Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6309332C79BD11ECAA753E6DC4F9AE02.roa
File:                     6309332C79BD11ECAA753E6DC4F9AE02.roa (raw, json)
Hash identifier:          GGHncLTjAGCy23NoVKngRNbWBFlt/qh5LdgxvBANpEk=
Subject key identifier:   01:DD:EF:1F:5C:3F:FF:9E:4E:BE:37:49:3C:18:7F:0D:7C:A6:32:68
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6309332C79BD11ECAA753E6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:10 +0000
ROA not before:           Thu 08 May 2025 16:22:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149255
IP address blocks:        103.179.220.0/24 maxlen: 24
                          103.179.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54982 (0xd6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:22:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1b2-858d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:6d:45:72:74:e0:e2:d6:72:04:2a:86:51:
                    aa:f9:45:6e:1f:f4:e4:c6:af:37:4c:25:ce:ea:f2:
                    bf:d4:dc:83:42:5f:f6:c9:7d:d5:b4:bc:86:05:e9:
                    36:16:d9:44:46:5a:6e:ae:86:ad:0d:78:20:44:a7:
                    9e:08:ce:97:02:9b:48:d2:02:4e:e7:ca:e8:aa:96:
                    22:f8:c7:ee:e7:7a:dd:df:a4:ec:ea:78:08:f2:14:
                    52:55:68:9d:e0:7c:93:fe:7a:8c:2d:56:25:76:d6:
                    bb:b8:90:62:82:ed:ed:f9:30:6b:76:02:38:d7:2e:
                    a4:95:eb:ea:7e:11:87:fd:fc:a1:d6:2e:e0:a8:77:
                    88:0f:d2:3b:57:a2:e9:a4:2b:17:6d:11:b8:46:e8:
                    26:bb:71:c3:30:a8:f9:52:e3:19:af:2a:67:55:61:
                    ea:21:b9:15:78:26:d3:be:13:fe:57:ed:9b:7d:da:
                    88:72:2e:30:41:42:f5:0a:df:17:0a:0c:68:b4:2d:
                    d3:32:e0:9a:37:73:ee:5c:14:94:81:35:ca:96:c9:
                    1e:90:35:47:bb:87:6e:d2:44:51:b2:af:96:44:91:
                    30:28:49:d3:42:32:78:ca:e3:a1:55:2f:f0:ce:ab:
                    6c:0f:16:4e:eb:71:f0:07:0d:55:f4:0e:85:96:e5:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:EF:1F:5C:3F:FF:9E:4E:BE:37:49:3C:18:7F:0D:7C:A6:32:68
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6309332C79BD11ECAA753E6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:10:3d:84:7f:cf:bd:e2:ff:21:87:4f:cb:3c:f4:c2:99:
         ec:39:ab:d5:97:43:6a:67:ff:08:61:3d:35:03:91:b7:41:94:
         bd:cf:d3:d1:02:7c:d5:7c:ef:8b:f4:32:7a:54:52:0c:eb:da:
         7e:f1:d0:a3:a8:3c:27:c1:cc:ec:45:c5:01:ae:01:26:e3:ff:
         d5:45:7a:18:f6:cf:16:22:5e:45:e9:5f:92:0d:4d:2c:0e:bd:
         95:4d:b3:59:b6:2d:7b:d6:d2:b3:88:f7:5b:74:1b:59:6f:86:
         23:d8:dc:f3:b3:e9:ff:45:b6:79:be:96:b9:b7:c2:5e:da:c5:
         c1:51:82:d2:c8:a2:12:95:77:01:9f:80:92:36:93:c3:e5:ad:
         99:6b:f5:f7:bb:78:cc:cc:a1:04:0b:17:af:05:51:25:d8:3a:
         90:1a:69:de:24:3b:7b:63:85:52:f2:da:e8:44:56:50:29:06:
         cb:dd:0a:fa:c1:4f:b0:98:34:9a:5d:1f:93:e4:9f:ce:d0:3b:
         54:04:0b:1c:57:c5:ba:24:7a:fd:b8:f8:89:2f:8e:c9:c3:1a:
         e6:8a:42:52:0a:22:f7:73:f3:35:76:6a:52:6f:cd:9b:d0:a4:
         7f:c0:94:10:18:0a:ff:30:72:4f:65:b5:d6:cc:7c:72:35:94:
         a4:9f:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:15 2026 by rpki-client