Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa
File:                     0C735BD69E9011F0B89DA40FC4F9AE02.roa (raw, json)
Hash identifier:          nNAI+JkZg2j/OkQtjnczhQ8mBdOsYhrjRcEcDsk2HN8=
Subject key identifier:   5F:CE:29:5B:79:A1:21:69:78:1D:42:C3:26:21:41:80:0C:8A:23:34
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:20:36 +0000
ROA not before:           Sun 31 May 2026 17:20:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142474
IP address blocks:        103.170.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59302 (0xe7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:20:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6de4-dbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:9c:94:77:39:68:87:69:4b:df:f3:60:86:
                    d5:a8:a7:31:63:ec:d4:65:b8:62:33:cf:26:5f:e4:
                    f8:b2:08:7f:20:2c:fc:e0:36:fe:f0:1a:fd:f4:0d:
                    b3:80:5c:29:c5:99:3d:a9:00:9b:aa:03:3e:10:94:
                    ed:f5:fc:08:cd:88:29:82:51:f2:ff:3d:19:40:b9:
                    46:c0:50:a3:36:38:da:ab:40:50:53:e7:a4:c3:1e:
                    d9:0b:c0:ae:8f:0f:ef:ee:c5:4b:1e:60:60:65:3b:
                    6f:a4:f4:09:13:49:a5:2a:7d:85:be:bb:3d:2e:c3:
                    28:58:34:b5:7f:9e:75:33:36:2f:16:93:43:a0:1d:
                    b7:3c:91:47:17:a7:ee:08:6d:89:2b:7a:49:1e:d4:
                    98:08:83:13:97:25:25:49:59:a6:5c:93:50:40:2c:
                    66:4e:8d:90:60:a4:23:d0:f0:07:01:6d:dd:32:fd:
                    b8:d1:01:5d:d4:f1:a8:1d:2a:8a:40:32:b0:a1:d0:
                    30:9a:5c:e5:49:97:78:bf:bd:ae:03:9a:dc:20:8c:
                    a2:08:9c:73:cd:b2:4a:a9:df:30:d1:dd:50:f4:2c:
                    7c:27:d2:c8:61:b1:9f:0c:f0:4c:4a:6c:2c:96:75:
                    0b:2c:83:fb:e9:16:40:a6:bf:1d:18:15:ba:12:af:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CE:29:5B:79:A1:21:69:78:1D:42:C3:26:21:41:80:0C:8A:23:34
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:95:54:1e:cf:94:96:76:79:c0:d2:f8:93:8e:d7:61:ca:
         b7:ce:70:7f:14:1a:92:28:c9:e5:0d:ba:0b:95:78:ea:0f:4f:
         3d:13:d4:e4:34:b3:cc:1f:aa:dc:6b:c2:36:4f:d6:37:45:61:
         62:c1:8b:fc:81:66:54:0e:93:1a:63:dc:79:ea:df:e0:7c:8b:
         65:93:66:c6:93:ec:e9:90:65:cc:69:0b:0a:6a:66:8a:10:89:
         13:58:1a:ec:20:7d:43:42:58:3c:33:d5:f5:d9:f3:0d:01:0a:
         2d:94:64:2c:54:7f:1e:99:c1:d2:ad:9b:9e:a7:2e:80:39:3c:
         27:05:80:51:db:35:7c:51:1a:51:2e:cc:dd:bb:89:b7:53:bd:
         4d:5a:c7:04:cf:57:1a:a9:b1:41:7b:e0:a4:18:e3:d1:b9:83:
         07:93:e5:f2:4e:16:04:13:02:8a:e1:99:30:86:3f:42:e0:63:
         bd:95:74:71:5f:32:7a:32:56:8c:1b:01:6e:f3:99:fc:98:6c:
         a3:c0:bb:38:be:64:9d:07:1c:98:b9:52:ff:7b:fc:61:1f:c9:
         ae:47:01:d4:61:54:a0:40:eb:9d:9d:0c:6b:ff:53:fe:08:25:
         db:af:35:01:f4:cb:5b:27:50:48:9a:1b:eb:32:71:91:bf:9f:
         6f:08:04:7d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOemMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjAzNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZkZTQtZGJkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKdZnJR3OWiHaUvf82CG1ainMWPs1GW4YjPPJl/k+LIIfyAs/OA2/vAa/fQN
s4BcKcWZPakAm6oDPhCU7fX8CM2IKYJR8v89GUC5RsBQozY42qtAUFPnpMMe2QvA
ro8P7+7FSx5gYGU7b6T0CRNJpSp9hb67PS7DKFg0tX+edTM2LxaTQ6AdtzyRRxen
7ghtiSt6SR7UmAiDE5clJUlZplyTUEAsZk6NkGCkI9DwBwFt3TL9uNEBXdTxqB0q
ikAysKHQMJpc5UmXeL+9rgOa3CCMogicc82ySqnfMNHdUPQsfCfSyGGxnwzwTEps
LJZ1CyyD++kWQKa/HRgVuhKvNrMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRfzilb
eaEhaXgdQsMmIUGADIojNDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBDNzM1QkQ2
OUU5MDExRjBCODlEQTQwRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeqajANBgkqhkiG9w0BAQsFAAOCAQEAuw2VVB7PlJZ2ecDS+JOO
12HKt85wfxQakijJ5Q26C5V46g9PPRPU5DSzzB+q3GvCNk/WN0VhYsGL/IFmVA6T
GmPceerf4HyLZZNmxpPs6ZBlzGkLCmpmihCJE1ga7CB9Q0JYPDPV9dnzDQEKLZRk
LFR/HpnB0q2bnqcugDk8JwWAUds1fFEaUS7M3buJt1O9TVrHBM9XGqmxQXvgpBjj
0bmDB5Pl8k4WBBMCiuGZMIY/QuBjvZV0cV8yejJWjBsBbvOZ/Jhso8C7OL5knQcc
mLlS/3v8YR/JrkcB1GFUoEDrnZ0Ma/9T/ggl2681AfTLWydQSJob6zJxkb+fbwgE
fQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:15 2026 by rpki-client