Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa
File:                     1E219CF6F19A11EA90B2B06BC4F9AE02.roa (raw, json)
Hash identifier:          T87l1DTG6cAU46tLJBTMHFKmqo1je69EQH1+I9PZ5Lo=
Subject key identifier:   23:B1:0B:C5:28:D8:12:63:C5:8B:23:75:7C:85:7E:17:43:0C:A2:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:12:11 +0000
ROA not before:           Sun 31 May 2026 17:12:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140199
IP address blocks:        103.155.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59040 (0xe6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:12:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6beb-3bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:73:71:00:16:d0:fa:7b:bd:31:fc:d2:56:
                    d3:96:0f:65:cd:18:82:26:fc:53:a4:0f:20:b4:46:
                    3b:60:db:7e:ea:8d:4e:df:9c:f3:5b:03:bb:d5:2b:
                    b9:c3:af:a0:70:b4:e2:1c:0b:2a:c4:47:53:be:e9:
                    24:c8:30:25:d8:04:e0:6a:27:c5:90:77:c1:6d:ee:
                    73:61:a4:06:97:1e:39:98:d8:50:31:72:34:3c:68:
                    35:00:c7:3a:9b:6a:6b:b3:a9:b9:3d:9c:a7:f6:ef:
                    f2:1b:9a:49:a1:15:43:b1:08:b8:ea:80:73:fb:20:
                    68:82:f3:6e:c9:02:36:ca:c0:bd:b5:cf:05:54:b6:
                    10:36:4a:16:3e:86:7d:49:c0:e4:06:28:01:4a:a4:
                    92:04:57:ee:f2:c1:10:b7:7e:b1:25:21:7f:21:8a:
                    2f:47:c4:55:1b:c2:44:16:05:c4:ac:05:4b:64:4e:
                    73:c6:09:b3:76:77:1d:0b:47:25:d5:9a:6a:1e:f9:
                    53:a4:cc:21:02:49:df:8f:35:8a:54:8f:f5:d4:d8:
                    76:aa:00:5a:23:5e:61:33:c1:a4:51:fb:33:f7:b0:
                    1c:ea:b1:52:75:31:ca:35:78:d5:c5:08:9c:4c:48:
                    68:d3:18:7e:67:25:a3:da:9a:cc:d0:b0:4b:ed:3e:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:0B:C5:28:D8:12:63:C5:8B:23:75:7C:85:7E:17:43:0C:A2:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:b8:28:cb:9e:b4:7e:ab:9f:2e:45:4f:69:94:3c:24:28:
         0d:59:16:0f:fc:fc:e4:66:63:05:8d:63:b9:21:e5:a7:07:b7:
         d5:20:5e:ad:86:c4:74:2e:3a:fd:55:63:cc:b9:42:d2:51:1c:
         cd:28:1a:cf:83:73:87:a6:f5:a3:c7:c5:80:6d:e1:61:c3:84:
         d7:d6:44:46:d5:7a:ef:d8:b1:45:f6:77:79:cc:3f:a4:f2:19:
         3e:ce:2a:df:bc:30:66:67:68:d6:d0:56:93:45:99:8c:ef:c5:
         da:95:6d:96:e5:50:f6:0c:e6:21:64:2e:2d:cd:26:3a:9f:2b:
         e2:24:93:e6:d6:46:6e:e6:c6:ed:a0:f9:8b:08:6a:15:32:e8:
         51:94:de:c5:c2:94:f2:fe:05:64:ea:4d:7f:c7:e6:29:00:18:
         04:61:79:c5:6f:0b:57:59:9a:a7:e8:3f:ba:29:82:60:8c:b7:
         ae:42:74:a0:55:ee:a3:79:e5:1c:98:b8:ea:02:35:9a:5d:2f:
         c1:4e:eb:a8:b7:34:10:23:c9:6d:fb:74:61:74:f3:53:f9:af:
         d3:2b:ab:25:6b:44:20:b9:60:e2:ba:90:00:2d:21:be:d0:0c:
         4e:4d:67:47:e0:67:b6:91:b0:92:b7:67:d7:b1:1f:ae:ad:1f:
         51:9c:ed:f9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOagMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTIxMVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiZWItM2JjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPKwc3EAFtD6e70x/NJW05YPZc0Ygib8U6QPILRGO2DbfuqNTt+c81sDu9Ur
ucOvoHC04hwLKsRHU77pJMgwJdgE4GonxZB3wW3uc2GkBpceOZjYUDFyNDxoNQDH
Optqa7OpuT2cp/bv8huaSaEVQ7EIuOqAc/sgaILzbskCNsrAvbXPBVS2EDZKFj6G
fUnA5AYoAUqkkgRX7vLBELd+sSUhfyGKL0fEVRvCRBYFxKwFS2ROc8YJs3Z3HQtH
JdWaah75U6TMIQJJ3481ilSP9dTYdqoAWiNeYTPBpFH7M/ewHOqxUnUxyjV41cUI
nExIaNMYfmclo9qazNCwS+0+Km0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQjsQvF
KNgSY8WLI3V8hX4XQwyiUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFFMjE5Q0Y2
RjE5QTExRUE5MEIyQjA2QkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGebDDANBgkqhkiG9w0BAQsFAAOCAQEAgy64KMuetH6rny5FT2mU
PCQoDVkWD/z85GZjBY1juSHlpwe31SBerYbEdC46/VVjzLlC0lEczSgaz4Nzh6b1
o8fFgG3hYcOE19ZERtV679ixRfZ3ecw/pPIZPs4q37wwZmdo1tBWk0WZjO/F2pVt
luVQ9gzmIWQuLc0mOp8r4iST5tZGbubG7aD5iwhqFTLoUZTexcKU8v4FZOpNf8fm
KQAYBGF5xW8LV1map+g/uimCYIy3rkJ0oFXuo3nlHJi46gI1ml0vwU7rqLc0ECPJ
bft0YXTzU/mv0yurJWtEILlg4rqQAC0hvtAMTk1nR+BntpGwkrdn17Efrq0fUZzt
+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:42 2026 by rpki-client