Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66A0E12ABDCF11EA8755D90DC4F9AE02.roa
File:                     66A0E12ABDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          z4RDItRwdHP2923MvwgsujeesbXfY4K6gvWkSmZR8Jk=
Subject key identifier:   86:FE:7C:56:6B:32:DB:B4:76:48:08:F5:62:FD:D1:DC:F8:2E:26:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F241
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66A0E12ABDCF11EA8755D90DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:06:20 +0000
ROA not before:           Mon 06 Jul 2026 17:06:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139480
IP address blocks:        103.142.77.0/24 maxlen: 24
                          103.203.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62017 (0xf241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be08c-9f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:86:2c:9c:9e:3e:a8:ee:7f:7f:99:eb:33:
                    6b:86:72:53:fa:12:ac:f8:fb:f8:b3:d9:c8:37:90:
                    5a:7f:23:1b:de:98:af:5b:38:03:d3:18:a9:8f:5f:
                    a5:8d:88:1c:13:1d:14:19:20:fe:e9:00:1f:42:6d:
                    01:53:89:68:c3:d2:57:10:76:94:0c:ed:be:4d:4b:
                    5a:fd:51:2d:db:3a:47:3f:d8:2f:99:20:02:d0:2e:
                    68:9b:f9:e9:61:23:d5:aa:f6:f0:fe:67:22:ce:93:
                    70:4e:bd:22:8c:74:e3:cd:f2:0d:d4:9c:4f:4b:10:
                    80:a7:6b:2a:23:11:67:36:a6:b3:34:98:d7:15:9b:
                    fc:8d:fb:2c:75:27:eb:b2:96:7e:a0:d9:ab:67:98:
                    f4:eb:9a:3a:22:9a:32:54:7b:f4:49:84:81:56:63:
                    36:fc:c7:7a:4e:7e:ac:e4:7a:58:24:1b:76:90:17:
                    ba:21:71:cb:b4:a4:bb:be:76:80:6c:81:5d:8c:58:
                    23:66:88:52:37:7d:46:61:ae:43:72:c7:7e:af:75:
                    dc:0e:13:6b:38:f6:ec:27:dc:24:3f:15:70:fb:78:
                    2a:11:50:29:d3:f8:68:e7:80:bf:4b:2d:b7:7b:8f:
                    76:0e:6e:1a:3c:ec:20:4e:43:c0:06:b7:09:f9:b0:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:7C:56:6B:32:DB:B4:76:48:08:F5:62:FD:D1:DC:F8:2E:26:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66A0E12ABDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.77.0/24
                  103.203.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:55:57:c2:56:b4:82:8c:fd:1e:7d:9c:20:67:d3:9c:5c:
         66:e0:f6:94:3b:0a:26:ed:2b:f0:07:dd:5c:b2:fa:be:de:dd:
         46:22:ea:21:c3:7c:2f:d7:3e:f6:8a:a7:db:b0:87:45:1b:ac:
         7b:33:80:a7:f7:95:8a:ee:43:d0:b3:55:a1:c3:6f:46:c0:02:
         9d:f4:f4:46:33:9d:7c:02:b6:9c:2d:bb:1c:0f:ac:96:1c:2e:
         38:5f:2d:b6:a9:e4:a4:25:09:7f:38:bd:15:5b:e1:fe:3a:d3:
         9c:71:cf:35:08:cd:dc:c7:8c:c4:59:04:86:d7:e3:51:52:c6:
         0f:5e:09:bf:b1:83:ae:a0:62:13:61:f9:44:de:d9:0e:05:25:
         bc:1d:1a:f8:b4:fc:dc:13:71:6f:d6:f9:e0:2d:08:d4:e2:93:
         0a:35:e0:21:5f:c7:a1:6f:89:8d:eb:66:4f:b6:e6:da:ba:86:
         e8:ab:66:d7:07:ff:07:48:42:bd:d1:1d:7f:1f:f2:b9:6f:97:
         2f:cc:d9:ed:a7:22:e9:6a:76:12:10:75:f4:96:18:e4:8c:f3:
         16:df:f6:0a:06:f6:c4:39:60:47:41:2b:ce:3f:92:a9:2a:a8:
         38:6d:aa:8e:a6:2f:d7:df:16:05:3f:1e:7f:07:b9:bc:fc:b3:
         e6:40:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:00 2026 by rpki-client