Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C66EBA70779911ECB415993EC4F9AE02.roa
File:                     C66EBA70779911ECB415993EC4F9AE02.roa (raw, json)
Hash identifier:          5kubFlE/SzJ8OCXfM7M/4xyLrz29dmvupHUydAccPt8=
Subject key identifier:   AE:7E:4A:94:34:81:D4:22:88:DF:A2:A1:A0:4D:71:79:0A:B1:5D:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E899
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C66EBA70779911ECB415993EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:28:41 +0000
ROA not before:           Sun 31 May 2026 17:28:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149251
IP address blocks:        103.179.106.0/23 maxlen: 24
                          2001:df1:38c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59545 (0xe899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:28:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6fc9-905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:05:ac:42:e6:1d:fc:b9:38:af:2b:2a:29:
                    22:50:15:93:d2:38:9e:69:ad:37:d0:4c:8f:02:aa:
                    dc:f4:67:91:60:45:5f:09:8e:84:a7:15:90:33:43:
                    95:3b:c0:7f:f4:3e:6f:6b:18:6b:7b:ca:f5:3a:9c:
                    27:81:3e:a7:71:4f:37:a2:86:9e:c2:1c:fc:1c:6a:
                    05:39:4b:98:fd:e5:01:1e:8a:8d:55:01:9f:0d:a2:
                    82:0a:de:43:26:cb:57:6b:f9:84:fb:2f:dd:a6:b2:
                    09:75:6a:f5:16:68:66:71:5f:3a:69:50:2a:80:22:
                    26:f7:b3:8e:95:74:8b:c9:24:12:8a:00:2b:f8:61:
                    50:8e:1a:2c:34:8c:37:e6:cc:2c:3f:64:2d:f4:9f:
                    99:0a:96:c4:6d:69:f8:da:a3:94:9a:e6:a0:e7:38:
                    c1:00:ae:34:99:fe:44:73:4d:f2:d0:d3:ba:22:02:
                    52:86:08:16:9d:d1:2e:b9:53:cb:63:b1:23:70:1e:
                    5a:9c:b5:5d:be:c4:56:24:ac:f2:7d:c8:3c:0f:52:
                    3d:0b:f5:d0:c9:32:11:ae:6f:19:31:b4:11:b5:62:
                    4a:53:d2:8b:6d:fc:8a:3b:f8:5a:48:64:25:47:14:
                    3e:f9:8f:da:2b:e3:bb:a2:0c:50:de:c7:2d:73:3b:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:4A:94:34:81:D4:22:88:DF:A2:A1:A0:4D:71:79:0A:B1:5D:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C66EBA70779911ECB415993EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.106.0/23
                IPv6:
                  2001:df1:38c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:d0:3f:e5:9b:77:c4:54:fd:a1:13:42:b6:d2:5f:aa:16:36:
         a6:aa:bf:89:36:f2:80:47:9f:b0:f8:29:f4:1b:15:3e:d6:49:
         ee:ca:ed:c9:af:f1:6a:14:91:f8:dd:e6:6d:68:2e:0a:9b:4a:
         fc:91:dd:ce:45:67:22:5a:32:3b:69:71:89:08:6b:bb:80:81:
         6d:cf:85:70:ac:e5:ee:f8:ba:8a:5b:6f:56:36:1c:82:12:50:
         d9:9b:b0:81:c8:dc:49:94:91:8e:6b:bb:65:c4:38:48:a1:25:
         82:2a:ce:ae:08:e7:ea:53:23:ad:7b:74:ce:4c:0a:b8:17:22:
         57:a0:18:be:19:0b:be:11:36:4a:01:01:b7:15:04:0d:d7:4f:
         a7:e4:99:f5:bf:eb:84:47:17:89:89:ff:4d:fb:c5:4a:a4:67:
         ec:9c:3e:ab:aa:96:0e:26:a3:cf:81:c1:92:6b:f4:e5:4b:f4:
         9e:08:1d:e8:40:7f:85:1a:79:7e:ac:5f:11:2b:aa:84:94:e1:
         1e:e9:da:8d:ed:8e:4c:4a:4a:78:f3:3e:df:a9:be:f4:55:43:
         70:81:5d:c2:92:06:d9:e6:fb:d4:50:84:6e:e4:2e:27:04:d3:
         be:c3:d9:75:ff:04:86:bd:3e:e0:e5:ac:b8:0e:12:38:fa:05:
         66:72:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:47 2026 by rpki-client