Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
File:                     6585F720AD9911EB8E8DCF82C4F9AE02.roa (raw, json)
Hash identifier:          TGDwO4PCk8T/lMkoWRGFHQwIxrIc05F458my2aX9R98=
Subject key identifier:   46:C5:15:BF:29:C7:B1:2B:B7:27:9F:E1:72:3B:A9:8B:14:01:D3:9F
Certificate issuer:       /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
Certificate serial:       06CC
Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa
Signing time:             Sun 26 Apr 2026 22:28:54 +0000
ROA not before:           Sun 26 Apr 2026 22:28:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137080
IP address blocks:        103.166.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl
                          rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526
        Validity
            Not Before: Apr 26 22:28:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ee91a6-85ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:a0:8e:fd:75:d4:97:c6:23:d3:45:17:da:
                    f9:7d:4d:e6:ac:40:6c:c1:d9:c2:16:37:bc:68:0c:
                    a5:98:ab:4f:e1:33:e4:7f:29:5c:02:2b:bc:ca:44:
                    b7:aa:c0:54:d2:cc:18:84:22:e4:9d:99:ab:c5:04:
                    b7:21:f9:02:24:86:fa:d5:d9:df:93:8e:be:64:f6:
                    0d:1b:7b:f4:53:ad:b1:b3:ee:ee:72:df:34:66:55:
                    ec:dc:91:3f:ee:a5:e6:50:fa:0e:1d:68:b9:f5:db:
                    75:78:e7:b0:b4:38:26:a7:28:bc:a0:1e:d2:69:07:
                    63:f5:37:62:41:10:6c:1b:82:35:33:ce:84:ef:39:
                    04:02:fa:86:15:01:36:5e:a3:6c:0a:83:db:ca:5b:
                    05:ef:54:8c:6d:2e:3e:c8:51:56:a3:54:4e:78:58:
                    6f:15:9f:6c:8a:fc:d2:dc:31:24:0b:97:42:b1:d0:
                    13:77:ac:63:d8:85:92:9f:d5:7a:e8:f0:f1:90:45:
                    a4:78:f8:16:b6:bf:27:da:80:0d:da:ba:c3:28:b7:
                    3c:0b:e2:de:fd:d4:ec:97:74:ab:76:ce:5a:94:a4:
                    ec:84:03:43:c7:f9:bf:4c:68:dd:41:25:9e:4d:b2:
                    2f:48:b6:ba:ce:ce:20:37:8c:1d:53:af:3a:2d:97:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C5:15:BF:29:C7:B1:2B:B7:27:9F:E1:72:3B:A9:8B:14:01:D3:9F
            X509v3 Authority Key Identifier:
                keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/6585F720AD9911EB8E8DCF82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:23:38:e3:d8:bc:28:03:c1:79:58:ff:38:fa:eb:8b:1c:
         42:64:a5:26:21:24:31:4b:d7:cf:d5:7b:4e:f4:01:79:e4:6d:
         08:65:2e:d2:2a:ba:86:21:78:13:cd:75:43:8e:81:16:17:d5:
         05:87:9d:bb:1b:7d:18:3c:f5:09:36:44:47:91:fa:43:16:cd:
         a7:38:5e:21:6a:a0:df:04:e6:38:a9:84:f3:24:28:4b:2b:2d:
         fb:09:44:af:a1:5a:8d:56:db:ed:d9:44:df:b5:5b:03:37:42:
         08:d2:c1:c2:14:79:b8:fb:ed:7a:1a:7b:28:85:e3:0f:f6:f2:
         08:10:11:71:89:74:21:76:c7:a2:b2:e4:ac:d6:3b:0b:d7:aa:
         6c:58:70:41:7f:5f:ee:a7:50:04:20:f3:ac:bc:e5:76:a9:2d:
         8b:71:a4:3d:24:53:f6:c2:42:16:92:d7:e8:60:3d:91:84:2d:
         76:f1:6e:2d:c6:35:2a:3f:90:f9:6a:58:a0:2f:33:0a:1d:d0:
         6d:54:d6:7a:e7:00:6a:93:ee:3c:12:c3:47:a5:19:7e:1b:93:
         e5:83:e8:1b:b5:08:d6:5c:2a:41:c2:59:04:fb:f4:06:b8:ab:
         4f:15:b4:58:2d:d9:22:7b:34:2c:07:a1:97:da:7f:cb:30:4b:
         b3:e0:7c:17
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzIzOUMxMTAvBgNVBAUTKEMxQzgwRTU5RkNCQjdGRDlENEVDRkFDMzU2QTk1NzRB
RDI5REE1MjYwHhcNMjYwNDI2MjIyODU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVlOTFhNi04NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCqgjv111JfGI9NFF9r5fU3mrEBswdnCFje8aAylmKtP4TPkfylcAiu8ykS3
qsBU0swYhCLknZmrxQS3IfkCJIb61dnfk46+ZPYNG3v0U62xs+7uct80ZlXs3JE/
7qXmUPoOHWi59dt1eOewtDgmpyi8oB7SaQdj9TdiQRBsG4I1M86E7zkEAvqGFQE2
XqNsCoPbylsF71SMbS4+yFFWo1ROeFhvFZ9sivzS3DEkC5dCsdATd6xj2IWSn9V6
6PDxkEWkePgWtr8n2oAN2rrDKLc8C+Le/dTsl3Srds5alKTshANDx/m/TGjdQSWe
TbIvSLa6zs4gN4wdU686LZdhEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEbFFb8p
x7Ertyef4XI7qYsUAdOfMB8GA1UdIwQYMBaAFMHIDln8u3/Z1Oz6w1apV0rSnaUm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjM5Qy9BRUYxOTRDQUEx
MjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5blU3UHJEVnFsWFN0S2Rw
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3djZ09XZnk3ZjluVTdQckRWcWxYU3RLZHBTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzIzOUMvQUVGMTk0Q0FBMTI2MTFFQkJGODNERDY3QzRGOUFFMDIvNjU4NUY3MjBB
RDk5MTFFQjhFOERDRjgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6YSMA0GCSqGSIb3DQEBCwUAA4IBAQBm4iM449i8KAPBeVj/OPrr
ixxCZKUmISQxS9fP1XtO9AF55G0IZS7SKrqGIXgTzXVDjoEWF9UFh527G30YPPUJ
NkRHkfpDFs2nOF4haqDfBOY4qYTzJChLKy37CUSvoVqNVtvt2UTftVsDN0II0sHC
FHm4++16GnsoheMP9vIIEBFxiXQhdseisuSs1jsL16psWHBBf1/up1AEIPOsvOV2
qS2LcaQ9JFP2wkIWktfoYD2RhC128W4txjUqP5D5aligLzMKHdBtVNZ65wBqk+48
EsNHpRl+G5Plg+gbtQjWXCpBwlkE+/QGuKtPFbRYLdkiezQsB6GX2n/LMEuz4HwX
-----END CERTIFICATE-----
Generated at Thu May 21 14:43:59 2026 by rpki-client