Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66338DAA200811F0BF5AF63CC4F9AE02.roa
File:                     66338DAA200811F0BF5AF63CC4F9AE02.roa (raw, json)
Hash identifier:          4o4FnAc14R25+nW02RjW9S/g/LTbCrqeUZsS66JWRz4=
Subject key identifier:   00:07:37:E6:1B:F4:31:B5:9E:A5:D9:97:A6:DF:BA:97:DD:20:1A:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E668
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66338DAA200811F0BF5AF63CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:10:09 +0000
ROA not before:           Sun 31 May 2026 17:10:09 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140108
IP address blocks:        163.227.130.0/23 maxlen: 24
                          2001:df5:7140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58984 (0xe668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:10:09 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b71-0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:26:50:e7:88:b7:cd:68:12:23:ad:dc:d8:
                    eb:df:7c:cb:e4:8a:a8:9c:f8:a8:8d:73:63:45:7c:
                    00:b6:e3:57:c4:b4:25:07:e7:c2:49:34:95:c1:64:
                    31:99:ea:55:b5:7b:b7:9c:7b:a9:da:19:55:fd:e8:
                    b9:4f:23:bb:3f:b8:4a:19:da:86:41:64:50:a3:7c:
                    52:c1:82:28:2a:9b:4a:67:bb:74:2f:ec:91:e1:f0:
                    35:09:d7:2f:10:94:dc:dc:45:de:42:ba:53:45:2d:
                    76:d7:53:71:7e:0a:90:01:98:c2:8a:cf:c9:41:fa:
                    13:a8:77:6e:8b:ad:49:6b:ef:44:fe:5f:04:90:a3:
                    bb:65:ee:0a:0c:d4:f3:ce:5a:c8:71:05:ae:fc:7e:
                    63:38:d7:d2:62:24:10:64:6a:da:c8:12:da:7a:03:
                    19:0c:d8:3e:9f:65:14:28:21:8b:fd:65:05:b3:64:
                    50:3a:2a:77:c5:e0:43:15:6d:2b:5a:3e:4b:9b:9b:
                    37:26:f0:8b:fa:39:12:b5:10:83:c6:86:1f:e7:93:
                    ff:64:8a:d6:e4:a8:02:61:30:c9:5a:82:2f:7f:18:
                    b2:58:50:91:c9:e4:80:07:98:ab:d3:3c:ce:bf:b6:
                    fc:a4:83:b2:77:54:4e:63:15:4b:96:33:c0:03:8e:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:37:E6:1B:F4:31:B5:9E:A5:D9:97:A6:DF:BA:97:DD:20:1A:4C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66338DAA200811F0BF5AF63CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.130.0/23
                IPv6:
                  2001:df5:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:d3:43:20:f9:25:07:c4:98:5e:87:d3:a6:84:3f:b6:cc:
         8e:cd:fb:0f:09:7d:39:93:c7:96:d2:75:1e:07:0f:92:7b:2d:
         e3:9d:a1:b0:4d:06:a9:d3:4a:72:c3:07:c1:10:49:eb:65:56:
         99:b9:e1:80:3c:a4:bc:29:3f:79:12:02:c2:68:59:01:c5:1d:
         43:93:48:63:88:6f:6e:6c:94:6a:42:db:ca:58:38:3a:60:cf:
         27:d0:a2:2a:4d:2f:13:d2:5d:5f:6d:b2:6c:28:3e:22:c4:0f:
         16:4b:d0:b2:bb:47:cb:b5:cf:38:ec:ee:31:14:4e:b9:a8:93:
         8c:3b:3d:09:c9:9f:68:73:95:37:b5:cb:38:f8:43:65:96:58:
         65:30:7b:66:6c:2a:86:57:07:7c:96:07:9f:6a:8e:bb:09:b7:
         ea:96:f5:24:14:63:e5:6e:19:50:ce:11:e6:69:65:a8:4d:b9:
         39:7d:7c:05:b8:22:4c:ed:a3:64:cc:a5:d9:35:6d:89:fc:43:
         4c:35:de:6e:6d:25:ac:37:a7:45:a8:a5:ac:4c:ac:18:cd:d3:
         95:bc:e2:f5:d0:1e:c7:bc:58:84:f2:4f:b7:31:13:ed:b3:6f:
         f2:d1:24:df:b7:30:cc:af:2d:f8:98:7c:cc:91:cd:01:3d:36:
         47:83:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:49 2026 by rpki-client