Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66C0D88A381A11EFA8821C2DC4F9AE02.roa
File:                     66C0D88A381A11EFA8821C2DC4F9AE02.roa (raw, json)
Hash identifier:          WilRnRQeHke/4GfxxoyTL2yHtKHuXLKkIP8/L2A04O8=
Subject key identifier:   32:49:2D:43:E5:62:E8:8C:88:4C:87:09:32:21:A9:F0:3C:E4:C5:15
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E50B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66C0D88A381A11EFA8821C2DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:58:46 +0000
ROA not before:           Sun 31 May 2026 16:58:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137093
IP address blocks:        103.107.112.0/22 maxlen: 24
                          103.192.204.0/24 maxlen: 24
                          103.192.207.0/24 maxlen: 24
                          202.53.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58635 (0xe50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:58:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c68c6-d4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:bd:7f:7a:bd:5f:f4:ee:7c:79:d4:49:b6:
                    80:20:aa:4a:23:e6:94:3a:b1:30:3a:90:39:e3:c3:
                    43:3c:29:c6:33:c0:80:07:3a:07:90:6a:d9:cd:b5:
                    66:3c:cd:71:8e:53:71:45:24:f8:a5:25:cd:79:1c:
                    e7:20:07:58:e8:53:ce:cd:0d:34:1c:bc:2b:10:4d:
                    bd:8e:0b:31:ee:aa:16:c7:a7:be:93:ab:36:b5:48:
                    15:6d:2e:f7:bd:78:3d:bf:16:5a:e6:ab:fa:fa:3f:
                    c6:06:85:6f:44:6e:06:bd:91:75:94:ff:d5:8b:c3:
                    ec:f0:2b:9d:cd:63:af:1b:48:b9:11:cd:b3:2d:9d:
                    3c:64:aa:3b:16:1d:1e:42:57:86:9a:8a:2c:86:70:
                    0b:b4:37:bc:13:07:16:c7:6b:08:99:19:a0:17:55:
                    d3:7e:c7:a3:e0:76:91:89:ff:ea:be:51:cd:06:97:
                    fb:81:63:3f:a7:a6:3e:57:24:3a:d7:8d:ba:98:09:
                    19:3c:ac:b6:1b:bc:bc:92:02:51:ed:50:aa:e6:db:
                    b2:96:f9:fc:f3:1d:99:11:e5:ff:ef:24:b5:ef:36:
                    81:a0:fd:c5:78:9e:00:99:3c:dc:e5:21:41:a8:98:
                    23:55:bd:f1:3d:3b:a8:c4:b1:e0:c8:e1:25:f7:0a:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:49:2D:43:E5:62:E8:8C:88:4C:87:09:32:21:A9:F0:3C:E4:C5:15
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66C0D88A381A11EFA8821C2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.112.0/22
                  103.192.204.0/24
                  103.192.207.0/24
                  202.53.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:95:06:ba:03:a6:a6:d5:7e:88:ae:4f:17:23:bc:b8:97:5a:
         df:82:7f:b6:3d:70:3c:9f:3c:03:c8:61:88:a0:23:24:66:4c:
         84:3e:68:bd:1f:5e:63:95:1c:7c:2e:33:d2:9b:fa:7a:6f:6c:
         ff:36:04:41:5a:1c:73:e4:56:28:e6:c2:3e:a5:cc:85:96:71:
         67:5a:fd:e7:90:b2:72:74:a4:cf:88:02:19:92:45:36:65:56:
         1f:72:f3:d7:5f:a1:99:42:b9:f7:9b:e0:3a:b0:8a:02:a3:a1:
         1e:4e:61:16:9e:59:a6:a4:5b:42:ba:ff:6d:62:61:c6:dd:a7:
         80:b7:fa:ee:5a:10:36:5b:f7:17:05:8b:b9:ce:ef:94:07:72:
         b5:73:61:df:9a:61:79:2f:af:a9:cb:9a:ff:21:59:bf:ee:19:
         97:dc:f5:3f:27:3b:6e:29:af:3c:94:d7:4c:b1:02:05:e1:26:
         f4:4d:ec:0f:9c:63:4e:ad:98:68:d5:b1:e4:e5:2c:58:5a:c9:
         63:2c:85:5a:f9:c8:bc:28:31:99:b4:fc:bd:92:5d:ce:1f:8f:
         f6:64:10:8b:d3:b4:3b:21:9b:70:cf:b9:87:37:54:f6:b9:71:
         1d:f8:47:82:c6:b0:8d:42:ef:8b:33:4e:23:fc:be:92:61:47:
         94:c3:78:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAOULMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTg0NloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4YzYtZDRlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJjovX96vV/07nx51Em2gCCqSiPmlDqxMDqQOePDQzwpxjPAgAc6B5Bq2c21
ZjzNcY5TcUUk+KUlzXkc5yAHWOhTzs0NNBy8KxBNvY4LMe6qFsenvpOrNrVIFW0u
9714Pb8WWuar+vo/xgaFb0RuBr2RdZT/1YvD7PArnc1jrxtIuRHNsy2dPGSqOxYd
HkJXhpqKLIZwC7Q3vBMHFsdrCJkZoBdV037Ho+B2kYn/6r5RzQaX+4FjP6emPlck
OteNupgJGTysthu8vJICUe1Qqubbspb5/PMdmRHl/+8kte82gaD9xXieAJk83OUh
QaiYI1W98T07qMSx4MjhJfcKXKUCAwEAAaOCAnIwggJuMB0GA1UdDgQWBBQySS1D
5WLojIhMhwkyIanwPOTFFTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY2QzBEODhB
MzgxQTExRUZBODgyMUMyREM0RjlBRTAyLnJvYTAxBggrBgEFBQcBBwEB/wQiMCAw
HgQCAAEwGAMEAmdrcAMEAGfAzAMEAGfAzwMEAco1hjANBgkqhkiG9w0BAQsFAAOC
AQEASJUGugOmptV+iK5PFyO8uJda34J/tj1wPJ88A8hhiKAjJGZMhD5ovR9eY5Uc
fC4z0pv6em9s/zYEQVocc+RWKObCPqXMhZZxZ1r955CycnSkz4gCGZJFNmVWH3Lz
11+hmUK595vgOrCKAqOhHk5hFp5ZpqRbQrr/bWJhxt2ngLf67loQNlv3FwWLuc7v
lAdytXNh35pheS+vqcua/yFZv+4Zl9z1Pyc7bimvPJTXTLECBeEm9E3sD5xjTq2Y
aNWx5OUsWFrJYyyFWvnIvCgxmbT8vZJdzh+P9mQQi9O0OyGbcM+5hzdU9rlxHfhH
gsawjULvizNOI/y+kmFHlMN4nA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:46 2026 by rpki-client