Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa
File:                     1DBA318CE4E111ED90315A7AC4F9AE02.roa (raw, json)
Hash identifier:          XP3SMYHKcM+0hELfOAYVfbFe+YihN7309LwyOYIOzrM=
Subject key identifier:   FB:EC:A5:3D:73:EA:79:52:B9:AC:3D:40:2B:2E:36:24:AC:15:AA:A6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E5F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:06:20 +0000
ROA not before:           Sun 31 May 2026 17:06:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138743
IP address blocks:        103.137.36.0/24 maxlen: 24
                          2001:df3:c4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58867 (0xe5f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:06:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6a8c-7be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:02:7d:4c:98:d6:f3:9f:b2:ec:36:83:6d:
                    98:f4:ea:17:e4:d1:f5:ac:0f:b6:c8:b5:b7:f7:86:
                    a9:46:c0:26:17:46:1e:68:65:ed:3c:6e:fb:87:8a:
                    ff:6b:63:8c:75:fc:f0:ff:e5:d7:6a:24:f7:16:0a:
                    74:34:01:4c:41:ac:80:c3:ef:97:ad:8a:f7:07:94:
                    db:97:d2:91:86:1a:8d:1e:6b:1d:b8:98:be:29:a5:
                    d9:ae:21:c9:4d:b8:b4:e2:7b:80:77:bb:f4:78:33:
                    cb:8b:db:7a:c6:d7:6f:a0:82:32:1e:35:aa:27:bf:
                    e4:54:32:fb:ea:f8:39:ee:f5:94:92:89:2b:bf:5c:
                    6c:74:ac:e3:d6:8d:10:a5:b3:ce:6e:1e:4f:69:fa:
                    f1:e1:88:b8:80:2a:d7:8f:37:33:42:c2:72:9d:ed:
                    3a:71:22:2a:ea:da:27:40:02:08:57:ab:db:c8:31:
                    c0:59:76:a6:3d:03:cb:6b:c3:72:2a:92:46:15:dd:
                    b1:95:83:94:f4:f5:8a:52:b2:d5:d9:e6:76:13:6b:
                    be:12:b3:c9:e9:2e:6f:28:7d:87:3f:3b:ed:71:bd:
                    75:51:83:26:3e:32:56:29:ab:78:b6:f7:f0:68:b0:
                    9a:7a:43:b5:50:9f:ad:f7:15:c6:5f:47:91:cd:f1:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:A5:3D:73:EA:79:52:B9:AC:3D:40:2B:2E:36:24:AC:15:AA:A6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.36.0/24
                IPv6:
                  2001:df3:c4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:46:82:d8:d9:01:56:c0:0b:e7:87:e6:03:82:bd:e0:82:0f:
         f1:56:77:1f:f5:8b:20:04:66:37:94:cf:4b:f1:c3:3b:68:c2:
         dc:4b:f4:dd:18:fc:a3:d9:7b:c8:98:18:64:17:4d:21:b9:c2:
         e2:53:68:35:5c:fa:43:54:23:3d:e3:28:a8:15:39:4d:96:fa:
         22:33:37:00:e6:fc:c5:1a:e2:f1:27:a4:28:d9:4c:6a:d9:5b:
         e5:fb:ce:ea:a8:a9:9e:2b:0a:04:3e:99:ae:28:29:44:89:7e:
         bb:ce:f6:4c:1f:f7:56:35:42:39:b8:67:be:1a:70:7a:d9:2d:
         f3:3a:52:11:18:12:ae:2b:cc:8a:40:49:85:88:53:5c:b9:1f:
         57:27:4a:d1:66:db:9d:4a:99:03:3c:16:0e:5e:37:ec:c4:bf:
         7f:e2:99:b9:5c:b2:6a:51:09:b1:4b:64:26:1b:46:85:37:37:
         e6:26:6a:7e:ef:48:71:57:c5:4e:62:85:f0:b1:eb:15:95:e7:
         45:dd:06:7c:85:12:c2:a0:e4:76:82:04:14:50:76:67:fe:5c:
         2e:08:23:36:82:9f:3a:cd:09:23:71:c6:00:53:2f:d3:7f:82:
         9c:e9:42:f6:c0:db:f7:61:f0:83:e0:06:5b:93:a8:fa:37:c8:
         02:24:1b:15
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOXzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDYyMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZhOGMtN2JlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJgsAn1MmNbzn7LsNoNtmPTqF+TR9awPtsi1t/eGqUbAJhdGHmhl7Txu+4eK
/2tjjHX88P/l12ok9xYKdDQBTEGsgMPvl62K9weU25fSkYYajR5rHbiYviml2a4h
yU24tOJ7gHe79Hgzy4vbesbXb6CCMh41qie/5FQy++r4Oe71lJKJK79cbHSs49aN
EKWzzm4eT2n68eGIuIAq1483M0LCcp3tOnEiKuraJ0ACCFer28gxwFl2pj0Dy2vD
ciqSRhXdsZWDlPT1ilKy1dnmdhNrvhKzyekubyh9hz877XG9dVGDJj4yVimreLb3
8GiwmnpDtVCfrfcVxl9Hkc3x76MCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBT77KU9
c+p5UrmsPUArLjYkrBWqpjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFEQkEzMThD
RTRFMTExRUQ5MDMxNUE3QUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGeJJDAPBAIAAjAJAwcAIAEN88TAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDRoLY2QFWwAvnh+YDgr3ggg/xVncf9YsgBGY3lM9L8cM7aMLcS/TdGPyj2XvI
mBhkF00hucLiU2g1XPpDVCM94yioFTlNlvoiMzcA5vzFGuLxJ6Qo2Uxq2Vvl+87q
qKmeKwoEPpmuKClEiX67zvZMH/dWNUI5uGe+GnB62S3zOlIRGBKuK8yKQEmFiFNc
uR9XJ0rRZtudSpkDPBYOXjfsxL9/4pm5XLJqUQmxS2QmG0aFNzfmJmp+70hxV8VO
YoXwsesVledF3QZ8hRLCoOR2ggQUUHZn/lwuCCM2gp86zQkjccYAUy/Tf4Kc6UL2
wNv3YfCD4AZbk6j6N8gCJBsV
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:25 2026 by rpki-client