Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63150E02511911ED9308A55CC4F9AE02.roa
File:                     63150E02511911ED9308A55CC4F9AE02.roa (raw, json)
Hash identifier:          5nvuswf6FDEAXVXQuNA5hDn9iSVYy7UAoPAP07DvvW4=
Subject key identifier:   42:5E:1E:42:84:83:51:49:C8:83:3B:FB:B9:9D:FE:84:D9:2E:9B:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E92E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63150E02511911ED9308A55CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:33:54 +0000
ROA not before:           Sun 31 May 2026 17:33:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150069
IP address blocks:        103.21.6.0/23 maxlen: 24
                          2001:df1:66c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59694 (0xe92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:33:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7102-4572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:3e:34:e1:57:d8:16:fe:df:05:96:83:14:
                    8b:2f:f3:73:08:5a:b1:09:ca:c3:d6:cd:e5:a2:77:
                    60:32:34:1b:b6:dc:ed:83:41:a1:09:61:22:a1:fe:
                    4c:2e:9a:a5:87:75:2a:95:ac:62:fe:34:5e:02:62:
                    cc:ba:31:57:2d:59:fa:3c:ba:07:93:06:ee:8f:09:
                    5c:53:11:df:e4:72:f4:eb:ac:70:36:5d:51:46:26:
                    58:08:64:34:64:b9:e3:79:87:21:25:a6:46:8c:22:
                    8e:c7:ae:df:e7:51:24:a3:4b:b1:97:66:f4:b3:57:
                    13:24:50:2b:f5:d1:b9:55:92:b1:7f:7c:8f:4c:2e:
                    1e:b2:59:8f:48:48:65:29:01:20:22:37:e5:2e:b5:
                    13:5b:43:ec:3b:25:a3:c3:30:49:c8:02:4b:0c:07:
                    b8:ba:d4:d5:a3:8a:ee:24:db:f0:9d:97:20:a6:00:
                    62:45:59:2d:94:0b:cb:05:f0:c1:86:25:b5:17:5a:
                    ba:78:bc:e9:55:7c:c5:97:2a:ad:19:18:92:22:b2:
                    5d:1a:d7:5a:30:b5:eb:8e:72:2b:5c:75:97:ef:5c:
                    0b:3a:e0:80:cd:45:07:5c:29:68:9f:71:4d:21:ab:
                    b6:7a:2b:c6:28:04:ed:09:e5:0c:5a:a5:d6:ab:f1:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:1E:42:84:83:51:49:C8:83:3B:FB:B9:9D:FE:84:D9:2E:9B:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63150E02511911ED9308A55CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.6.0/23
                IPv6:
                  2001:df1:66c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:37:5d:e6:ed:f1:f4:74:3e:f1:13:26:98:83:bf:e5:09:05:
         f5:2e:4b:63:45:08:ea:07:d9:c1:fa:81:6c:f7:22:94:fa:83:
         15:62:d6:d6:50:81:d4:7d:0e:37:b0:7f:76:89:37:d7:2b:53:
         2d:0f:d2:cf:a5:0c:7d:96:97:0a:5b:5d:2b:91:1c:2b:ab:c4:
         7c:17:4a:82:61:3e:ec:fb:52:8a:8d:8d:f6:ab:73:d1:27:fc:
         09:07:2d:ab:ee:ed:12:c2:cf:fd:55:c0:45:81:c2:7a:e7:c3:
         68:2a:90:44:47:b4:49:3d:3a:f8:69:72:7f:11:a6:62:b1:e1:
         bb:e4:2d:d2:e3:ae:b1:f1:c8:5a:78:a3:2b:0e:13:d1:63:d3:
         0c:d8:e3:7f:ec:59:df:97:64:17:13:cb:66:e5:bd:a9:ef:00:
         0e:59:86:8a:a2:9e:1a:bd:50:f2:2e:85:cd:2a:af:4c:1d:3d:
         24:96:db:8f:b4:67:04:80:ab:92:a2:1f:5b:f1:78:df:2d:a1:
         9f:aa:fb:9a:a4:6a:1e:33:d8:96:97:71:1e:63:cc:fb:06:59:
         d5:b3:b4:12:5f:5f:b7:87:69:7e:49:68:04:be:42:09:dd:a9:
         a3:63:ca:f7:93:0c:02:93:d8:05:6b:68:4e:d6:b9:cb:73:c0:
         cb:15:91:1c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOkuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzM1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxMDItNDU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJnpPjThV9gW/t8FloMUiy/zcwhasQnKw9bN5aJ3YDI0G7bc7YNBoQlhIqH+
TC6apYd1KpWsYv40XgJizLoxVy1Z+jy6B5MG7o8JXFMR3+Ry9OuscDZdUUYmWAhk
NGS543mHISWmRowijseu3+dRJKNLsZdm9LNXEyRQK/XRuVWSsX98j0wuHrJZj0hI
ZSkBICI35S61E1tD7Dslo8MwScgCSwwHuLrU1aOK7iTb8J2XIKYAYkVZLZQLywXw
wYYltRdauni86VV8xZcqrRkYkiKyXRrXWjC1645yK1x1l+9cCzrggM1FB1wpaJ9x
TSGrtnorxigE7QnlDFql1qvxXBMCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRCXh5C
hINRSciDO/u5nf6E2S6bEDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzMTUwRTAy
NTExOTExRUQ5MzA4QTU1Q0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWcVBjAPBAIAAjAJAwcAIAEN8WbAMA0GCSqGSIb3DQEBCwUAA4IB
AQBUN13m7fH0dD7xEyaYg7/lCQX1LktjRQjqB9nB+oFs9yKU+oMVYtbWUIHUfQ43
sH92iTfXK1MtD9LPpQx9lpcKW10rkRwrq8R8F0qCYT7s+1KKjY32q3PRJ/wJBy2r
7u0Sws/9VcBFgcJ658NoKpBER7RJPTr4aXJ/EaZiseG75C3S466x8chaeKMrDhPR
Y9MM2ON/7Fnfl2QXE8tm5b2p7wAOWYaKop4avVDyLoXNKq9MHT0kltuPtGcEgKuS
oh9b8XjfLaGfqvuapGoeM9iWl3EeY8z7BlnVs7QSX1+3h2l+SWgEvkIJ3amjY8r3
kwwCk9gFa2hO1rnLc8DLFZEc
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client