Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/7A589EF8896E11F18F7B77C7B0EE528E.roa
File:                     7A589EF8896E11F18F7B77C7B0EE528E.roa (raw, json)
Hash identifier:          YjncROHXee4cgit/qVA06wv/ruza6MTQg+7vto5f9tQ=
Subject key identifier:   E0:61:5D:6D:F2:1D:D6:CC:F9:6C:19:B7:DD:89:26:06:DB:2C:E3:6D
Certificate issuer:       /CN=A918664E/serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
Certificate serial:       38
Authority key identifier: 51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/7A589EF8896E11F18F7B77C7B0EE528E.roa
Signing time:             Mon 05 Oct 2026 02:50:43 +0000
ROA not before:           Mon 05 Oct 2026 02:50:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150108
IP address blocks:        103.122.222.0/24 maxlen: 24
                          2400:f160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=51A3EA8A59B1135D3F7092852CCBF60C99C63CF7
        Validity
            Not Before: Oct  5 02:50:43 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ac31083-97bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:3b:b1:b7:dd:3d:70:b2:d2:83:d0:10:a6:
                    42:a4:02:80:2f:87:fc:ec:bf:5f:e2:c2:59:b2:0f:
                    f8:4d:9f:ca:92:ea:9c:d0:be:e7:56:b2:c9:be:4a:
                    39:d1:4f:7a:66:f6:dd:b0:03:a8:71:35:3d:fe:33:
                    1c:af:9a:c9:6f:41:f3:a4:ee:79:45:53:2a:2c:30:
                    6f:ac:8e:66:da:9b:c5:46:9e:3d:2b:d5:f6:fd:a3:
                    72:e0:a2:b3:fa:4b:32:11:6d:2e:11:0c:e6:9d:8d:
                    60:b4:46:8b:b9:b9:b7:7b:e0:d0:48:15:e3:19:e8:
                    5d:04:70:92:77:6d:15:cb:e6:1f:15:c1:01:06:7a:
                    0a:2e:af:9b:d9:8e:ef:4e:e5:06:a4:4b:e1:12:81:
                    64:d9:d1:0c:b2:5c:32:26:fe:1e:3e:8b:1b:9a:6c:
                    22:fc:f5:75:ae:62:11:36:c7:8b:ef:89:0e:9b:49:
                    79:58:8c:58:d1:ff:0a:09:1c:c3:8e:8e:4d:6f:e5:
                    c7:fc:af:42:98:1d:e0:72:8f:9f:dc:16:fb:ea:2f:
                    e0:8d:44:4b:d7:ea:e3:19:51:65:22:c1:fb:60:c2:
                    0d:9e:a0:84:33:35:91:4a:72:55:34:dc:8a:1d:9c:
                    52:47:aa:c3:d6:e1:c1:ca:0a:f3:07:94:15:9b:34:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:61:5D:6D:F2:1D:D6:CC:F9:6C:19:B7:DD:89:26:06:DB:2C:E3:6D
            X509v3 Authority Key Identifier:
                keyid:51:A3:EA:8A:59:B1:13:5D:3F:70:92:85:2C:CB:F6:0C:99:C6:3C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/UaPqilmxE10_cJKFLMv2DJnGPPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaPqilmxE10_cJKFLMv2DJnGPPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/7A589EF8896E11F18F7B77C7B0EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.222.0/24
                IPv6:
                  2400:f160::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:9c:de:a3:d5:b1:4c:a8:7e:bf:46:6e:a2:03:1a:5d:aa:
         b1:8a:34:e7:a7:5a:88:ae:8a:e7:ed:88:2a:06:0e:a9:15:2e:
         e8:e7:95:bb:61:05:33:f1:b1:2b:cf:89:cf:e8:35:d6:89:73:
         bb:20:c4:43:f9:de:1a:bd:2a:11:53:f3:86:90:70:2d:7b:43:
         50:0b:28:40:11:5d:58:71:c9:d8:8f:26:c0:d9:4a:2e:a4:d3:
         de:73:3e:13:de:e4:59:ee:e1:6a:65:fb:69:11:43:7e:2f:a6:
         8c:51:e7:36:c1:85:c6:a9:a8:ee:f0:d2:f2:10:21:a8:d7:43:
         3d:45:f3:87:9e:03:2a:a9:1e:b9:38:a7:71:96:8e:4b:91:04:
         e4:9c:eb:ba:ea:b1:e8:9e:66:5e:7d:35:77:96:d7:6f:7a:84:
         2f:a4:08:a7:88:4b:c7:c2:af:5a:ca:8e:88:be:b9:e7:d4:f5:
         68:1f:ff:b2:61:e6:c2:82:11:29:93:6f:f5:6d:8e:5b:20:7c:
         4e:96:e0:9c:3d:3b:d5:ee:19:cb:75:40:33:3a:4e:e5:1f:35:
         19:65:6b:b4:b8:b9:87:46:4a:f4:f4:05:3b:b0:d4:06:04:b2:
         41:62:d7:a4:f3:d0:8c:49:26:f9:28:fd:f0:e0:c5:b2:4b:6b:
         19:57:ba:da
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjY0RTExMC8GA1UEBRMoNTFBM0VBOEE1OUIxMTM1RDNGNzA5Mjg1MkNDQkY2MEM5
OUM2M0NGNzAeFw0yNjEwMDUwMjUwNDNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYzMxMDgzLTk3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjizuxt909cLLSg9AQpkKkAoAvh/zsv1/iwlmyD/hNn8qS6pzQvudWssm+SjnR
T3pm9t2wA6hxNT3+MxyvmslvQfOk7nlFUyosMG+sjmbam8VGnj0r1fb9o3LgorP6
SzIRbS4RDOadjWC0Rou5ubd74NBIFeMZ6F0EcJJ3bRXL5h8VwQEGegour5vZju9O
5QakS+ESgWTZ0QyyXDIm/h4+ixuabCL89XWuYhE2x4vviQ6bSXlYjFjR/woJHMOO
jk1v5cf8r0KYHeByj5/cFvvqL+CNREvX6uMZUWUiwftgwg2eoIQzNZFKclU03Iod
nFJHqsPW4cHKCvMHlBWbNP87AgMBAAGjggJvMIICazAdBgNVHQ4EFgQU4GFdbfId
1sz5bBm33YkmBtss420wHwYDVR0jBBgwFoAUUaPqilmxE10/cJKFLMv2DJnGPPcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NjRFL0RGOTAwRTM2Q0VF
MjExRURBNDFDMzgxQ0M0RjlBRTAyL1VhUHFpbG14RTEwX2NKS0ZMTXYyREpuR1BQ
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVWFQcWlsbXhFMTBfY0pLRkxNdjJESm5HUFBjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjY0RS9ERjkwMEUzNkNFRTIxMUVEQTQxQzM4MUNDNEY5QUUwMi83QTU4OUVGODg5
NkUxMUYxOEY3Qjc3QzdCMEVFNTI4RS5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBABnet4wDQQCAAIwBwMFACQA8WAwDQYJKoZIhvcNAQELBQADggEBAIrP
nN6j1bFMqH6/Rm6iAxpdqrGKNOenWoiuiuftiCoGDqkVLujnlbthBTPxsSvPic/o
NdaJc7sgxEP53hq9KhFT84aQcC17Q1ALKEARXVhxydiPJsDZSi6k095zPhPe5Fnu
4Wpl+2kRQ34vpoxR5zbBhcapqO7w0vIQIajXQz1F84eeAyqpHrk4p3GWjkuRBOSc
67rqseieZl59NXeW1296hC+kCKeIS8fCr1rKjoi+uefU9Wgf/7Jh5sKCESmTb/Vt
jlsgfE6W4Jw9O9XuGct1QDM6TuUfNRlla7S4uYdGSvT0BTuw1AYEskFi16Tz0IxJ
Jvko/fDgxbJLaxlXuto=
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:59:16 2026 by rpki-client