Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa
File:                     15E8D2B837BA11EC91248D3FC4F9AE02.roa (raw, json)
Hash identifier:          39tqHRJz2m1yKXyIKg0Kbsh5mM7bMuFhIGvH7KXFuDM=
Subject key identifier:   F7:2A:28:3A:BD:66:C3:03:3E:89:49:DC:37:50:CB:26:8F:9B:5B:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F410
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:21:59 +0000
ROA not before:           Mon 06 Jul 2026 17:21:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146895
IP address blocks:        103.173.44.0/23 maxlen: 24
                          2407:e140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62480 (0xf410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:21:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be437-26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:a5:c4:9c:3f:b8:ee:68:11:f1:c4:ba:1d:
                    d5:93:38:b2:24:76:7d:3b:cf:a9:59:93:42:2a:da:
                    a5:e0:3c:be:30:69:0a:8b:44:af:9c:d3:7c:0d:23:
                    c3:76:18:d4:d8:6d:1d:31:60:10:44:58:01:53:c9:
                    7c:94:cc:fd:e0:7b:c0:ae:9e:83:12:2a:59:99:f1:
                    69:03:06:78:f1:13:c3:33:13:29:b1:b8:e1:ae:dd:
                    d1:df:19:fd:45:f2:6a:ff:27:41:c1:af:7f:54:b9:
                    67:e5:e4:4f:0d:01:56:20:b5:dd:b6:01:6a:5e:1f:
                    12:db:94:3f:c5:80:12:d6:d3:1f:8a:41:1b:e7:ae:
                    47:0e:a9:51:52:e2:8b:79:16:d0:6a:1b:2b:a1:45:
                    c8:3a:5b:0b:67:bb:ca:cb:fb:12:6a:3a:25:ae:29:
                    66:0e:62:04:93:fb:ab:96:b4:da:a3:55:17:83:2e:
                    f8:97:77:22:21:07:34:02:48:d6:ec:4a:0a:62:0e:
                    73:58:69:6d:7b:fc:fb:46:bd:57:c3:b0:0d:64:34:
                    3d:14:5c:3e:93:fc:c2:db:05:a0:ca:77:b0:51:c8:
                    b8:39:9f:53:f6:ca:0b:8f:78:bc:97:3e:f1:68:ed:
                    19:a0:08:23:14:ca:8e:49:07:0c:d0:47:1e:48:7e:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:28:3A:BD:66:C3:03:3E:89:49:DC:37:50:CB:26:8F:9B:5B:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.44.0/23
                IPv6:
                  2407:e140::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:1f:68:2a:a3:ef:c4:03:85:97:66:bd:2d:b0:f9:1b:51:a8:
         6d:8e:32:bd:22:36:95:4a:93:09:50:1c:d4:87:4d:c5:a8:1f:
         66:f8:7d:1f:f8:57:ff:eb:f6:5c:ee:df:da:35:df:42:23:30:
         3f:5f:28:d8:2c:3f:22:8d:e3:cd:b5:1d:56:ef:b2:33:b6:6b:
         69:04:65:22:1a:f1:85:a3:48:d3:b0:ff:dc:cd:b3:eb:63:26:
         20:f2:96:22:42:bf:79:76:42:e4:11:75:78:43:b4:51:7d:40:
         d6:b0:2b:ad:2a:d9:b3:b6:f2:07:11:34:07:9a:4f:13:9a:99:
         ed:cd:bd:6c:2d:61:f1:3b:0a:5e:fe:22:33:35:8a:3d:b8:35:
         a8:a8:17:25:88:27:84:91:ce:8c:1c:e7:7e:a0:23:19:2f:eb:
         f7:b3:6a:d6:85:2f:62:6f:b2:04:6f:86:4b:3a:f3:13:7e:2c:
         fb:0f:fa:89:a4:c0:e5:cc:43:23:76:2a:b6:b7:49:19:be:08:
         05:b9:bd:95:e2:78:bd:64:53:d0:46:a9:b1:83:be:95:d3:61:
         e9:25:d9:1a:e1:8e:f9:11:19:66:ea:6c:75:19:3d:64:1a:89:
         68:c3:b3:e9:4d:50:6e:8f:01:92:8b:1d:5e:7b:cd:1e:8f:aa:
         59:6b:16:a4
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAPQQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjE1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU0MzctMjZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJtepcScP7juaBHxxLod1ZM4siR2fTvPqVmTQirapeA8vjBpCotEr5zTfA0j
w3YY1NhtHTFgEERYAVPJfJTM/eB7wK6egxIqWZnxaQMGePETwzMTKbG44a7d0d8Z
/UXyav8nQcGvf1S5Z+XkTw0BViC13bYBal4fEtuUP8WAEtbTH4pBG+euRw6pUVLi
i3kW0GobK6FFyDpbC2e7ysv7Emo6Ja4pZg5iBJP7q5a02qNVF4Mu+Jd3IiEHNAJI
1uxKCmIOc1hpbXv8+0a9V8OwDWQ0PRRcPpP8wtsFoMp3sFHIuDmfU/bKC494vJc+
8WjtGaAIIxTKjkkHDNBHHkh+YlMCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBT3Kig6
vWbDAz6JSdw3UMsmj5tbkjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1RThEMkI4
MzdCQTExRUM5MTI0OEQzRkM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWetLDANBAIAAjAHAwUAJAfhQDANBgkqhkiG9w0BAQsFAAOCAQEA
Zh9oKqPvxAOFl2a9LbD5G1GobY4yvSI2lUqTCVAc1IdNxagfZvh9H/hX/+v2XO7f
2jXfQiMwP18o2Cw/Io3jzbUdVu+yM7ZraQRlIhrxhaNI07D/3M2z62MmIPKWIkK/
eXZC5BF1eEO0UX1A1rArrSrZs7byBxE0B5pPE5qZ7c29bC1h8TsKXv4iMzWKPbg1
qKgXJYgnhJHOjBznfqAjGS/r97Nq1oUvYm+yBG+GSzrzE34s+w/6iaTA5cxDI3Yq
trdJGb4IBbm9leJ4vWRT0EapsYO+ldNh6SXZGuGO+REZZupsdRk9ZBqJaMOz6U1Q
bo8BkosdXnvNHo+qWWsWpA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:58 2026 by rpki-client