Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ADCC3BA200511F081E1821DC4F9AE02.roa
File:                     1ADCC3BA200511F081E1821DC4F9AE02.roa (raw, json)
Hash identifier:          OZMTG8m8l8xc8laQuvWZvfEOx4/+F0pb0ebNxjm7670=
Subject key identifier:   3B:71:8B:51:D8:04:33:70:35:63:EA:C0:0A:C9:21:3B:A5:7D:53:18
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ADCC3BA200511F081E1821DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:22:19 +0000
ROA not before:           Sun 31 May 2026 17:22:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     146858
IP address blocks:        103.172.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59356 (0xe7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:22:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e4a-7574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:ff:42:ed:64:08:74:ef:0d:b4:bd:1b:15:
                    ae:c3:e5:bb:62:be:dc:d4:77:01:dc:1c:0b:c0:63:
                    50:cc:5a:84:e5:7f:48:05:4c:af:db:c2:95:10:cd:
                    81:55:cf:74:55:0c:ac:9a:91:11:93:a2:73:d2:b2:
                    7d:c3:5c:d2:f6:2d:78:cb:de:63:3b:94:69:5a:19:
                    8a:24:33:32:fb:28:86:c3:fd:ca:eb:93:ed:f1:d2:
                    e5:44:f8:90:fd:2e:7d:1d:40:1a:30:ec:c3:2f:87:
                    43:92:fd:a8:1d:c2:f0:60:db:bf:bb:f8:50:fb:ae:
                    2b:dc:e4:07:3d:b9:7d:af:db:11:df:5d:da:e1:76:
                    85:a6:ca:85:97:0e:35:fa:af:13:c0:6e:d8:0d:d7:
                    77:c1:12:1e:d8:36:8e:d8:3d:1c:1a:6a:30:d4:80:
                    c2:92:ea:83:ce:2b:01:33:48:ff:bd:d8:87:8c:ee:
                    5c:55:2e:8f:cb:42:8c:a1:5a:c1:5d:0c:58:52:dd:
                    67:31:cc:5a:bb:bc:e2:fa:24:8b:3d:ce:9c:5c:0e:
                    a8:79:b2:37:2e:04:61:88:c3:4c:65:73:c7:3b:d2:
                    7d:6b:0c:7e:cf:f4:9f:3b:02:54:6f:df:92:ab:80:
                    f0:ad:9d:16:6f:22:a7:e3:bf:6c:f0:4b:f6:be:6f:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:8B:51:D8:04:33:70:35:63:EA:C0:0A:C9:21:3B:A5:7D:53:18
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ADCC3BA200511F081E1821DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:c4:6b:18:59:b4:a4:27:44:9c:9f:c3:1b:38:01:38:e0:f4:
         9c:b6:09:fb:80:95:8e:d8:a0:ec:14:e7:2d:d4:75:00:f2:e6:
         33:27:7d:2a:39:09:0c:51:f3:86:d2:77:b1:c2:df:f6:8a:89:
         df:e6:71:ef:cc:0a:eb:7e:96:83:13:c5:02:15:fe:56:33:63:
         12:84:67:10:2e:1a:1b:23:b3:2e:57:95:53:fd:ab:b9:c4:cc:
         1c:db:64:88:6f:2f:94:bc:f3:cf:e4:5b:e6:55:b2:85:fb:fb:
         2f:fc:ce:d9:36:75:50:66:d4:f3:a9:c9:f9:f5:37:e2:40:4d:
         ee:fc:3e:15:21:43:22:58:8a:1f:d7:aa:6f:07:be:ad:3a:bc:
         74:aa:b2:7c:58:69:d8:94:82:85:50:74:ac:4a:b9:ed:5c:78:
         71:9f:ac:3a:3f:e9:02:b2:7a:b2:1e:04:fe:5a:6a:d6:f9:11:
         a4:5b:95:58:d0:69:b7:56:07:e9:df:6d:ba:fa:ab:17:f2:e7:
         7f:6b:4c:44:94:e7:d2:f7:88:dc:d9:fd:fb:de:29:dc:94:75:
         24:ea:79:e9:c6:72:5f:07:59:df:d5:01:05:b4:50:3c:87:46:
         ed:b9:7e:73:d0:dd:d3:0b:dd:07:3e:72:bd:f0:0a:24:35:6a:
         db:5e:ba:04
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOfcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjIxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZlNGEtNzU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJKp/0LtZAh07w20vRsVrsPlu2K+3NR3AdwcC8BjUMxahOV/SAVMr9vClRDN
gVXPdFUMrJqREZOic9KyfcNc0vYteMveYzuUaVoZiiQzMvsohsP9yuuT7fHS5UT4
kP0ufR1AGjDswy+HQ5L9qB3C8GDbv7v4UPuuK9zkBz25fa/bEd9d2uF2habKhZcO
NfqvE8Bu2A3Xd8ESHtg2jtg9HBpqMNSAwpLqg84rATNI/73Yh4zuXFUuj8tCjKFa
wV0MWFLdZzHMWru84vokiz3OnFwOqHmyNy4EYYjDTGVzxzvSfWsMfs/0nzsCVG/f
kquA8K2dFm8ip+O/bPBL9r5vnNMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQ7cYtR
2AQzcDVj6sAKySE7pX1TGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFBRENDM0JB
MjAwNTExRjA4MUUxODIxREM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeslDANBgkqhkiG9w0BAQsFAAOCAQEAYcRrGFm0pCdEnJ/DGzgB
OOD0nLYJ+4CVjtig7BTnLdR1APLmMyd9KjkJDFHzhtJ3scLf9oqJ3+Zx78wK636W
gxPFAhX+VjNjEoRnEC4aGyOzLleVU/2rucTMHNtkiG8vlLzzz+Rb5lWyhfv7L/zO
2TZ1UGbU86nJ+fU34kBN7vw+FSFDIliKH9eqbwe+rTq8dKqyfFhp2JSChVB0rEq5
7Vx4cZ+sOj/pArJ6sh4E/lpq1vkRpFuVWNBpt1YH6d9tuvqrF/Lnf2tMRJTn0veI
3Nn9+94p3JR1JOp56cZyXwdZ39UBBbRQPIdG7bl+c9Dd0wvdBz5yvfAKJDVq2166
BA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:14 2026 by rpki-client