Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CB3CC4C3CB511F18A4A0E08B3833773.roa
File:                     6CB3CC4C3CB511F18A4A0E08B3833773.roa (raw, json)
Hash identifier:          KboIaF1EqnqdPeDczuUQ5d1GsCIdjDv5MXmb2IGtGaM=
Subject key identifier:   16:A0:C9:E9:1D:59:20:B1:84:93:35:26:FE:67:AB:0A:8D:5B:DF:65
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CB3CC4C3CB511F18A4A0E08B3833773.roa
Signing time:             Sun 31 May 2026 17:21:11 +0000
ROA not before:           Sun 31 May 2026 17:21:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142502
IP address blocks:        27.0.253.0/24 maxlen: 24
                          43.246.104.0/24 maxlen: 24
                          45.249.124.0/22 maxlen: 22
                          45.249.124.0/23 maxlen: 24
                          45.249.236.0/22 maxlen: 24
                          45.251.244.0/22 maxlen: 24
                          45.251.252.0/22 maxlen: 24
                          103.66.116.0/22 maxlen: 24
                          103.66.136.0/24 maxlen: 24
                          103.66.144.0/24 maxlen: 24
                          103.68.51.0/24 maxlen: 24
                          137.59.128.0/20 maxlen: 21
                          137.59.132.0/22 maxlen: 24
                          137.59.136.0/21 maxlen: 24
                          2407:ca40::/32 maxlen: 32
                          2407:ca40:136::/48 maxlen: 48
                          2407:ca40:dead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59320 (0xe7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e06-1dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:81:d5:76:c8:6c:56:b7:fd:ec:65:fc:23:
                    6e:ea:a3:f5:cc:60:cb:44:57:fc:00:03:62:0f:46:
                    62:47:81:b8:7f:aa:84:02:79:4e:1a:54:f0:7b:f2:
                    fb:aa:5a:3e:0b:0b:16:27:e0:f5:8a:5f:2f:da:32:
                    da:ff:50:e1:ac:d1:cf:8e:18:e8:ca:bd:4e:ed:ed:
                    d1:2d:23:61:8a:11:70:3b:9b:1c:82:af:4b:19:65:
                    00:b3:c6:12:57:d6:f0:eb:5b:f3:c3:8c:7a:5c:e2:
                    e9:fc:01:6e:54:0e:13:ca:31:21:36:df:ad:cc:90:
                    bf:04:1f:71:51:4d:86:44:83:ca:ed:98:43:3d:56:
                    81:96:eb:e5:7d:4e:78:99:3b:2f:11:4e:f4:a3:42:
                    39:96:01:e9:33:b0:9f:6b:21:54:30:e9:68:0b:af:
                    2d:3b:ba:59:f7:3a:26:2e:85:b7:d9:65:01:26:3f:
                    1c:5c:4f:75:0b:35:67:6d:e4:ac:37:0c:72:2b:f6:
                    75:11:e9:ca:c7:e2:f8:18:cf:ef:78:7c:01:04:6e:
                    06:48:74:26:2e:3d:6b:65:da:39:0a:f5:bf:0f:00:
                    3a:91:65:01:3b:0b:25:dd:4f:9a:52:08:9e:ee:ba:
                    01:8b:d2:31:47:08:01:68:12:eb:ab:8b:24:69:3b:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:C9:E9:1D:59:20:B1:84:93:35:26:FE:67:AB:0A:8D:5B:DF:65
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CB3CC4C3CB511F18A4A0E08B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.253.0/24
                  43.246.104.0/24
                  45.249.124.0/22
                  45.249.236.0/22
                  45.251.244.0/22
                  45.251.252.0/22
                  103.66.116.0/22
                  103.66.136.0/24
                  103.66.144.0/24
                  103.68.51.0/24
                  137.59.128.0/20
                IPv6:
                  2407:ca40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:57:62:ad:be:f2:8a:62:fc:8e:6b:e3:7e:f4:06:39:1b:
         fe:3b:22:21:b0:8b:6e:40:bb:9c:e0:01:dd:e5:82:39:16:c2:
         f4:27:db:df:69:06:03:ce:e1:7c:cc:3a:c9:67:cd:80:dc:c1:
         d7:6a:d4:96:95:96:94:49:bb:e4:0f:7d:85:97:fe:1e:42:d7:
         5c:76:7a:3d:1c:2e:5b:18:42:c9:4e:42:5c:c5:30:9a:67:19:
         84:aa:07:b0:91:72:c6:94:45:53:57:7f:fe:ac:aa:3c:55:73:
         12:69:8c:fa:ab:a6:48:5f:cc:87:41:4a:54:72:6c:18:31:68:
         30:e4:57:f5:98:18:11:84:b4:ce:96:8f:58:e6:1d:6b:e7:21:
         5d:6d:7f:69:56:30:bd:02:ff:06:19:94:33:d5:84:23:01:13:
         91:31:c3:e0:39:cb:b3:11:72:a3:15:bb:fd:99:ce:b3:77:9a:
         7e:72:3c:9c:3b:21:dd:48:af:71:61:ab:e8:68:d3:86:aa:a4:
         d8:2b:6e:2b:7b:5c:9f:78:b0:0f:60:17:52:61:3e:1f:7a:8f:
         17:d2:7b:41:8f:12:b2:d0:9c:63:fe:1e:e4:33:8e:a8:ec:b0:
         41:d0:10:fb:79:78:9a:ca:af:35:dc:18:ad:42:37:c0:d4:c9:
         71:25:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:36 2026 by rpki-client