Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
File:                     CC23ED70990811F08BF0CB55C4F9AE02.roa (raw, json)
Hash identifier:          WN9Maioe7netKPv1DReweGvC2oabZsx6w065iS44WrA=
Subject key identifier:   DA:E7:4D:34:A1:38:B4:AB:E2:D3:A9:95:71:4A:9B:BB:0E:54:0A:83
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       364E
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
Signing time:             Tue 09 Jun 2026 16:40:20 +0000
ROA not before:           Tue 09 Jun 2026 16:40:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45845
IP address blocks:        103.250.135.0/24 maxlen: 24
                          202.51.66.0/24 maxlen: 24
                          202.51.70.0/24 maxlen: 24
                          202.51.72.0/24 maxlen: 24
                          202.51.73.0/24 maxlen: 24
                          202.51.77.0/24 maxlen: 24
                          202.51.79.0/24 maxlen: 24
                          202.51.94.0/24 maxlen: 24
                          2405:6600::/32 maxlen: 32
                          2405:6600:201::/48 maxlen: 48
                          2405:6600:600::/48 maxlen: 48
                          2405:6600:701::/48 maxlen: 48
                          2405:6600:702::/48 maxlen: 48
                          2405:6600:703::/48 maxlen: 48
                          2405:6600:709::/48 maxlen: 48
                          2405:6600:c00::/48 maxlen: 48
                          2405:6600:c43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13902 (0x364e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Jun  9 16:40:20 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a2841f4-98a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:d0:7d:f5:d7:e7:d0:8d:54:db:d0:bd:54:
                    3a:71:4f:85:e6:c4:ed:49:ac:fa:96:81:ca:67:26:
                    5d:0f:a2:d0:04:94:44:32:80:19:28:fa:49:e7:9d:
                    37:f6:6a:ae:d7:8e:95:c6:df:26:9c:09:4b:65:62:
                    5c:0e:e2:ba:6d:f0:7f:63:db:76:a1:86:ee:b0:a3:
                    e7:2b:49:25:c5:10:ef:ba:27:fd:d5:29:e4:95:fc:
                    de:a9:2a:4f:57:f1:07:72:3f:c6:e4:5f:81:70:e0:
                    31:c7:00:40:de:01:3a:94:2e:76:02:83:25:bb:73:
                    7a:7b:40:40:d9:6e:03:a8:1c:04:44:d4:00:4e:4a:
                    95:02:2d:19:bc:9c:b2:93:05:28:e7:58:ff:5a:93:
                    fa:3d:18:00:75:3d:02:73:88:cc:9f:cd:6b:cd:bf:
                    87:4b:95:a0:3b:51:d4:df:6e:28:ec:18:02:53:b8:
                    d7:5f:0d:8f:c9:5c:37:5e:08:2a:a7:1e:cc:df:de:
                    86:57:72:53:4f:55:6c:10:3a:f9:7d:39:b9:0c:e2:
                    61:d4:ad:e9:30:da:d0:1a:e7:4a:50:f6:fc:2c:60:
                    24:68:1b:f7:cb:54:fd:03:05:a3:fe:28:33:6c:61:
                    fb:9e:d2:6d:b9:15:40:a9:dc:05:0f:6e:bf:4d:fa:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:4D:34:A1:38:B4:AB:E2:D3:A9:95:71:4A:9B:BB:0E:54:0A:83
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.135.0/24
                  202.51.66.0/24
                  202.51.70.0/24
                  202.51.72.0/23
                  202.51.77.0/24
                  202.51.79.0/24
                  202.51.94.0/24
                IPv6:
                  2405:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:31:a2:5f:b1:a1:6a:37:c3:55:15:3e:8a:13:8b:9f:54:b9:
         d0:6b:a6:75:3b:12:53:55:b5:23:fc:21:76:97:36:cb:83:01:
         1e:4d:8e:ae:a0:df:52:a8:1a:bf:2a:8f:6c:72:6f:de:b4:a3:
         af:e6:0d:94:06:01:2a:98:1c:3f:15:bd:2a:f8:33:2e:87:5e:
         cc:0e:c4:ae:59:0f:44:21:83:f0:a1:f9:f0:1e:d3:70:c9:3f:
         40:fa:fe:f4:0a:ca:c3:2a:0d:85:e4:ef:a3:c6:84:d8:f9:f0:
         17:53:b1:66:60:9d:73:a1:58:62:72:3d:50:6d:2f:4b:e4:f1:
         f2:78:12:b4:af:2f:01:34:fe:9d:93:00:10:44:b1:a8:16:15:
         43:19:a9:9c:67:bc:b4:4b:3b:bc:9a:b9:4b:e4:87:2b:64:13:
         63:80:84:42:6a:43:6e:37:bd:a9:9d:98:0f:23:57:c9:dc:e6:
         22:59:56:9f:4c:ce:84:cc:07:ef:e6:c1:2c:2f:71:05:1c:a0:
         0c:7d:63:77:c0:95:eb:d7:a0:a5:f0:81:28:61:77:cd:26:45:
         ae:fe:01:9f:ad:b4:d1:92:36:43:d0:c0:34:24:7f:b9:5f:47:
         57:5f:5e:e1:0a:6f:f7:bb:60:6c:1f:ab:4a:27:00:85:b0:53:
         19:4e:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:13 2026 by rpki-client