Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa
File:                     FFF46604DBBA11EA9B1B9F48C4F9AE02.roa (raw, json)
Hash identifier:          C96v+6kouuLI0LxMOpZFSXHpnESIJZ7xssCX//36kqI=
Subject key identifier:   1C:7A:F1:A2:55:EB:14:E2:3C:CB:2D:8B:25:4D:2C:D7:E8:8B:C1:30
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FC89
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 06:07:12 +0000
ROA not before:           Wed 16 Sep 2026 06:07:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58971
IP address blocks:        103.83.244.0/22 maxlen: 24
                          103.134.134.0/23 maxlen: 24
                          103.158.218.0/23 maxlen: 24
                          2405:e5c0::/32 maxlen: 32
                          2405:e5c0::/34 maxlen: 34
                          2405:e5c0:4000::/34 maxlen: 34
                          2405:e5c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 11:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64649 (0xfc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 16 06:07:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aaa320f-3a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:be:26:00:aa:5e:ca:0a:17:f7:c6:ad:20:
                    78:0e:c2:99:87:c9:af:d3:58:e4:ac:55:cd:06:d0:
                    76:0b:85:80:2d:ce:17:bb:53:d2:a2:52:d7:b3:ff:
                    c9:54:9d:b3:44:3c:e2:ab:b1:1a:99:1d:af:bb:7d:
                    e6:64:0c:6f:4b:b9:43:5c:58:94:94:8b:5e:65:2f:
                    10:1b:44:da:88:00:12:50:86:0b:f3:02:60:a4:4f:
                    c2:1d:00:c2:30:76:20:fc:3f:7b:2f:95:70:33:f0:
                    fa:0d:1f:ad:8c:7d:27:b1:e7:60:19:ad:a7:37:58:
                    21:1a:5d:20:08:54:ea:a0:66:9d:c0:09:fb:7a:9d:
                    05:a8:3d:79:2a:b3:ce:1d:c0:fd:df:45:a1:63:1c:
                    98:af:ae:f3:2f:f6:eb:56:b7:d5:5c:23:dc:56:2d:
                    8a:d0:db:d9:31:32:5e:90:0a:0e:89:19:10:9e:61:
                    c0:64:c8:ad:c3:ff:a6:60:d0:55:30:16:b6:8f:63:
                    00:e0:0b:ad:f0:58:6e:e7:76:c6:4a:c5:fc:47:a0:
                    0e:56:18:1a:64:40:df:ba:9c:6f:20:86:46:70:9f:
                    76:f3:2a:b4:f9:37:2b:1b:21:c0:aa:4c:53:df:f3:
                    76:5f:d8:35:39:c4:f4:79:1f:f6:07:fe:65:c4:7c:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7A:F1:A2:55:EB:14:E2:3C:CB:2D:8B:25:4D:2C:D7:E8:8B:C1:30
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFF46604DBBA11EA9B1B9F48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.244.0/22
                  103.134.134.0/23
                  103.158.218.0/23
                IPv6:
                  2405:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:9a:e1:83:6d:02:8c:e9:46:3c:c6:6e:97:cc:f5:59:87:fe:
         68:1d:b7:bd:4a:3b:ef:ef:bc:41:ae:93:ce:e8:33:d3:a3:ba:
         87:a2:01:a8:2b:57:54:32:71:03:b4:ad:57:c0:16:94:2a:86:
         04:96:5a:b7:d2:51:6d:95:1c:ec:79:e4:d5:6b:b2:ca:cc:24:
         8d:e5:ac:78:72:84:bb:52:a7:09:4d:b2:19:0a:96:55:18:c1:
         27:bd:29:16:60:5c:45:f6:5a:50:61:20:68:d8:1a:4a:8e:24:
         75:f2:33:2e:90:13:e3:1a:a9:1d:91:72:ec:ca:b2:be:ac:ad:
         85:26:60:51:92:7f:85:c4:89:b4:53:91:35:ed:d0:68:22:40:
         3d:15:cb:a6:66:d1:ea:37:9c:e6:b6:3d:b0:f3:27:a1:41:24:
         1f:06:a7:f9:c0:45:00:b6:8d:cb:c8:e7:68:0b:2b:57:e9:a9:
         42:fa:c2:d5:d7:64:4e:d0:b9:89:1e:4d:21:50:13:ec:62:1d:
         4e:c6:f7:a1:d9:57:0a:b0:c6:71:08:33:5f:88:fb:d0:20:9a:
         46:82:3a:03:27:39:9c:3c:2a:27:2b:89:30:b8:eb:59:29:4a:
         94:86:c1:99:19:2b:ac:66:8e:44:4d:6a:b9:a6:75:8d:af:a2:
         12:a9:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:14 2026 by rpki-client