Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa
File:                     CC56AAE095FA11ECB7EB9262C4F9AE02.roa (raw, json)
Hash identifier:          k0peoHbanI3tC5IN/G7rgPlrhqh5Php4J0I5EmSX8Yo=
Subject key identifier:   EC:32:35:CC:B3:06:FC:8B:05:7E:C2:B4:AF:6F:A1:BA:8B:03:47:17
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FE13
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa
Signing time:             Mon 12 Oct 2026 10:23:27 +0000
ROA not before:           Mon 12 Oct 2026 10:23:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7633
IP address blocks:        203.129.222.0/24 maxlen: 24
                          203.193.161.0/24 maxlen: 24
                          2402:ef1c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65043 (0xfe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 12 10:23:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6accb51f-8b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:35:c4:3e:eb:f4:6b:c6:46:10:f3:39:86:
                    ef:6a:7f:65:30:da:ee:3c:6a:0a:5c:a8:39:dd:25:
                    a0:eb:b5:ff:3f:0e:7b:98:28:c1:03:e7:8b:b9:27:
                    68:e8:4d:b8:5c:a4:27:d2:b1:aa:2c:4d:fe:8a:5b:
                    74:5a:c6:79:99:b2:2d:2d:a9:6c:d8:a0:e1:37:2d:
                    87:7d:1e:4c:5e:5c:d0:5d:85:f7:06:5d:0b:ea:c9:
                    12:ec:c7:0e:18:bc:da:f2:36:ba:e2:12:c4:66:fc:
                    e1:9d:1a:1e:62:3f:14:fd:23:01:c7:4a:52:8c:86:
                    f2:59:f7:88:5f:e2:69:b7:2e:f4:8c:01:8d:8e:87:
                    a3:19:00:0c:c3:14:cf:82:ba:66:0c:30:c6:1a:82:
                    70:b0:d8:8e:77:c9:86:75:04:99:82:4b:67:a5:33:
                    cd:e4:36:07:08:14:b0:86:b6:ed:4c:c9:69:2c:6b:
                    89:4f:9a:9e:79:30:35:49:2e:09:f4:15:9e:05:c3:
                    16:2b:fc:e7:b2:75:18:ec:b2:ca:76:53:b6:ce:f0:
                    91:35:3b:85:98:b6:4b:46:7d:81:bf:29:83:e9:9b:
                    a4:83:66:a7:28:8c:22:1a:b0:3b:cc:fa:dc:3a:1d:
                    0f:43:7e:71:de:b9:02:86:e9:a1:46:21:84:98:81:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:32:35:CC:B3:06:FC:8B:05:7E:C2:B4:AF:6F:A1:BA:8B:03:47:17
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC56AAE095FA11ECB7EB9262C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.222.0/24
                  203.193.161.0/24
                IPv6:
                  2402:ef1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:13:3d:24:f1:dc:29:61:03:5f:d1:61:b4:64:93:7a:b7:
         8a:87:bf:b8:ec:bd:d9:4e:91:15:3a:4d:ba:26:40:29:a9:14:
         e4:2c:87:e2:38:5f:65:d0:32:d8:dd:87:fc:92:e8:6b:34:60:
         62:9d:0d:11:40:6a:2f:da:c6:22:a1:c0:58:0b:51:1b:cc:10:
         ef:67:91:e0:38:35:b2:99:80:a6:1f:3d:92:17:39:d6:5c:7c:
         56:05:46:91:69:e0:57:a7:d7:f6:d3:4f:6a:ed:73:ef:ef:db:
         48:08:43:2d:00:10:40:a7:37:c5:47:1a:21:78:de:86:d7:10:
         fc:59:b2:d4:e1:7b:c5:a4:1e:b4:e4:80:c1:30:9e:5c:3c:90:
         37:d6:75:d2:13:9b:21:e9:29:f7:53:1e:4b:dc:81:ec:8d:19:
         bd:1c:68:5b:07:92:c1:30:ef:43:fb:ba:5a:bf:b7:be:a9:11:
         b5:3e:09:fa:7b:f2:73:a9:22:61:21:cd:26:04:1a:e6:2f:00:
         5a:8f:4a:c2:a6:e0:9a:54:ae:ff:db:37:2c:0a:03:19:c6:9a:
         a5:7a:be:44:59:ac:c5:21:a1:5e:7d:c0:43:22:00:ed:5a:ac:
         1b:ee:ee:cb:01:7b:88:75:3a:6f:85:9d:65:ad:81:94:cf:97:
         91:45:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:21:59 2026 by rpki-client