Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63D0B506779111EC9FA85055C4F9AE02.roa
File:                     63D0B506779111EC9FA85055C4F9AE02.roa (raw, json)
Hash identifier:          B2KSQLpdqNFc8Ia8SnVuFMEyiBjKiqJz0Mqm18mwYDI=
Subject key identifier:   66:36:65:39:BC:BE:0F:CE:D7:88:39:E6:2D:07:65:A4:B8:B5:B1:1D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E89A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63D0B506779111EC9FA85055C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:28:43 +0000
ROA not before:           Sun 31 May 2026 17:28:43 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149252
IP address blocks:        103.179.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59546 (0xe89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:28:43 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6fca-c9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:b9:57:f2:93:e7:48:55:18:fc:55:fe:5f:
                    fd:9a:8e:50:e9:0e:06:d0:c3:f8:c1:02:f4:e4:2c:
                    50:eb:b1:3e:cb:51:41:50:ea:de:d2:18:f4:56:1d:
                    64:da:d5:bc:c3:ea:19:b6:05:84:81:07:1b:96:30:
                    d3:34:af:08:56:6b:41:41:3d:69:4a:4b:85:73:58:
                    dc:16:60:5c:cd:18:fc:fe:82:12:f7:e2:ad:d8:e2:
                    69:91:ef:1c:39:ed:d1:fb:3d:ed:65:aa:b1:cd:5a:
                    4b:4c:43:36:68:98:57:ad:f4:68:82:ac:8c:40:51:
                    6f:d9:82:a8:20:1b:61:9a:68:43:52:a3:4f:9e:14:
                    a7:d5:f6:0b:17:e6:60:1a:30:5e:39:71:95:1a:c2:
                    bd:2e:f1:90:44:74:78:aa:f0:cf:90:81:27:84:c2:
                    a3:91:aa:bd:51:8b:27:c1:86:35:f6:30:98:51:8d:
                    fd:de:a1:6c:47:91:aa:b6:c3:54:94:59:81:0c:f9:
                    7c:ba:fc:25:5d:af:71:d1:20:b8:82:27:52:fe:b5:
                    a1:00:ad:ad:f4:61:5e:e7:78:f0:27:2b:e4:e1:bc:
                    50:e0:88:51:e6:98:6d:12:15:cf:e7:46:a6:cd:08:
                    ff:de:86:32:ce:6f:bc:7b:84:02:5a:10:e3:27:3d:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:65:39:BC:BE:0F:CE:D7:88:39:E6:2D:07:65:A4:B8:B5:B1:1D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63D0B506779111EC9FA85055C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:7e:f9:bb:d6:ec:86:28:d2:26:e9:85:d3:fa:a4:75:c2:de:
         f5:1e:76:c5:76:6f:88:06:1b:ad:b2:f9:fd:b5:c3:7a:50:c2:
         16:42:3f:ce:0d:32:eb:bb:e6:dd:ca:15:78:7f:af:4b:96:b0:
         75:52:de:41:e6:77:22:71:9b:75:a6:11:b8:e9:b6:67:0b:af:
         7a:b4:0e:3e:8c:a5:2c:c3:a2:b4:5b:f3:71:0c:43:ce:9e:58:
         10:64:c9:5c:7f:22:c9:16:34:8c:02:13:88:ba:a8:42:55:5d:
         5b:8e:52:54:aa:37:c3:01:2f:09:f6:27:3c:54:39:51:e2:58:
         ba:e8:6d:51:b7:6d:03:90:6b:2c:f3:7a:a9:40:a0:50:03:20:
         8a:55:57:df:51:92:86:80:a8:ce:aa:8c:8b:94:60:11:45:72:
         30:1c:3d:2c:e8:2b:c3:c5:6a:f3:3a:4d:6c:91:50:db:21:e7:
         aa:82:db:3e:ad:0f:02:25:fc:71:4b:69:c0:9c:03:6e:38:70:
         85:ea:b5:b0:08:7e:2d:2d:98:db:05:b2:72:83:4b:c6:90:3d:
         55:56:dd:74:93:be:bb:a6:91:34:56:a5:f1:30:43:ec:1d:77:
         f5:16:bf:1b:75:2d:1a:0d:2c:4a:7a:6d:f9:9b:69:8d:ae:af:
         91:4f:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:55 2026 by rpki-client