9:40:5d:b6:f8:e2:18:b3:dd:7d:4f:
         63:bd:14:17:a4:be:ed:d9:92:85:05:34:1e:54:17:6b:6c:bd:
         b5:b9:dd:24:df:01:13:1e:fc:4d:f1:33:c7:5a:68:c5:96:a5:
         28:c3:b6:43:99:70:19:1d:6c:fe:c4:39:21:be:6c:e7:62:ea:
         12:97:44:25:72:0b:03:13:76:16:5b:a3:bf:66:f5:ea:bf:4c:
         43:41:e6:66:94:c7:bc:79:55:3b:79:dd:4c:68:eb:db:67:72:
         85:22:45:9c:4f:39:74:10:8d:97:fa:e9:c8:9a:6b:56:18:a5:
         fa:78:ea:ea
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAN4xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDQxMzA5MzI1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlkY2I4NDItNjM4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKV3LwLDL35LViXQOD7JnJVJQdDu1EJtERuQZzBf5SJdIQcQM2w4WjqEeLMO
LPDxPrQJz6Zcz080bWetcmPEpZ6w+9pxS7Jp5IG15CdJJywkq4xY/1UyizcMoz/i
Xj0oEq/M/ylOGcUKwxIBGBCwi5cTxWOXowxJZXrFFMZifWaws+W+NPTgZVVQNSss
3aQ/nujtc624QjLD1CPQxQy4y6hZNdJWeDtEKyT0qLjzp4xaYpzpL90VLi5U0zmP
tvogMtQ+UV3rrIeAK5qR5kE8dCSKfEsgoNTi2B0UdSaJAz7z7Bn7VqvGke7i/akS
3+1Kn+gfWAwASvzu2LAiA5AsiNcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRYQ8Cs
MK17j3tsQDS3UzCXxXl0xjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdBMUVFQTUy
MzRENTExRjFCNDQxOEREQUNCODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWekXjANBgkqhkiG9w0BAQsFAAOCAQEAlwZ2R/3FUmgMNVSsbKJE
w71ulOpIiqHTrjLOFNLEa/zg7w7S3o5yMFiHEfsMqQz2NrMQLBEObCn3Q8CkuNls
GS7Q0JiKTuj+LnKdlVHAozY2CgGgsL7JnDEyk9Z/rIroSP4UWx/yEhQ77aGckHg4
mWxi5zJru2Zc83HetpGQBFjjrn5blblAXbb44hiz3X1PY70UF6S+7dmShQU0HlQX
a2y9tbndJN8BEx78TfEzx1poxZalKMO2Q5lwGR1s/sQ5Ib5s52LqEpdEJXILAxN2
Flujv2b16r9MQ0HmZpTHvHlVO3ndTGjr22dyhSJFnE85dBCNl/rpyJprVhil+njq
6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:45 2026 by rpki-client