Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
File:                     10BD3660FDAF11ECAC854871C4F9AE02.roa (raw, json)
Hash identifier:          G6rAndPE9S08AvKbf0wq1XJw6XdoyB4m4tgOBtDOPDM=
Subject key identifier:   2C:50:75:7F:1C:25:A6:84:BC:13:0A:7F:92:13:32:DC:39:FE:22:A2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:30:16 +0000
ROA not before:           Sun 31 May 2026 17:30:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149554
IP address blocks:        103.189.48.0/24 maxlen: 24
                          2400:d920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59591 (0xe8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:30:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7027-2947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:52:06:47:e0:50:0a:2b:49:d0:55:e5:d3:
                    27:a7:04:7e:ec:28:76:33:c7:c8:d8:0b:66:1e:c8:
                    48:55:75:bf:fc:e6:39:ce:8e:7b:fe:30:47:97:0d:
                    b2:91:18:72:05:a1:ba:d8:94:aa:0b:ea:d4:17:c0:
                    39:b5:48:51:77:02:c8:5b:3c:b1:b2:a9:a8:32:57:
                    90:f8:29:28:73:ce:14:5b:1b:aa:e2:b0:bb:34:63:
                    87:1e:50:c3:be:eb:3f:a4:de:df:0c:28:8a:21:cf:
                    79:39:0f:4b:62:02:73:01:61:62:70:d6:f7:71:86:
                    57:00:b7:8d:ce:1d:5a:a1:1c:52:3b:03:97:a4:27:
                    c2:fc:73:b0:45:fb:0f:94:3a:ce:e0:a0:d2:49:36:
                    01:bd:5f:22:d4:9d:bc:48:89:c3:82:63:40:e6:17:
                    a5:fc:83:b8:d1:f7:98:da:89:9a:3f:ed:23:0e:c2:
                    d5:77:43:c4:bf:e3:2c:2d:82:e2:88:85:a8:37:11:
                    25:52:b4:51:8c:54:b6:13:b4:06:03:97:c3:38:70:
                    ac:44:c3:dd:c2:f5:38:91:27:6e:51:2e:59:61:84:
                    ba:9d:e4:71:b5:ef:ec:07:2e:fb:50:de:1b:04:41:
                    ac:65:c6:a1:25:f4:0d:73:d1:f1:8a:87:95:60:cb:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:75:7F:1C:25:A6:84:BC:13:0A:7F:92:13:32:DC:39:FE:22:A2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.48.0/24
                IPv6:
                  2400:d920::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:04:70:99:08:f4:1b:1b:de:2a:7d:64:00:bf:18:a4:3c:
         79:3a:83:6f:7e:fe:0c:d2:58:18:1d:4f:af:4a:28:64:df:9d:
         1d:da:f0:1a:88:11:25:51:05:de:a6:ac:2f:2d:84:bc:84:d4:
         65:84:10:80:15:0a:0d:82:14:15:31:aa:e6:90:05:8b:3c:31:
         49:a5:eb:df:d7:85:71:8f:24:c7:0b:8b:70:52:2b:d6:f8:58:
         95:47:2e:58:57:c4:f4:79:0f:31:72:11:d6:21:fb:a3:94:67:
         eb:b3:b3:d8:9c:98:d8:65:08:a0:55:e5:8a:0a:93:53:4d:75:
         00:11:a6:f1:09:a8:09:e1:b7:5c:da:f4:ff:44:e2:27:7e:63:
         82:73:0a:21:ef:92:0b:29:fd:55:50:66:a4:19:f5:33:eb:3f:
         22:da:15:92:95:f4:5b:a9:c0:ef:9a:27:86:4c:5a:b1:3f:91:
         84:a5:64:bd:e2:10:60:0a:22:95:66:50:74:68:71:de:18:4c:
         c8:34:77:05:01:78:50:38:e7:73:ff:1f:8d:31:32:3d:81:c5:
         ee:6a:16:e8:88:0a:2d:69:5c:db:bf:72:1a:8d:e3:e7:6e:d6:
         e0:d6:7c:ec:ec:9d:40:5e:e7:81:b9:86:6c:54:92:49:fb:d4:
         19:9a:35:76
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOjHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzAxNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcwMjctMjk0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJjSUgZH4FAKK0nQVeXTJ6cEfuwodjPHyNgLZh7ISFV1v/zmOc6Oe/4wR5cN
spEYcgWhutiUqgvq1BfAObVIUXcCyFs8sbKpqDJXkPgpKHPOFFsbquKwuzRjhx5Q
w77rP6Te3wwoiiHPeTkPS2ICcwFhYnDW93GGVwC3jc4dWqEcUjsDl6QnwvxzsEX7
D5Q6zuCg0kk2Ab1fItSdvEiJw4JjQOYXpfyDuNH3mNqJmj/tIw7C1XdDxL/jLC2C
4oiFqDcRJVK0UYxUthO0BgOXwzhwrETD3cL1OJEnblEuWWGEup3kcbXv7Acu+1De
GwRBrGXGoSX0DXPR8YqHlWDLkGkCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQsUHV/
HCWmhLwTCn+SEzLcOf4iojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEwQkQzNjYw
RkRBRjExRUNBQzg1NDg3MUM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAGe9MDANBAIAAjAHAwUAJADZIDANBgkqhkiG9w0BAQsFAAOCAQEA
LcIEcJkI9Bsb3ip9ZAC/GKQ8eTqDb37+DNJYGB1Pr0ooZN+dHdrwGogRJVEF3qas
Ly2EvITUZYQQgBUKDYIUFTGq5pAFizwxSaXr39eFcY8kxwuLcFIr1vhYlUcuWFfE
9HkPMXIR1iH7o5Rn67Oz2JyY2GUIoFXligqTU011ABGm8QmoCeG3XNr0/0TiJ35j
gnMKIe+SCyn9VVBmpBn1M+s/ItoVkpX0W6nA75onhkxasT+RhKVkveIQYAoilWZQ
dGhx3hhMyDR3BQF4UDjnc/8fjTEyPYHF7moW6IgKLWlc279yGo3j527W4NZ87Oyd
QF7ngbmGbFSSSfvUGZo1dg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:15 2026 by rpki-client