Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa
File:                     DE539DAA20FE11F1A384548E1D3D8C67.roa (raw, json)
Hash identifier:          VzKbWz6IbADHnPnrxo3GKPVfurgrsyw++NMiLDPKupk=
Subject key identifier:   64:74:59:7C:73:B4:74:E1:80:86:C6:02:FB:DF:FA:2E:53:AB:2E:F3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DC38
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa
Signing time:             Mon 16 Mar 2026 06:10:45 +0000
ROA not before:           Mon 16 Mar 2026 06:10:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141821
IP address blocks:        103.166.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56376 (0xdc38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 16 06:10:45 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69b79ee5-df2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:7c:61:3d:aa:90:db:7b:27:9c:7d:83:5e:
                    e4:84:21:7a:11:83:1d:13:bc:f2:85:20:17:f7:69:
                    34:a6:07:8c:1f:1f:39:60:b2:0c:e3:62:69:99:bb:
                    ff:81:3f:e7:78:96:4a:5a:f6:2b:aa:e4:20:de:95:
                    81:5f:7a:d2:8e:cf:0c:34:95:ea:9b:83:b2:5b:89:
                    39:5f:24:ee:1d:48:e8:14:c2:b4:9a:e6:ac:6d:6b:
                    da:30:c0:c5:4e:0d:fb:0e:2c:1a:1a:40:4a:b3:4d:
                    24:d7:11:a1:11:73:47:8b:a7:b4:63:65:cb:96:a7:
                    8f:e4:0e:7a:0c:ea:cd:b3:71:df:e8:72:4d:c3:28:
                    e0:46:5b:b6:38:8a:c9:d1:26:35:79:0f:a4:15:17:
                    24:b4:ba:4c:7b:2c:3f:08:e6:d4:01:d2:8b:95:bc:
                    44:b7:37:e1:d5:d9:87:05:46:f3:92:28:2b:17:89:
                    9d:b4:7e:f2:e3:cf:d7:1f:03:3b:64:b9:bc:84:2c:
                    8b:5c:c0:d3:1b:74:47:c1:dd:69:54:64:cb:55:5c:
                    6e:15:93:b5:18:36:fd:0d:79:04:7f:66:32:d7:c0:
                    f6:f6:0a:84:34:45:8e:a3:07:ba:88:22:57:7e:41:
                    ee:68:e7:65:fd:8e:33:fd:bd:e6:c7:d3:d7:71:68:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:74:59:7C:73:B4:74:E1:80:86:C6:02:FB:DF:FA:2E:53:AB:2E:F3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE539DAA20FE11F1A384548E1D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:58:42:51:a6:2e:3d:f8:80:a9:7e:66:61:de:cf:8a:d0:81:
         c0:fc:7c:c6:60:4a:fa:10:97:de:24:88:d3:13:44:b1:88:7d:
         97:66:87:5d:a0:23:7d:36:94:6f:60:2e:10:12:e2:c7:01:3d:
         7c:05:a3:8d:76:09:7a:55:7d:84:f4:4e:d5:61:b4:e1:e8:9e:
         bc:0b:74:fe:ea:99:8f:f1:79:f2:9a:37:7a:55:47:02:b6:ba:
         04:71:30:9f:af:78:1a:87:f4:a3:b2:8f:27:07:5c:01:7e:f3:
         9e:6e:8b:42:ee:f2:48:aa:b4:e6:dc:73:56:a5:eb:12:2a:28:
         59:15:b6:3d:53:6b:d2:03:00:97:a9:80:e5:3c:9a:a8:6f:39:
         b0:7a:61:0e:4e:01:1d:df:75:8f:2a:d9:54:3d:e2:fa:5b:5f:
         9a:38:29:2f:55:bb:5c:ae:31:dd:7f:2e:a3:4c:65:e4:58:9d:
         b7:db:ef:59:c0:49:79:8f:1f:8e:b7:80:c6:79:87:7c:49:a2:
         49:4c:df:eb:8a:dc:53:1d:c8:5b:72:de:14:92:c6:08:39:03:
         ed:d7:8d:72:f3:ea:b2:b3:ec:93:53:74:a2:8d:7a:95:af:28:
         82:69:e4:9c:9a:ba:74:79:08:b9:0d:91:87:20:a4:85:fc:c0:
         f5:89:cf:db
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANw4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDMxNjA2MTA0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjliNzllZTUtZGYyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKI4fGE9qpDbeyecfYNe5IQhehGDHRO88oUgF/dpNKYHjB8fOWCyDONiaZm7
/4E/53iWSlr2K6rkIN6VgV960o7PDDSV6puDsluJOV8k7h1I6BTCtJrmrG1r2jDA
xU4N+w4sGhpASrNNJNcRoRFzR4untGNly5anj+QOegzqzbNx3+hyTcMo4EZbtjiK
ydEmNXkPpBUXJLS6THssPwjm1AHSi5W8RLc34dXZhwVG85IoKxeJnbR+8uPP1x8D
O2S5vIQsi1zA0xt0R8HdaVRky1VcbhWTtRg2/Q15BH9mMtfA9vYKhDRFjqMHuogi
V35B7mjnZf2OM/295sfT13FojmECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRkdFl8
c7R04YCGxgL73/ouU6su8zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RFNTM5REFB
MjBGRTExRjFBMzg0NTQ4RTFEM0Q4QzY3LnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWem2jANBgkqhkiG9w0BAQsFAAOCAQEAdVhCUaYuPfiAqX5mYd7P
itCBwPx8xmBK+hCX3iSI0xNEsYh9l2aHXaAjfTaUb2AuEBLixwE9fAWjjXYJelV9
hPRO1WG04eievAt0/uqZj/F58po3elVHAra6BHEwn694Gof0o7KPJwdcAX7znm6L
Qu7ySKq05txzVqXrEiooWRW2PVNr0gMAl6mA5TyaqG85sHphDk4BHd91jyrZVD3i
+ltfmjgpL1W7XK4x3X8uo0xl5Fidt9vvWcBJeY8fjreAxnmHfEmiSUzf64rcUx3I
W3LeFJLGCDkD7deNcvPqsrPsk1N0oo16la8ogmnknJq6dHkIuQ2RhyCkhfzA9YnP
2w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:54:19 2026 by rpki-client