Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa
File:                     CCDE7654AC8C11EFA02C7636C4F9AE02.roa (raw, json)
Hash identifier:          pubPGOw19RJOiZUJHHX0ejiP5AiBVqjpcpFzr5E1sJU=
Subject key identifier:   78:0F:43:D5:8E:3F:2C:96:83:C3:E0:73:7A:5F:D7:FA:DB:28:CB:79
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E26F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:37:12 +0000
ROA not before:           Sun 31 May 2026 16:37:12 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133304
IP address blocks:        103.105.100.0/24 maxlen: 24
                          103.105.101.0/24 maxlen: 24
                          103.105.102.0/24 maxlen: 24
                          103.159.30.0/24 maxlen: 24
                          103.159.31.0/24 maxlen: 24
                          2400:5ca0::/48 maxlen: 48
                          2400:5ca0:1::/48 maxlen: 48
                          2400:5ca0:2::/48 maxlen: 48
                          2400:5ca0:3::/48 maxlen: 48
                          2400:5ca0:4::/48 maxlen: 48
                          2400:5ca0:5::/48 maxlen: 48
                          2400:5ca0:6::/48 maxlen: 48
                          2400:5ca0:7::/48 maxlen: 48
                          2400:5ca0:8::/48 maxlen: 48
                          2400:5ca0:9::/48 maxlen: 48
                          2400:c5e0::/32 maxlen: 32
                          2400:c5e0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57967 (0xe26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:37:12 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c63b8-37c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:7a:cf:bd:10:e6:6b:d9:39:38:48:d8:de:
                    c9:4b:7d:5a:40:c6:27:f9:cf:08:05:a4:b2:37:b5:
                    ca:89:20:e1:ba:d4:f6:a3:53:19:e1:dd:34:b8:54:
                    2e:9c:10:41:84:94:ad:5f:b7:c4:6b:1b:bc:37:84:
                    41:dc:4b:82:5b:8b:e3:1f:1b:54:a3:de:0d:39:2f:
                    1f:21:da:f3:1a:fa:98:55:75:89:f4:a7:3d:f1:5e:
                    d0:01:2e:ba:76:ec:41:10:a6:92:0c:98:25:2f:7f:
                    30:1b:ce:cd:06:a0:11:ec:f1:33:fb:07:21:36:a0:
                    33:1f:17:c0:99:6f:cf:de:fe:df:e4:ec:33:e9:45:
                    cd:dd:17:84:8c:fe:f9:0f:a7:a9:e9:0c:32:23:d4:
                    bd:34:98:8b:ce:63:71:fe:a6:12:99:df:fa:1e:ee:
                    88:99:dc:99:77:ce:bf:23:00:4e:c4:fc:7f:4c:94:
                    92:03:16:ca:37:b2:6b:f4:78:dc:69:7b:a4:d4:44:
                    49:75:ba:3e:56:31:6e:8b:72:f1:0b:4e:44:55:0c:
                    ff:02:a6:9e:07:08:6e:ad:0e:c4:21:a9:2b:9a:4a:
                    03:18:13:54:15:76:8f:64:d6:df:a3:14:28:19:7b:
                    7a:43:cc:77:ba:36:4f:64:7c:ef:09:c8:31:46:52:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:43:D5:8E:3F:2C:96:83:C3:E0:73:7A:5F:D7:FA:DB:28:CB:79
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.100.0-103.105.102.255
                  103.159.30.0/23
                IPv6:
                  2400:5ca0::-2400:5ca0:9:ffff:ffff:ffff:ffff:ffff
                  2400:c5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:9d:d9:8a:55:84:3e:ea:58:88:5a:d0:86:40:ff:6d:d6:0d:
         b8:15:8a:6f:c3:06:ec:87:6d:d8:be:a9:09:d6:7c:eb:43:03:
         e4:79:d6:de:42:b8:42:ea:48:e8:3e:b8:1e:1c:cf:1a:e0:6f:
         b5:c7:61:ea:ee:4e:bc:26:c1:ec:70:ab:32:4b:45:2d:f2:0c:
         e0:65:2c:6d:02:1a:d5:bf:49:d9:bf:0e:5a:d7:71:88:07:b2:
         54:6c:59:ed:63:49:49:ff:4b:75:62:32:b5:ba:69:89:6b:83:
         bb:88:b8:82:18:e3:1c:95:7e:0d:29:3b:42:52:e6:b7:af:a9:
         3d:35:cd:0c:54:6e:ab:b9:2a:a6:f4:72:12:0c:ab:39:20:97:
         df:0a:b0:3f:bf:e2:5b:d8:48:88:36:6f:76:b4:02:4e:3d:25:
         30:77:56:0d:12:f1:ec:f6:52:04:da:9d:84:d8:55:43:e5:0f:
         ee:3e:b8:d5:58:c7:8a:45:d7:6c:58:c3:43:95:c2:c4:5b:90:
         45:6f:d1:56:c8:7c:69:3b:43:7b:70:69:60:9c:6e:3b:f3:61:
         be:21:3f:94:67:c3:18:84:ed:01:36:92:e4:ba:83:5a:30:2c:
         ad:aa:ed:bb:3f:af:cf:b5:87:c4:b6:47:fe:75:ab:f4:bc:6f:
         44:40:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:47 2026 by rpki-client