Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335F21D2983F11EB90CA1075C4F9AE02.roa
File:                     335F21D2983F11EB90CA1075C4F9AE02.roa (raw, json)
Hash identifier:          jNgBJrHHoV4DPAFUe8K2H5UEWyUnardR8uj8wfYnbCg=
Subject key identifier:   5C:FA:39:57:44:08:F9:FC:B9:F2:D2:DF:E5:83:8A:58:71:90:07:A5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F7AA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335F21D2983F11EB90CA1075C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:52:37 +0000
ROA not before:           Mon 06 Jul 2026 17:52:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58763
IP address blocks:        103.66.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63402 (0xf7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:52:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4beb65-4ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:3c:84:de:4a:22:5e:46:18:73:6d:31:d7:
                    af:d2:fa:68:98:24:0f:08:75:50:05:70:be:27:30:
                    52:41:fe:b0:41:95:b0:51:60:48:e0:16:9b:a7:54:
                    ed:32:4f:21:df:be:77:e3:4c:52:b2:b9:87:a4:b2:
                    0a:74:27:62:a7:03:47:26:37:f5:1c:bd:89:ef:02:
                    b5:7d:7c:70:be:f0:b1:8a:32:63:0f:76:d3:3f:bf:
                    07:32:68:72:00:71:b6:66:a4:42:73:9a:1d:2e:2f:
                    88:af:08:05:f6:28:78:69:66:de:72:2e:c2:08:b3:
                    35:4a:2f:d0:2a:3c:2f:3a:9f:6b:c0:5a:eb:5e:51:
                    39:b3:98:b8:36:3b:20:77:f7:67:57:fb:f2:a1:17:
                    63:32:6e:5c:a2:30:56:a8:2e:58:78:f1:9e:1b:34:
                    b7:f3:eb:dd:86:24:ed:f2:e5:90:b7:fa:0b:67:1b:
                    09:1d:34:9e:66:9f:15:39:78:3a:76:5f:51:47:ce:
                    ad:4d:f9:21:97:bc:20:9c:45:bf:a8:f6:b3:dc:03:
                    e6:d9:d3:e0:00:37:7a:ba:72:48:b1:9c:2e:5d:43:
                    46:df:c3:ba:39:5c:66:cc:9a:42:8b:bc:e0:b2:c9:
                    1e:26:32:0e:42:a8:3c:c4:17:5a:4c:9e:7b:85:2a:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FA:39:57:44:08:F9:FC:B9:F2:D2:DF:E5:83:8A:58:71:90:07:A5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335F21D2983F11EB90CA1075C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:74:ba:40:34:50:9e:5e:3c:3f:7b:bc:fa:b2:74:54:b9:
         25:5c:c3:bb:f4:29:80:a9:ef:dd:be:07:e9:4b:68:c5:f3:f7:
         4f:6b:49:17:c6:46:c9:4e:e9:74:8a:12:be:9c:a6:a3:ca:66:
         d7:2e:56:a0:fc:d3:f8:10:8d:ea:a2:92:47:07:7f:e8:93:4f:
         8b:9c:35:48:8b:2f:b6:b7:82:38:b9:c1:b4:b0:30:52:2d:b3:
         40:a3:cd:8c:4f:06:cc:9e:50:4c:12:97:af:ff:66:f7:98:e6:
         34:f8:b9:aa:55:75:ee:ce:ab:25:8e:11:8e:d6:d3:3a:30:30:
         0f:ef:68:8c:33:12:55:54:af:e1:0d:fc:d2:39:07:c9:fd:3b:
         f2:b6:de:10:c5:98:44:af:d3:e3:a3:4b:aa:6b:c7:93:88:ac:
         ec:90:cd:58:9b:1a:20:6e:2f:a5:41:9f:5c:1b:cb:45:b8:aa:
         8e:58:0f:23:bd:5c:38:25:8e:de:0f:9e:6c:97:79:4e:9f:76:
         18:db:ad:81:14:ac:95:98:ee:00:6e:73:41:86:67:50:88:f2:
         2a:e1:c1:e5:cd:a5:57:59:14:8a:7e:b7:c1:6b:10:56:d7:a4:
         0c:80:51:03:c5:bf:27:e9:cb:a5:18:9f:8b:bc:72:0a:e0:1b:
         e0:ae:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:27 2026 by rpki-client