Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa
File:                     66D80248391911EB9D612545C4F9AE02.roa (raw, json)
Hash identifier:          b617Qg4KQeJXA1o6JGaB7VOBm1THbLUlTdotn7kZ2m4=
Subject key identifier:   09:59:68:EB:38:32:8C:F2:EE:8F:B7:F9:E1:5B:6A:4C:2C:30:28:1A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:13:21 +0000
ROA not before:           Sun 31 May 2026 17:13:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141270
IP address blocks:        103.159.214.0/24 maxlen: 24
                          2001:df5:8980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59077 (0xe6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:13:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6c30-80ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:22:68:ed:fb:c5:aa:9f:9d:6b:6a:17:09:
                    4f:74:95:ef:ec:4a:e7:30:87:03:e2:e8:bf:23:f4:
                    28:b3:c9:47:7a:a7:5f:a2:9e:97:8e:8a:32:a3:bb:
                    06:85:fc:8e:08:57:eb:1f:5c:49:fb:fa:7b:c5:9b:
                    84:0b:ab:f0:37:9a:19:6c:09:3b:5f:fc:d5:a7:1d:
                    86:71:4e:9f:a9:3d:ac:a6:56:73:e7:27:a3:a8:52:
                    6c:fb:2f:56:57:85:5c:80:38:f2:bc:66:f6:e2:1d:
                    c4:d4:83:de:40:18:ce:f3:f6:29:f1:f3:c8:03:a3:
                    e4:2d:c6:b1:ec:3d:51:ff:be:6e:55:27:37:19:05:
                    17:3e:8a:e4:83:39:ab:b4:cb:32:b5:56:59:c5:4a:
                    e8:2b:7a:59:92:1b:fd:9e:5c:50:b0:33:98:4c:c1:
                    57:2c:59:5a:dc:c7:39:ee:b1:82:60:f9:7a:c5:5c:
                    39:99:2b:5a:07:86:3e:da:9c:16:11:7e:20:00:f6:
                    e8:aa:90:00:2d:3d:c4:f7:b3:89:ab:3f:37:9b:e0:
                    85:8b:b0:33:2d:9d:55:ca:57:b9:cb:38:76:36:88:
                    b1:77:78:d8:93:6d:9d:ed:ae:05:24:6e:9c:a3:f2:
                    a3:f5:69:83:f8:8b:76:d3:78:6b:fa:c2:98:19:a8:
                    bb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:68:EB:38:32:8C:F2:EE:8F:B7:F9:E1:5B:6A:4C:2C:30:28:1A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66D80248391911EB9D612545C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.214.0/24
                IPv6:
                  2001:df5:8980::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:11:b4:ea:d7:f0:ab:e4:30:6c:e9:03:dc:47:87:ab:90:5c:
         6f:c2:5f:7a:29:28:18:c8:4a:4a:95:db:24:dd:24:43:87:c0:
         86:0f:1a:cb:e5:a6:8a:d8:5c:b3:dc:e9:69:e9:9d:a9:14:86:
         86:c0:d7:a7:25:14:43:2c:d5:3d:ad:f9:0a:07:58:f8:b8:01:
         cb:cd:79:7c:46:17:04:a3:42:f3:b5:8d:65:24:89:bc:f1:31:
         bb:95:90:e8:30:89:46:28:59:7e:41:2b:3b:92:67:c8:ab:75:
         40:ea:90:65:b6:91:11:b1:b3:8f:6b:57:a3:68:b3:09:1f:e2:
         ca:3b:65:f7:4d:2f:8a:70:f5:5c:39:29:14:80:97:3e:f2:48:
         20:10:d6:68:47:8c:1c:3d:0a:ab:b9:18:39:fe:22:84:9f:fb:
         a8:87:46:2c:f1:b4:0a:f9:67:c3:a4:1c:4c:03:df:14:cb:7b:
         6f:9a:0b:6d:3e:9e:b1:c5:d8:d2:72:94:50:e9:ca:9a:02:06:
         25:1b:7f:a0:40:03:0a:10:d3:dd:45:9e:5f:c9:b3:cf:a1:92:
         d6:c5:48:38:ba:18:11:8b:5a:aa:5a:6f:2b:92:2a:48:9e:d9:
         9a:bd:46:fc:da:32:8a:59:5c:33:a4:ec:d7:53:89:94:3c:2b:
         8b:82:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:42 2026 by rpki-client