Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BA9861E16A311F08097BF59C4F9AE02.roa
File:                     0BA9861E16A311F08097BF59C4F9AE02.roa (raw, json)
Hash identifier:          NOvlMkjDFO6xUGKJoT+fPDIVZ0TFii14pZjGp0n/XOI=
Subject key identifier:   6D:18:01:B7:BD:30:E5:A5:D5:E4:01:89:93:F8:81:17:B2:34:9A:77
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F79F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BA9861E16A311F08097BF59C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:52:16 +0000
ROA not before:           Mon 06 Jul 2026 17:52:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58371
IP address blocks:        103.29.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63391 (0xf79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:52:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4beb50-fe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:50:ba:4c:25:6d:f9:9a:5b:20:da:e6:55:
                    a3:40:1c:5e:e0:89:d5:28:52:3d:e5:65:65:92:5b:
                    ec:a2:02:39:30:52:41:75:5e:d8:37:14:33:cd:f8:
                    0e:31:e8:27:a6:b1:d6:38:b5:cf:39:38:72:0c:5b:
                    6f:e2:86:f2:98:2f:c3:0a:09:c9:de:f3:08:24:a5:
                    79:9f:d4:7d:44:55:b9:4f:f7:fe:d1:b7:91:f9:ae:
                    40:76:33:fc:ca:08:f0:8e:43:54:58:a8:b6:9b:b1:
                    ee:f0:af:d6:21:83:fc:fc:a7:d4:f5:1b:d8:a0:3f:
                    ec:0b:ee:9f:91:ab:14:52:99:8f:57:f0:e0:dc:76:
                    7c:46:14:e9:27:17:8f:24:00:94:40:b3:0d:dd:8a:
                    ed:f4:c5:41:e7:cb:ca:d5:10:d4:31:a4:64:dd:ac:
                    68:d2:a3:7c:56:ad:48:95:9b:de:0b:93:28:d8:4d:
                    b5:49:86:ad:be:c6:b8:31:5c:bb:30:4c:6d:b6:0e:
                    62:56:43:28:ed:74:27:62:c9:05:8d:57:11:62:26:
                    7b:84:d9:41:e2:4c:df:ed:ca:22:fe:64:30:7d:36:
                    da:4b:dd:f7:b3:80:2b:01:79:52:cf:d7:f8:d8:80:
                    c6:ec:fd:5f:e0:b5:8b:ab:bd:43:a0:c3:81:86:40:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:01:B7:BD:30:E5:A5:D5:E4:01:89:93:F8:81:17:B2:34:9A:77
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BA9861E16A311F08097BF59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:4a:cd:bd:6a:fe:9d:ae:5d:11:45:c8:b2:b5:b5:1c:56:
         a3:87:6b:7d:4c:54:90:56:a0:70:50:58:20:1a:e5:56:9c:7c:
         85:19:b4:61:33:3d:5c:b9:ce:e3:76:d7:a9:77:16:a7:5e:ae:
         91:86:5a:a7:68:61:6f:dd:96:b7:cd:8e:8e:ad:16:fe:f5:f3:
         b9:bb:50:45:01:aa:c5:d2:11:77:ab:41:ac:29:eb:83:c3:3b:
         ec:53:7d:f6:dd:73:ac:02:bd:8a:be:ae:ea:8d:c5:cd:50:b0:
         bd:20:f3:a8:fe:62:f3:40:4d:85:5d:69:af:ec:91:64:d3:40:
         09:1b:78:fa:a0:d3:27:49:0b:aa:c3:95:a1:18:4b:10:ab:8f:
         b4:f5:4c:ec:a9:9f:41:a9:02:ce:8b:42:fc:3b:e5:f4:1d:b9:
         51:44:3f:b4:f4:8f:d2:8b:ae:98:f1:a2:55:ce:a1:cb:62:ac:
         9b:ad:7a:7e:a3:74:f6:5e:eb:91:04:74:c8:14:a2:47:f4:3b:
         30:87:16:68:af:0b:ae:6d:81:a6:7a:19:1f:a6:11:a4:61:8e:
         3e:53:52:0d:3e:d8:58:a5:76:ee:dc:da:6f:5c:51:16:4d:1b:
         03:12:50:a9:bc:c0:11:32:9e:35:52:fb:ae:2d:45:a0:25:3c:
         28:9c:e6:7f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPefMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NTIxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmViNTAtZmUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALObULpMJW35mlsg2uZVo0AcXuCJ1ShSPeVlZZJb7KICOTBSQXVe2DcUM834
DjHoJ6ax1ji1zzk4cgxbb+KG8pgvwwoJyd7zCCSleZ/UfURVuU/3/tG3kfmuQHYz
/MoI8I5DVFiotpux7vCv1iGD/Pyn1PUb2KA/7Avun5GrFFKZj1fw4Nx2fEYU6ScX
jyQAlECzDd2K7fTFQefLytUQ1DGkZN2saNKjfFatSJWb3guTKNhNtUmGrb7GuDFc
uzBMbbYOYlZDKO10J2LJBY1XEWIme4TZQeJM3+3KIv5kMH022kvd97OAKwF5Us/X
+NiAxuz9X+C1i6u9Q6DDgYZAD80CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRtGAG3
vTDlpdXkAYmT+IEXsjSadzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBCQTk4NjFF
MTZBMzExRjA4MDk3QkY1OUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGcdxTANBgkqhkiG9w0BAQsFAAOCAQEANEpKzb1q/p2uXRFFyLK1
tRxWo4drfUxUkFagcFBYIBrlVpx8hRm0YTM9XLnO43bXqXcWp16ukYZap2hhb92W
t82Ojq0W/vXzubtQRQGqxdIRd6tBrCnrg8M77FN99t1zrAK9ir6u6o3FzVCwvSDz
qP5i80BNhV1pr+yRZNNACRt4+qDTJ0kLqsOVoRhLEKuPtPVM7KmfQakCzotC/Dvl
9B25UUQ/tPSP0ouumPGiVc6hy2Ksm616fqN09l7rkQR0yBSiR/Q7MIcWaK8Lrm2B
pnoZH6YRpGGOPlNSDT7YWKV27tzab1xRFk0bAxJQqbzAETKeNVL7ri1FoCU8KJzm
fw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:05 2026 by rpki-client