Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
File:                     8F0A568216A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier:          ICK3NKayjlVlRgTm/6KSTdOxybG9EontTf1e6pl2fIU=
Subject key identifier:   F3:B0:E4:C6:37:72:DA:DC:D5:CD:15:66:6A:16:39:E4:CA:BE:07:1C
Certificate issuer:       /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial:       032A
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
Signing time:             Thu 11 Jun 2026 03:30:37 +0000
ROA not before:           Thu 11 Jun 2026 03:30:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56294
IP address blocks:        103.166.16.0/24 maxlen: 24
                          103.166.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
                          rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
        Validity
            Not Before: Jun 11 03:30:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a2bdd-98aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:2f:33:ed:d1:c6:09:c5:ff:3f:f4:0e:d6:
                    59:aa:eb:14:14:3f:97:55:38:e7:44:72:ca:f8:4a:
                    89:54:d4:e2:3d:c6:4a:71:b3:32:ec:ab:c3:6e:9b:
                    bd:91:63:c8:83:3e:45:83:62:b5:00:49:5c:f5:f5:
                    96:b4:64:d5:e9:fe:14:7e:c1:3b:6e:b8:ed:e3:30:
                    3b:98:a4:1d:a2:0d:f1:2b:b7:01:89:d7:e4:4e:ea:
                    62:e2:57:44:01:1e:b7:08:03:dc:6d:94:50:aa:a6:
                    4f:df:0c:37:63:cf:c5:24:8c:50:59:59:7e:3c:14:
                    9b:67:f3:26:cc:f6:63:e4:b6:9a:24:5d:5b:3d:e4:
                    00:70:4b:aa:c7:67:2d:68:7a:a8:04:e8:93:22:91:
                    18:f2:9b:27:bb:c6:8d:bf:a2:22:2f:57:24:db:fe:
                    fa:95:1d:b9:67:a6:26:44:77:a1:60:29:5a:01:5e:
                    bf:d7:00:51:4c:a7:3a:26:fe:f3:bb:ad:15:6e:6a:
                    84:c9:7f:0d:2c:7b:a4:02:2b:55:47:c6:ff:2b:e7:
                    82:d5:0a:5e:1b:5c:b4:c0:31:16:0a:02:6d:73:f4:
                    8d:b1:e0:c4:96:dd:3b:c9:42:1b:c4:4d:ee:67:b7:
                    37:05:12:a3:44:a4:5b:9f:de:2a:6d:25:78:1f:0f:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B0:E4:C6:37:72:DA:DC:D5:CD:15:66:6A:16:39:E4:CA:BE:07:1C
            X509v3 Authority Key Identifier:
                keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:25:34:fd:78:38:4f:95:ba:74:51:f7:3c:87:5a:4d:27:c0:
         28:19:98:55:1e:6b:21:28:3c:2e:db:87:83:87:51:89:17:62:
         bf:9c:ef:96:7b:b8:df:49:14:93:ef:9d:ab:aa:fa:01:76:e5:
         14:0b:b4:23:ac:32:60:79:b3:c2:37:c8:4c:a8:19:49:d6:66:
         ac:ba:18:7d:d8:9e:f3:d7:8f:c5:13:16:b4:f7:73:df:2f:b1:
         93:2e:c6:5e:b1:56:0c:c1:00:48:e4:b0:eb:00:9b:a8:b5:ec:
         44:b8:1f:52:6f:97:22:8e:19:c4:7a:35:c5:4c:14:67:62:8d:
         87:3d:32:9b:c5:4e:af:67:78:2d:9d:6e:76:6d:69:40:5c:6e:
         3e:d4:ee:a0:2b:d2:e5:f3:a6:4d:11:74:02:88:7c:fe:e6:ec:
         e1:7b:4e:23:d6:8a:1c:3a:f5:5b:07:be:1a:6e:1b:63:41:f1:
         03:39:fb:74:fd:a8:55:e2:c9:4c:6e:01:07:6c:16:b8:37:d8:
         e8:2e:b1:c7:b8:f0:75:77:41:dc:6b:a2:db:a5:f7:81:18:49:
         11:57:1f:10:f0:e8:1f:b3:8e:c7:3b:c9:57:eb:1d:dc:74:30:
         fa:e8:3d:e1:82:c0:f9:10:2f:3c:56:3c:9f:52:f0:78:47:f3:
         94:ad:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:33 2026 by rpki-client