Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC70680FE3311EEBBCB8E1BC4F9AE02.roa
File:                     FDC70680FE3311EEBBCB8E1BC4F9AE02.roa (raw, json)
Hash identifier:          nR2lpLkYb6oubtZm2rwITM82lFqS5zaki8vT6z1OKXc=
Subject key identifier:   FF:57:3F:42:63:8B:55:85:CE:EB:19:80:DD:C7:EF:38:D4:4D:5E:1F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E99F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC70680FE3311EEBBCB8E1BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:37:38 +0000
ROA not before:           Sun 31 May 2026 17:37:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151089
IP address blocks:        103.135.66.0/23 maxlen: 24
                          2001:df2:6440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59807 (0xe99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:37:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c71e1-b3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:3e:a7:ae:c1:10:01:4c:04:d1:25:8e:54:
                    f4:42:45:b2:77:e7:51:bb:b9:4b:89:09:7e:ce:67:
                    35:6a:36:77:ed:ea:9d:d7:32:70:e9:33:b8:f5:46:
                    66:0f:40:55:df:96:21:17:c2:01:79:e4:9b:23:2f:
                    ac:52:cf:86:81:5b:d4:75:0c:83:f1:e7:3d:2d:50:
                    b1:01:c4:4a:22:27:75:6e:f3:36:80:fe:0a:61:23:
                    38:b0:06:85:ed:9c:b3:1f:97:19:c9:1f:b1:78:ca:
                    b4:11:8c:6c:0a:97:0a:ea:5e:e4:78:26:d9:00:f2:
                    b4:67:bf:03:8a:21:a6:63:b3:da:6e:9f:e8:b8:70:
                    e0:94:20:80:9a:d8:27:26:be:dc:d8:69:0c:4c:51:
                    76:f5:92:d8:6d:82:29:e1:63:ab:14:e1:5a:f9:0a:
                    b3:fc:34:12:a9:08:37:44:25:16:84:9b:5f:92:25:
                    0e:bb:cc:c4:87:fc:97:8f:78:a8:25:c0:07:77:9b:
                    70:de:b9:7c:99:41:0e:fe:72:aa:a2:a4:01:67:1e:
                    1e:40:02:5f:24:65:14:7b:a1:15:60:73:4e:02:af:
                    75:41:2f:3a:bc:cf:43:ae:11:10:36:64:2d:51:c2:
                    e3:3c:b2:a0:55:34:47:4f:c9:e6:66:cd:1d:44:f2:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:57:3F:42:63:8B:55:85:CE:EB:19:80:DD:C7:EF:38:D4:4D:5E:1F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC70680FE3311EEBBCB8E1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.66.0/23
                IPv6:
                  2001:df2:6440::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:8e:06:80:dc:52:29:2b:d0:40:11:a4:09:0a:af:d4:64:
         cb:78:ea:6c:02:73:02:5a:6c:ce:aa:d4:56:82:4f:95:d4:55:
         8e:2e:e9:bc:de:22:d3:ed:e5:d2:74:5c:65:05:ed:05:7c:c3:
         30:37:7a:92:1c:ae:35:12:03:5a:16:68:e0:9b:02:5d:73:4e:
         cc:cd:f7:69:8b:49:c0:7e:9d:38:ba:c9:55:e4:79:e9:d7:40:
         06:38:c3:54:e3:3f:0e:7c:c1:3e:d9:01:42:3b:bc:33:e9:bf:
         cd:d5:33:b8:c5:b6:fe:b4:49:90:18:4a:69:c0:91:af:7e:17:
         43:8a:3d:bf:0a:d2:02:c4:41:c6:90:ed:7f:13:a7:31:8c:45:
         6a:9f:d2:b9:f0:c4:6a:91:5d:9f:86:e7:17:5a:3b:18:7c:63:
         89:ce:b7:22:62:fa:18:c9:95:0c:34:b6:c8:e5:46:77:7f:05:
         5d:74:c3:42:de:4d:d3:ee:b3:18:1c:79:9d:08:b1:2c:f8:e8:
         2c:79:1c:d6:5a:ca:f2:d5:74:de:99:8a:d6:04:22:f3:f9:4c:
         43:44:4c:f0:d8:6b:11:10:1c:c1:04:80:d7:aa:98:72:8b:94:
         f7:1c:62:46:28:7c:8c:e7:5e:28:76:f8:20:3a:2b:21:fc:a2:
         7b:d4:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:25 2026 by rpki-client