Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3ED0D58EAE811EB9792953BC4F9AE02.roa
File:                     C3ED0D58EAE811EB9792953BC4F9AE02.roa (raw, json)
Hash identifier:          ieKJDbxY3ze0kBIyILbEXSkYASjhEYjm89ZLeJBgMTY=
Subject key identifier:   B8:1E:B3:21:8E:A2:62:4D:98:4D:B2:38:65:E3:36:9F:D0:1F:3E:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E77C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3ED0D58EAE811EB9792953BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:19:16 +0000
ROA not before:           Sun 31 May 2026 17:19:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141868
IP address blocks:        103.164.208.0/24 maxlen: 24
                          2001:df7:a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59260 (0xe77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:19:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d93-102b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:7f:19:88:e0:9d:72:dd:d6:52:9a:35:1f:
                    45:f5:58:62:8b:84:33:80:0a:74:d9:b3:cc:ae:e2:
                    a1:8b:9c:ba:74:1d:7a:86:34:c8:94:b4:f7:1b:9b:
                    d7:fd:00:0f:04:d9:b4:d8:17:c0:f3:a4:f8:68:dd:
                    1c:f4:e0:bd:39:cd:33:b7:33:75:0a:6f:b3:ab:f6:
                    ca:c1:a6:2c:06:e2:6c:dd:f2:42:60:7f:31:00:0a:
                    65:36:c2:5b:01:54:0e:23:83:b3:76:1f:4a:31:4c:
                    57:0e:05:b2:0e:27:65:81:66:75:26:b6:dc:c9:99:
                    29:9a:d4:de:7d:31:f5:e3:7e:4f:cd:18:6e:83:e6:
                    dd:9e:94:4b:92:fd:97:d7:3d:ae:37:fc:7e:e8:1e:
                    c3:53:fc:46:b6:1b:a5:51:79:07:7c:ea:18:7d:2e:
                    70:6d:2c:66:7e:70:25:d7:68:b4:b5:ef:77:e3:57:
                    4c:db:1d:be:62:a9:e3:ac:4f:64:8e:13:ae:88:09:
                    7b:55:6e:fc:a9:54:69:fe:bf:be:ad:ea:2f:92:fc:
                    48:89:e7:2d:7c:10:89:b0:63:13:3d:3e:11:95:9b:
                    7b:99:73:42:6e:08:ef:f1:ff:2d:d5:48:12:35:f1:
                    80:f1:9f:21:da:08:ed:a3:cf:81:d1:2f:3a:ea:d6:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:B3:21:8E:A2:62:4D:98:4D:B2:38:65:E3:36:9F:D0:1F:3E:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3ED0D58EAE811EB9792953BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.208.0/24
                IPv6:
                  2001:df7:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:da:37:89:9c:73:cb:d4:80:37:4f:33:e2:6a:1d:99:0d:
         c8:94:4c:06:2d:0b:2d:68:78:cb:c4:2d:71:a6:fa:53:23:19:
         03:b9:fe:43:01:08:80:00:66:66:80:31:b6:f8:9f:7b:4c:98:
         ae:c0:9d:0b:3f:e8:6a:7d:96:04:93:15:0f:56:e7:39:21:82:
         3c:eb:fb:82:7a:ed:4e:63:24:c7:9b:e0:e9:c4:e6:aa:f2:62:
         97:6c:98:bc:76:39:f8:2f:03:8a:49:c4:14:91:17:31:90:75:
         2d:be:e3:06:f8:28:81:6c:ed:d1:5b:75:76:fa:92:79:85:08:
         aa:19:3e:84:51:fd:28:83:f9:15:af:0c:98:f3:c9:21:03:4e:
         c4:09:81:8e:c7:26:4c:17:76:80:95:6c:87:2c:bb:a2:33:3e:
         e1:40:c5:56:6c:3a:8b:9c:b6:53:5d:82:33:6a:24:62:28:b8:
         2f:e2:91:d9:f9:08:bf:48:9d:75:88:b3:22:a0:cd:e3:1a:f5:
         69:11:66:7c:bc:09:82:fa:81:f9:66:e9:44:49:ac:52:cf:e6:
         2a:2f:f5:6c:44:55:a9:c2:63:df:bd:13:fb:66:3b:8f:55:36:
         b6:77:44:81:4f:6e:f3:75:bd:f3:9c:83:a2:0d:0e:2b:12:c7:
         49:1e:d7:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOd8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTkxNVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZkOTMtMTAyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaPfxmI4J1y3dZSmjUfRfVYYouEM4AKdNmzzK7ioYucunQdeoY0yJS09xub
1/0ADwTZtNgXwPOk+GjdHPTgvTnNM7czdQpvs6v2ysGmLAbibN3yQmB/MQAKZTbC
WwFUDiODs3YfSjFMVw4Fsg4nZYFmdSa23MmZKZrU3n0x9eN+T80YboPm3Z6US5L9
l9c9rjf8fugew1P8RrYbpVF5B3zqGH0ucG0sZn5wJddotLXvd+NXTNsdvmKp46xP
ZI4TrogJe1Vu/KlUaf6/vq3qL5L8SInnLXwQibBjEz0+EZWbe5lzQm4I7/H/LdVI
EjXxgPGfIdoI7aPPgdEvOurW/kkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBS4HrMh
jqJiTZhNsjhl4zaf0B8+YDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MzRUQwRDU4
RUFFODExRUI5NzkyOTUzQkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGek0DAPBAIAAjAJAwcAIAEN9wqAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtdNo3iZxzy9SAN08z4modmQ3IlEwGLQstaHjLxC1xpvpTIxkDuf5DAQiAAGZm
gDG2+J97TJiuwJ0LP+hqfZYEkxUPVuc5IYI86/uCeu1OYyTHm+DpxOaq8mKXbJi8
djn4LwOKScQUkRcxkHUtvuMG+CiBbO3RW3V2+pJ5hQiqGT6EUf0og/kVrwyY88kh
A07ECYGOxyZMF3aAlWyHLLuiMz7hQMVWbDqLnLZTXYIzaiRiKLgv4pHZ+Qi/SJ11
iLMioM3jGvVpEWZ8vAmC+oH5ZulESaxSz+YqL/VsRFWpwmPfvRP7ZjuPVTa2d0SB
T27zdb3znIOiDQ4rEsdJHtek
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:37 2026 by rpki-client