Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/E50353FEDFED11EBA155C712C4F9AE02.roa
File:                     E50353FEDFED11EBA155C712C4F9AE02.roa (raw, json)
Hash identifier:          DljMvLKa4sQ9wA9+ruYYv4Wx13hc9+MtmACdvX5LCjs=
Subject key identifier:   CB:79:6A:6F:D3:9F:65:CB:C9:22:5E:B9:57:87:AC:74:E7:49:36:A7
Certificate issuer:       /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial:       063C
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/E50353FEDFED11EBA155C712C4F9AE02.roa
Signing time:             Thu 28 May 2026 23:27:11 +0000
ROA not before:           Thu 28 May 2026 23:27:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140600
IP address blocks:        103.166.230.0/23 maxlen: 23
                          103.166.230.0/24 maxlen: 24
                          103.166.231.0/24 maxlen: 24
                          2001:df6:9d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
                          rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
        Validity
            Not Before: May 28 23:27:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18cf4f-9752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:f1:00:95:d2:b5:55:63:51:30:6d:0a:18:
                    82:85:e6:ad:80:66:b5:5a:fc:7a:de:04:09:d0:0a:
                    1b:0b:27:35:70:a6:21:bc:bb:29:6c:59:de:94:e4:
                    6a:4c:ef:93:bd:43:f2:69:53:de:29:2d:20:90:a0:
                    20:68:a6:3b:0a:60:db:28:7f:17:ea:8e:d8:c5:72:
                    eb:b7:fd:5a:e0:98:4a:3f:4e:76:28:23:2e:54:f1:
                    24:92:71:0d:cc:46:fc:51:14:03:77:15:23:75:6c:
                    44:2d:a0:27:e8:f4:42:b4:35:97:ae:8a:5c:c8:5c:
                    7d:f2:59:9d:78:d3:df:5f:d7:ac:43:30:7e:74:06:
                    0e:a9:cd:e4:44:b6:3b:2e:2b:14:9d:86:2c:cb:ce:
                    22:9a:3c:99:db:ae:e9:fb:54:ca:06:24:b5:57:38:
                    ee:35:40:d7:f4:26:72:ff:6c:95:da:19:6f:ad:bf:
                    f5:fb:73:a0:7e:80:71:ba:6c:78:f8:7a:00:12:6e:
                    c2:07:56:81:6b:e9:c7:07:0b:61:ad:94:ab:99:a1:
                    49:05:4f:2f:16:14:3b:28:7b:6d:d1:f5:cb:2d:4a:
                    31:b0:d6:1e:d6:51:88:44:31:63:ea:d1:bc:4c:37:
                    f1:4d:77:e2:6d:22:be:65:f3:c8:9f:e0:82:8b:78:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:6A:6F:D3:9F:65:CB:C9:22:5E:B9:57:87:AC:74:E7:49:36:A7
            X509v3 Authority Key Identifier:
                keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/E50353FEDFED11EBA155C712C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.230.0/23
                IPv6:
                  2001:df6:9d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:47:77:b7:dc:03:26:ab:9d:c9:fb:48:70:f8:27:f4:5d:
         5f:64:cc:1f:4b:1a:86:68:fa:66:11:53:f3:38:cb:53:49:32:
         0f:e2:e1:68:c7:c8:eb:9e:f6:7b:45:e0:4c:e9:95:f0:15:5b:
         0c:d1:c1:d8:d3:3a:e5:91:f5:da:d7:fc:9e:b5:d7:72:0d:1e:
         34:2e:a3:29:5c:ed:89:4c:ab:01:fc:c2:1e:db:dc:3c:86:25:
         23:72:a1:26:96:8c:e5:8c:89:3c:5c:a3:94:3e:27:a9:f0:f3:
         d1:0d:33:f8:cd:91:e2:df:b8:07:67:bc:c3:6e:2b:b4:83:9b:
         65:44:a6:89:41:d8:99:cf:1d:86:71:75:87:3f:f6:c3:be:ad:
         64:fb:ab:66:b8:6a:f0:60:b0:8f:cb:14:f4:4d:94:ad:4f:a1:
         3a:3c:ea:15:46:0b:40:ba:3a:15:75:6a:01:81:29:c9:55:f5:
         6b:b0:6f:f1:58:6e:71:59:9d:db:9b:57:fc:f4:e9:8d:4a:f9:
         88:45:c8:c1:a8:31:45:ba:0e:66:50:54:6c:45:98:e5:38:9e:
         1d:79:69:9c:71:90:9c:4e:33:be:57:b8:c5:b9:54:6a:53:e8:
         51:64:c1:2f:67:2f:b6:c0:71:b9:e3:c8:41:00:2d:8b:a8:3f:
         b5:8e:88:a3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4
Qzk0NTY4NzcwHhcNMjYwNTI4MjMyNzExWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4Y2Y0Zi05NzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnAnxAJXStVVjUTBtChiCheatgGa1Wvx63gQJ0AobCyc1cKYhvLspbFnelORq
TO+TvUPyaVPeKS0gkKAgaKY7CmDbKH8X6o7YxXLrt/1a4JhKP052KCMuVPEkknEN
zEb8URQDdxUjdWxELaAn6PRCtDWXropcyFx98lmdeNPfX9esQzB+dAYOqc3kRLY7
LisUnYYsy84imjyZ267p+1TKBiS1VzjuNUDX9CZy/2yV2hlvrb/1+3OgfoBxumx4
+HoAEm7CB1aBa+nHBwthrZSrmaFJBU8vFhQ7KHtt0fXLLUoxsNYe1lGIRDFj6tG8
TDfxTXfibSK+ZfPIn+CCi3innQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMt5am/T
n2XLySJeuVeHrHTnSTanMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG
RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcxNEMvM0ZFRDY2MDhERkVDMTFFQjhGNzA0RDEyQzRGOUFFMDIvRTUwMzUzRkVE
RkVEMTFFQkExNTVDNzEyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6bmMA8EAgACMAkDBwAgAQ32nYAwDQYJKoZIhvcNAQELBQADggEB
ABPJR3e33AMmq53J+0hw+Cf0XV9kzB9LGoZo+mYRU/M4y1NJMg/i4WjHyOue9ntF
4EzplfAVWwzRwdjTOuWR9drX/J6113INHjQuoylc7YlMqwH8wh7b3DyGJSNyoSaW
jOWMiTxco5Q+J6nw89ENM/jNkeLfuAdnvMNuK7SDm2VEpolB2JnPHYZxdYc/9sO+
rWT7q2a4avBgsI/LFPRNlK1PoTo86hVGC0C6OhV1agGBKclV9Wuwb/FYbnFZndub
V/z06Y1K+YhFyMGoMUW6DmZQVGxFmOU4nh15aZxxkJxOM75XuMW5VGpT6FFkwS9n
L7bAcbnjyEEALYuoP7WOiKM=
-----END CERTIFICATE-----
Generated at Wed Jun 24 12:25:47 2026 by rpki-client