Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
File:                     6585F720AD9911EB8E8DCF82C4F9AE02.roa (raw, json)
Hash identifier:          ZQ0tRy6D04/v0g80XcurqFzqLFGfof04wiOAL+prD7o=
Subject key identifier:   BB:4B:FE:31:9A:0B:F3:A8:47:55:6B:B1:6B:92:73:68:D7:46:05:02
Certificate issuer:       /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
Certificate serial:       06AB
Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:46:42 +0000
ROA not before:           Tue 08 Apr 2025 23:03:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137080
IP address blocks:        103.166.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl
                          rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
        Validity
            Not Before: Apr  8 23:03:27 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fcf2-0692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:8c:89:31:c5:5a:d0:9a:f5:4a:c7:0a:86:
                    64:dc:e8:51:06:e5:c9:78:45:e6:44:8a:a1:d3:8b:
                    6a:de:0c:5b:af:31:cf:f1:11:58:37:7c:d6:fa:3b:
                    34:45:ef:1b:75:0e:ef:04:7b:9b:64:2d:58:8a:88:
                    88:fa:c7:9a:59:cb:c8:4b:16:25:91:18:a7:db:6b:
                    17:63:13:28:0d:18:c5:e9:b7:4a:9d:19:c9:d5:2d:
                    9b:2f:18:11:ae:32:16:75:a9:0c:af:17:9f:e8:68:
                    4c:3d:46:bd:d8:78:b7:6f:fe:fc:39:c4:b3:82:7b:
                    98:22:c0:4b:53:f3:82:ab:ca:5f:62:b1:65:b8:4a:
                    65:7d:a2:70:51:dd:e7:fc:7f:50:50:14:3d:a2:3a:
                    1d:d5:5c:bb:ec:ed:23:e1:ed:80:33:3f:31:0a:6e:
                    a5:54:41:e9:1e:d2:54:4f:2e:da:53:37:43:a3:d5:
                    82:08:a3:18:9e:ac:ca:2c:02:3b:67:1c:9c:dc:fa:
                    a7:3e:f1:8a:d3:ff:8c:34:89:3e:c3:16:69:73:5e:
                    29:d7:6b:bd:96:67:4e:21:2b:8f:20:87:7f:16:c0:
                    42:7a:3b:46:e9:f5:a0:e8:1c:78:80:c4:96:19:b7:
                    c5:97:a2:10:20:14:fb:6c:ab:6c:09:57:b9:14:8f:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:FE:31:9A:0B:F3:A8:47:55:6B:B1:6B:92:73:68:D7:46:05:02
            X509v3 Authority Key Identifier:
                keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:75:ba:ca:91:0e:19:11:87:0f:3a:04:01:13:cd:bd:bd:db:
         a8:7d:2b:a3:a3:66:76:f6:bd:68:0c:24:c1:dd:6d:7e:f0:a5:
         62:95:36:fc:22:ee:fe:da:84:22:ca:e7:7d:11:60:d3:bc:4f:
         6b:5b:2e:ea:87:de:76:ce:f3:b2:10:04:5c:9d:6b:af:e8:2e:
         06:42:ad:25:a9:3a:a4:b9:18:ab:c5:20:12:43:7b:d3:bd:0d:
         d2:4e:5d:b6:84:36:2a:ed:18:a0:87:83:18:8a:50:42:04:2e:
         53:23:01:54:5c:b5:4a:ed:22:1d:ee:ae:cf:a3:ca:5b:ea:45:
         86:31:d2:e5:74:a5:52:54:40:d3:da:0b:20:85:f2:14:6e:74:
         de:c6:84:1a:2c:cf:b4:7d:a4:79:4e:e4:01:2c:8f:02:71:5b:
         17:a0:7f:62:1d:ee:2d:13:77:57:dc:54:2b:3e:1e:37:33:49:
         4d:34:e9:53:5c:c2:0e:ad:4a:f1:c9:09:c3:97:09:6d:e1:4d:
         c7:31:36:29:ab:83:30:52:16:13:ef:99:cb:f2:94:a4:e0:38:
         2e:4d:4d:c4:49:3c:0a:fe:8c:56:ff:73:65:0a:b6:b9:e1:2b:
         55:89:a7:a1:7f:fe:ac:5b:1f:53:be:19:78:fe:e0:26:0c:4d:
         60:2e:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:36 2026 by rpki-client