Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa
File:                     6C43880E9B7711EB8C945B26C4F9AE02.roa (raw, json)
Hash identifier:          aJDEH4unz6wKa85RZT+r+c9kVFnrrtH+hrio3kM+Kac=
Subject key identifier:   00:57:EE:2F:E4:CB:51:F8:41:76:F1:7F:ED:B1:0C:86:77:AD:66:5B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E718
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:16:01 +0000
ROA not before:           Sun 31 May 2026 17:16:00 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141524
IP address blocks:        103.162.66.0/23 maxlen: 24
                          2001:df6:7580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59160 (0xe718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:16:00 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6cd0-ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:04:60:16:8c:c4:73:9b:a1:92:b7:ac:45:
                    47:dc:1d:e2:5f:13:01:c3:de:4e:08:8a:ae:99:50:
                    56:3f:6d:1a:ad:1c:47:d0:09:bc:7b:56:18:fd:cc:
                    fa:6b:39:35:c5:9c:fa:96:cc:e3:85:0d:2c:f9:ed:
                    1c:50:f7:df:bf:6a:91:ef:a0:d8:97:fe:dd:2c:38:
                    6e:c7:7a:d9:0e:ae:d8:9f:0c:0f:34:15:73:85:fa:
                    6d:20:ff:b6:20:ab:e8:28:77:22:41:a4:9f:d3:b9:
                    f3:81:ad:dc:5a:be:8b:6c:f5:23:74:9b:f4:a8:2b:
                    f2:f1:65:7c:13:a3:bc:85:1a:8c:ab:b8:83:ca:ac:
                    5f:30:a3:2b:70:8c:1d:54:7a:d1:39:7a:72:59:79:
                    85:ac:94:36:e8:ed:8c:64:8f:26:37:24:8c:98:0c:
                    cd:c6:34:15:64:cd:05:9f:d3:8a:29:49:db:bd:9e:
                    1e:0f:f4:3f:fd:46:3f:41:cc:99:c0:2f:df:f2:b4:
                    dc:8a:6f:bb:41:70:1c:ae:e9:f8:cb:71:d9:aa:89:
                    bd:28:50:3a:c7:7d:b3:6f:f3:54:06:52:b1:4b:a4:
                    d9:0f:3c:56:3f:ef:80:0b:37:8c:74:cb:4d:5d:af:
                    97:32:1a:c2:3a:a0:0a:3a:19:73:3c:91:3f:2d:9c:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:EE:2F:E4:CB:51:F8:41:76:F1:7F:ED:B1:0C:86:77:AD:66:5B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C43880E9B7711EB8C945B26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.66.0/23
                IPv6:
                  2001:df6:7580::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:2c:d3:b3:97:81:1d:e4:6c:c0:75:79:6c:fd:fb:3e:fb:
         58:f2:05:b7:74:e8:08:48:9f:a4:ef:a2:5e:46:59:05:6c:28:
         80:23:ad:fe:cf:3a:0e:ac:bb:9b:0b:99:7b:a0:0e:3d:e0:e5:
         05:29:23:8c:52:bb:87:55:6c:a7:c4:a2:d4:8f:6f:88:bf:b3:
         db:9a:69:5b:dd:4d:10:fb:20:93:35:1e:d0:5e:6f:29:5a:de:
         7b:27:9b:98:c9:47:eb:d7:e7:d9:08:3a:48:9a:75:9e:58:74:
         ba:fa:17:e9:22:78:f0:36:73:a9:3a:94:23:b5:69:16:f6:40:
         45:26:11:73:7c:f9:51:9a:3e:a2:85:6b:a1:57:6b:ea:66:cc:
         dd:f9:0f:6f:e8:12:7d:f1:95:dd:d2:89:ea:16:bf:96:c9:62:
         35:23:9f:b1:7c:a1:3f:0e:8f:34:71:06:db:19:cf:a2:72:28:
         30:bd:bd:44:ad:ab:ff:f7:d3:11:c6:64:13:5a:32:5e:b1:b5:
         62:60:bc:6f:c2:e5:ba:8a:89:53:5d:99:51:ac:40:f7:30:e4:
         0d:b7:c6:7c:d3:d7:80:94:4c:91:50:20:d5:d6:e4:bf:c4:17:
         a6:f4:4d:1a:d0:c0:53:fa:83:6d:f5:83:77:b6:6c:5c:8d:25:
         1d:cf:e7:13
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOcYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTYwMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZjZDAtYWI1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8ABGAWjMRzm6GSt6xFR9wd4l8TAcPeTgiKrplQVj9tGq0cR9AJvHtWGP3M
+ms5NcWc+pbM44UNLPntHFD3379qke+g2Jf+3Sw4bsd62Q6u2J8MDzQVc4X6bSD/
tiCr6Ch3IkGkn9O584Gt3Fq+i2z1I3Sb9Kgr8vFlfBOjvIUajKu4g8qsXzCjK3CM
HVR60Tl6cll5hayUNujtjGSPJjckjJgMzcY0FWTNBZ/TiilJ272eHg/0P/1GP0HM
mcAv3/K03Ipvu0FwHK7p+Mtx2aqJvShQOsd9s2/zVAZSsUuk2Q88Vj/vgAs3jHTL
TV2vlzIawjqgCjoZczyRPy2cDW8CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQAV+4v
5MtR+EF28X/tsQyGd61mWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDNDM4ODBF
OUI3NzExRUI4Qzk0NUIyNkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeiQjAPBAIAAjAJAwcAIAEN9nWAMA0GCSqGSIb3DQEBCwUAA4IB
AQCL/SzTs5eBHeRswHV5bP37PvtY8gW3dOgISJ+k76JeRlkFbCiAI63+zzoOrLub
C5l7oA494OUFKSOMUruHVWynxKLUj2+Iv7Pbmmlb3U0Q+yCTNR7QXm8pWt57J5uY
yUfr1+fZCDpImnWeWHS6+hfpInjwNnOpOpQjtWkW9kBFJhFzfPlRmj6ihWuhV2vq
Zszd+Q9v6BJ98ZXd0onqFr+WyWI1I5+xfKE/Do80cQbbGc+icigwvb1Erav/99MR
xmQTWjJesbViYLxvwuW6iolTXZlRrED3MOQNt8Z809eAlEyRUCDV1uS/xBem9E0a
0MBT+oNt9YN3tmxcjSUdz+cT
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:23 2026 by rpki-client