Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa
File:                     6EAC2BF0B96211ECA4322D20C4F9AE02.roa (raw, json)
Hash identifier:          Bhac/YJmrUFi2LjyQhqd6V3iAXUUYYO2nst5YAQN8ts=
Subject key identifier:   FE:5E:43:44:79:23:9A:62:85:F0:A8:81:0A:B5:E4:EA:64:C9:19:0A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6DF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:45 +0000
ROA not before:           Thu 08 May 2025 16:22:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149542
IP address blocks:        103.184.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55007 (0xd6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:22:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1d5-744c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:f9:19:c0:e1:02:b7:8b:38:d9:77:91:8f:
                    12:98:26:df:5b:73:02:6e:f3:7b:4b:9e:00:53:ef:
                    13:a9:43:6b:97:3f:92:e3:c5:81:21:92:d6:d0:65:
                    d8:df:42:d1:0a:4b:0e:98:b7:d9:12:bd:20:90:b3:
                    16:ab:e9:d8:be:e1:bd:69:a7:61:16:76:7b:70:81:
                    bd:3b:55:00:72:b2:c4:75:3c:50:c5:3c:a2:09:db:
                    b9:93:c3:1c:6f:62:e6:0a:89:0f:03:d2:f3:e7:fd:
                    72:f0:fc:5d:25:25:42:0b:c8:c1:cb:7e:87:b6:99:
                    a7:ae:79:8e:43:ba:17:f9:41:3e:19:c9:ad:cc:15:
                    53:20:2d:c7:06:c9:27:d5:e1:46:24:4f:d3:4d:41:
                    ec:6d:e6:f2:9c:02:55:8a:06:44:be:66:30:ea:f9:
                    c6:ba:90:4a:35:3e:66:a0:04:96:1b:8d:ed:d2:a8:
                    5f:5b:32:1a:42:34:5f:8b:60:e3:0e:21:4b:f7:aa:
                    d0:81:85:8c:68:1f:20:32:b9:5b:f6:78:fb:f5:85:
                    eb:e2:6a:7f:e6:e3:0c:12:95:31:d8:3f:85:22:98:
                    35:dc:64:87:7d:4b:53:d7:96:f5:6c:31:33:de:a6:
                    92:d9:f0:49:f4:f2:a0:b7:b1:f2:c5:d2:51:77:bc:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:43:44:79:23:9A:62:85:F0:A8:81:0A:B5:E4:EA:64:C9:19:0A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:76:15:2e:07:0d:68:91:83:f9:92:86:88:73:a3:40:77:
         f8:7e:ac:42:e6:7a:b2:53:ba:28:2f:0e:55:b1:30:c6:62:68:
         37:22:9a:28:5d:d6:a6:2f:52:7a:b9:0d:4d:01:48:48:17:36:
         3e:7f:0d:2b:4f:4c:79:25:7e:78:ee:f1:94:2c:db:fe:d4:97:
         44:7a:db:4a:e7:38:ce:3a:66:f7:f3:dd:f7:b6:e5:d3:83:55:
         9a:12:3e:22:62:a0:51:bb:c1:77:3a:3f:9e:0b:61:20:26:a8:
         6e:3f:d6:e1:23:97:63:b8:af:dc:d3:f6:f9:49:ae:bd:17:5d:
         7f:05:a9:c3:a8:52:53:47:81:0b:5f:dd:72:77:c3:8e:30:47:
         8e:d6:e5:66:a1:24:71:84:b4:2a:9a:25:c0:b5:cf:b4:9b:ff:
         ab:0a:e8:fb:6d:d4:da:e0:fb:9f:07:d9:4d:35:de:cd:d0:c8:
         32:07:a3:d5:90:0f:d9:61:06:d3:33:12:4c:64:ee:5e:69:96:
         57:7b:c2:e7:10:ed:1a:81:4f:49:95:f7:aa:a5:c4:31:fc:b5:
         85:a8:19:af:2f:bf:ba:8f:b2:a4:83:e4:cc:ff:cd:cb:7f:88:
         1d:37:f3:79:d0:24:e2:35:6e:52:09:40:74:bd:ac:4b:dc:12:
         b3:32:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:38 2026 by rpki-client