Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EA708CD1B311EC90FF6813C4F9AE02.roa
File:                     63EA708CD1B311EC90FF6813C4F9AE02.roa (raw, json)
Hash identifier:          gmG57dHqXY4MOXAJ4ucgLYJyIuoosntY5deR6ZUwJOU=
Subject key identifier:   82:F7:FD:4C:05:05:F4:BF:81:FB:A9:8D:22:7A:F2:43:E6:DC:91:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFC8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EA708CD1B311EC90FF6813C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:45:40 +0000
ROA not before:           Mon 06 Jul 2026 16:45:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135213
IP address blocks:        103.66.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61384 (0xefc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:45:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdbb4-c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:ee:e7:6b:8f:f3:6a:85:34:1c:ec:66:68:
                    03:6d:a3:ac:d9:2e:6c:6d:a7:91:2a:a0:67:eb:ed:
                    46:c6:64:27:1b:59:12:31:84:dd:e8:2e:e1:98:12:
                    60:a1:99:01:ac:9b:8b:8a:3a:e8:5e:56:ee:1b:b7:
                    71:9d:eb:7c:46:fc:1e:8a:39:2e:41:12:6b:fd:e2:
                    d1:57:b9:c0:c0:f9:02:4f:3b:10:b5:94:15:88:07:
                    02:cc:52:e2:52:e1:d3:55:76:4e:a6:8a:ad:f8:97:
                    c0:84:97:4d:8e:9d:78:dd:a3:72:4d:59:61:4f:ed:
                    45:9e:e8:41:10:20:26:a3:7b:8e:26:da:80:89:55:
                    2b:32:a9:26:89:48:02:be:1d:03:69:7e:f9:a9:bb:
                    9e:a1:19:96:da:16:d6:30:3a:f7:2f:f1:40:fe:30:
                    4d:04:65:e3:0d:d5:b5:b4:ed:4e:a9:5b:44:09:ba:
                    37:ad:58:79:40:2e:98:dd:bf:b6:d7:8b:b5:bd:2a:
                    15:b7:41:92:64:d5:2a:49:90:f2:26:94:88:16:cf:
                    be:15:b8:2e:59:59:4a:0a:8e:8b:00:37:1f:34:92:
                    17:85:f9:30:b2:75:14:fa:4d:2c:4a:16:cb:11:63:
                    8b:6a:be:fe:73:47:a3:ab:4d:b2:15:90:00:d0:03:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:FD:4C:05:05:F4:BF:81:FB:A9:8D:22:7A:F2:43:E6:DC:91:7B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EA708CD1B311EC90FF6813C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:4d:85:59:d6:31:09:c5:cb:f3:e4:2f:65:92:e5:14:88:77:
         27:5b:ce:e5:bb:86:0e:cb:fb:01:08:28:f6:b1:1d:27:4f:ea:
         13:36:6c:4c:3f:63:fa:da:71:66:af:d8:c6:24:90:52:cb:6e:
         40:e5:b4:17:ae:8a:84:df:99:4b:9d:17:7d:f3:5f:1e:94:32:
         92:55:1a:6c:ed:0b:83:4a:b2:5c:98:6a:b5:2e:87:6c:8a:18:
         72:bd:2e:6b:7e:ab:e8:3c:69:c1:43:6c:7a:a4:21:9d:f9:37:
         b8:a6:ba:8e:be:1b:18:0b:9c:f4:1b:9a:41:28:ba:4e:a8:ae:
         ed:5e:67:59:63:17:87:80:5f:34:39:f4:31:16:83:ef:1b:58:
         67:cb:76:cc:ba:16:87:d7:aa:f4:93:37:7f:6a:de:07:39:c0:
         4c:b5:1d:d2:39:8e:51:d1:58:7e:ed:1c:8d:43:f9:09:2f:15:
         a3:f1:dd:2e:45:ce:36:76:e8:9c:03:08:91:de:cb:cb:dd:43:
         31:3d:71:4f:3f:63:8a:0b:15:06:e9:64:76:61:ae:1a:40:dc:
         11:5e:a6:f3:f6:69:87:c3:70:7a:69:25:ef:0b:ff:43:b9:00:
         1a:85:6d:77:76:38:03:be:88:e0:f2:72:34:73:b4:d6:58:93:
         24:ee:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:15 2026 by rpki-client