Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067D6ABEAEBF11ED801A1768C4F9AE02.roa
File:                     067D6ABEAEBF11ED801A1768C4F9AE02.roa (raw, json)
Hash identifier:          0kcZWJn9gwm3mqqHpoqo7bZ1MIRBa/7thpToKMDrAhA=
Subject key identifier:   21:04:FA:89:61:15:18:74:94:D8:F2:7D:38:40:30:0A:C5:B0:FE:A4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5AE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067D6ABEAEBF11ED801A1768C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:35:36 +0000
ROA not before:           Mon 06 Jul 2026 17:35:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150651
IP address blocks:        103.179.146.0/24 maxlen: 24
                          2001:df1:f240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62894 (0xf5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:35:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be768-bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:13:f7:78:1c:15:72:bb:d0:c8:3c:93:fe:
                    76:68:16:6b:51:e6:04:0b:d1:29:c5:d3:b4:4a:40:
                    9a:2d:24:76:49:a8:c1:28:33:4b:a4:2b:6c:2c:fd:
                    82:4c:fb:bd:d7:bd:08:fd:c6:24:41:0b:cc:62:52:
                    2a:c5:b8:d7:91:5e:0e:b1:10:af:22:7a:0f:c7:ff:
                    9a:cb:e7:e4:fb:d6:6a:01:3c:4e:ba:e6:bf:47:3d:
                    e1:88:07:95:51:e1:2a:22:76:b7:1a:ec:ee:c0:8b:
                    2f:e1:cf:63:e0:79:b7:66:dd:03:ce:ad:b3:1a:f7:
                    12:4c:24:1d:4d:ff:11:56:81:3e:54:e0:59:5f:77:
                    e0:68:10:ef:7f:b6:e5:87:07:67:43:e2:f3:cb:8d:
                    46:39:d5:23:01:ca:49:d8:fd:5c:16:68:bb:6b:80:
                    c4:ea:b0:b4:e2:5d:da:3a:ab:97:d9:97:81:46:f2:
                    3e:5d:5a:b7:e6:d1:2e:dd:61:cc:d5:15:06:a5:29:
                    11:cd:83:de:50:c7:8e:da:e1:74:93:6d:2d:c3:32:
                    f5:20:e1:b7:7c:fe:94:e8:ef:be:f9:39:88:9f:a6:
                    de:86:a7:5f:8a:fc:95:c6:92:97:99:b2:de:28:06:
                    41:68:fd:32:fe:81:48:cd:e4:a4:93:98:5d:f3:4c:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:04:FA:89:61:15:18:74:94:D8:F2:7D:38:40:30:0A:C5:B0:FE:A4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067D6ABEAEBF11ED801A1768C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.146.0/24
                IPv6:
                  2001:df1:f240::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:05:87:f0:48:7a:e4:a4:cd:ad:d7:eb:2b:c1:36:6e:b0:e6:
         9e:dc:30:34:74:ca:14:d2:e0:b7:79:fe:5d:25:f1:eb:4f:c7:
         07:68:7e:d5:23:0e:38:fa:db:62:f5:c0:50:bc:ae:69:bf:c0:
         d5:d8:39:7b:7c:ed:16:cf:91:70:cf:96:99:46:98:df:16:cf:
         91:a1:5d:60:88:1d:7d:93:e8:25:47:46:ad:f2:a8:f0:a2:10:
         23:d7:75:e1:ea:47:d9:07:27:14:38:4a:9f:eb:b4:1b:bc:9d:
         ca:c4:8a:cc:c3:b4:54:74:6f:77:b5:84:ba:ec:54:70:09:e2:
         d2:7f:d5:74:ae:06:79:f5:4e:ac:7d:9d:9e:b6:02:68:8d:a8:
         bd:97:dc:f7:42:05:42:e1:c6:6d:4c:3c:ea:c7:0d:e5:4f:9a:
         77:ba:c9:84:f1:4b:51:60:c2:6d:89:08:d0:2e:5f:05:8f:a8:
         f5:b7:70:e7:42:8f:38:07:6c:71:43:92:9e:9f:0d:9c:7a:e6:
         24:0e:42:cd:60:8d:2a:b6:37:bb:5f:e3:e4:90:d9:3b:e5:94:
         ef:1d:f7:56:ce:cb:83:11:85:31:77:a9:e5:2e:1f:56:d7:57:
         05:9d:f3:f1:54:f9:76:db:26:d0:ef:3c:54:4b:ed:a7:fe:c9:
         7b:8e:63:8d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPWuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzUzNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU3NjgtYmQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIqE/d4HBVyu9DIPJP+dmgWa1HmBAvRKcXTtEpAmi0kdkmowSgzS6QrbCz9
gkz7vde9CP3GJEELzGJSKsW415FeDrEQryJ6D8f/msvn5PvWagE8Trrmv0c94YgH
lVHhKiJ2txrs7sCLL+HPY+B5t2bdA86tsxr3EkwkHU3/EVaBPlTgWV934GgQ73+2
5YcHZ0Pi88uNRjnVIwHKSdj9XBZou2uAxOqwtOJd2jqrl9mXgUbyPl1at+bRLt1h
zNUVBqUpEc2D3lDHjtrhdJNtLcMy9SDht3z+lOjvvvk5iJ+m3oanX4r8lcaSl5my
3igGQWj9Mv6BSM3kpJOYXfNMfEMCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQhBPqJ
YRUYdJTY8n04QDAKxbD+pDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA2N0Q2QUJF
QUVCRjExRUQ4MDFBMTc2OEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGezkjAPBAIAAjAJAwcAIAEN8fJAMA0GCSqGSIb3DQEBCwUAA4IB
AQCQBYfwSHrkpM2t1+srwTZusOae3DA0dMoU0uC3ef5dJfHrT8cHaH7VIw44+tti
9cBQvK5pv8DV2Dl7fO0Wz5Fwz5aZRpjfFs+RoV1giB19k+glR0at8qjwohAj13Xh
6kfZBycUOEqf67QbvJ3KxIrMw7RUdG93tYS67FRwCeLSf9V0rgZ59U6sfZ2etgJo
jai9l9z3QgVC4cZtTDzqxw3lT5p3usmE8UtRYMJtiQjQLl8Fj6j1t3DnQo84B2xx
Q5Kenw2ceuYkDkLNYI0qtje7X+PkkNk75ZTvHfdWzsuDEYUxd6nlLh9W11cFnfPx
VPl22ybQ7zxUS+2n/sl7jmON
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:03 2026 by rpki-client