Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F46439EE5EB11EA8B5B282CC4F9AE02.roa
File:                     1F46439EE5EB11EA8B5B282CC4F9AE02.roa (raw, json)
Hash identifier:          C4T/6tzMFTokJ6z4LLDRCJGKDc2EJPQCSKFy0ixRgKs=
Subject key identifier:   98:3C:7D:A5:09:A9:51:94:23:83:BD:23:57:C2:A9:D5:05:C1:11:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E614
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F46439EE5EB11EA8B5B282CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:07:24 +0000
ROA not before:           Sun 31 May 2026 17:07:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138791
IP address blocks:        103.141.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58900 (0xe614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:07:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6acb-06ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:ae:ab:a4:c8:66:bb:7f:85:dd:95:a3:7e:
                    70:d3:dd:3c:24:96:c2:d3:a9:be:01:df:f0:32:56:
                    9a:d0:81:cf:66:1d:40:fb:ae:a3:bf:74:1f:f5:bd:
                    27:e3:ce:9a:d4:d6:c1:30:ab:1a:ed:42:8a:d8:e4:
                    58:ca:0a:79:84:43:73:ec:f2:b5:21:cf:89:1f:ad:
                    9f:8a:23:df:51:9e:b1:d3:7e:77:0f:d4:42:c8:9f:
                    90:d8:4c:2e:a3:6d:4d:9f:ed:21:54:51:8f:16:f3:
                    cd:e5:db:46:6b:58:44:e6:08:71:bf:86:01:7a:b0:
                    66:ab:43:c0:4b:ba:19:09:ab:ba:f0:be:75:3a:56:
                    ee:48:d9:ac:f9:8d:db:19:9e:31:2f:cb:27:c6:47:
                    de:ec:44:d5:69:5f:3a:09:97:9c:79:8f:8a:76:5c:
                    18:9b:e3:9c:2b:ab:7a:52:26:45:4b:85:65:d8:f5:
                    34:32:d0:48:4c:f1:de:c9:2a:51:da:02:25:c2:2c:
                    12:5b:ba:c1:6a:9f:0c:5a:cd:48:6b:6c:a2:a1:00:
                    cd:ae:e9:a5:61:1f:aa:20:07:76:43:61:df:1a:40:
                    22:7b:93:fb:bc:b4:01:cc:2e:92:ed:d4:86:2e:e0:
                    d2:2b:5b:f5:d3:1b:71:93:2b:ad:66:79:f9:36:fc:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3C:7D:A5:09:A9:51:94:23:83:BD:23:57:C2:A9:D5:05:C1:11:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F46439EE5EB11EA8B5B282CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:36:91:cb:90:98:ec:ab:05:52:83:9b:ad:e5:8f:11:34:49:
         91:bc:22:14:2d:a8:6d:e2:08:3f:b6:46:13:49:b8:3e:a2:f3:
         02:ca:f7:d9:40:1b:51:e8:dd:44:96:a6:e4:1d:dd:50:ba:b5:
         38:9a:bb:04:bc:d2:8f:02:09:26:b2:e8:1b:21:64:53:aa:d9:
         00:ad:6e:6c:90:18:db:83:bc:bd:7e:89:3a:7b:f1:a3:a3:1d:
         3a:73:f0:77:d9:b7:e6:52:89:0f:76:7e:5e:32:6a:71:7b:92:
         1f:28:f2:7d:be:00:9e:0c:01:9f:90:1d:3a:d5:69:0d:8a:c8:
         c4:64:5f:2d:97:0f:33:9b:8b:0b:f3:ad:bf:63:ca:f9:37:77:
         c4:17:0d:e2:25:35:59:fe:0b:ac:43:46:4c:1a:c6:db:0c:c1:
         e7:7e:48:4a:0b:dd:0f:86:cf:fb:92:ce:18:a0:44:82:78:e1:
         e9:02:6a:e0:45:5a:f4:4a:6f:2e:93:1b:e2:ac:c0:da:e8:66:
         26:c2:09:6f:8d:78:ae:01:16:e4:9b:1e:a4:e7:4b:cf:28:b3:
         23:0a:cb:14:50:ff:99:fb:de:58:16:79:3f:c0:b7:57:8b:e2:
         0c:a1:57:a4:92:bf:5d:48:fa:2a:86:20:97:2c:ec:40:54:08:
         32:65:54:f8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOYUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDcyNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZhY2ItMDZhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9NrqukyGa7f4XdlaN+cNPdPCSWwtOpvgHf8DJWmtCBz2YdQPuuo790H/W9
J+POmtTWwTCrGu1CitjkWMoKeYRDc+zytSHPiR+tn4oj31GesdN+dw/UQsifkNhM
LqNtTZ/tIVRRjxbzzeXbRmtYROYIcb+GAXqwZqtDwEu6GQmruvC+dTpW7kjZrPmN
2xmeMS/LJ8ZH3uxE1WlfOgmXnHmPinZcGJvjnCurelImRUuFZdj1NDLQSEzx3skq
UdoCJcIsElu6wWqfDFrNSGtsoqEAza7ppWEfqiAHdkNh3xpAInuT+7y0Acwuku3U
hi7g0itb9dMbcZMrrWZ5+Tb8v9UCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSYPH2l
CalRlCODvSNXwqnVBcERaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGNDY0MzlF
RTVFQjExRUE4QjVCMjgyQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeNFjANBgkqhkiG9w0BAQsFAAOCAQEAcDaRy5CY7KsFUoObreWP
ETRJkbwiFC2obeIIP7ZGE0m4PqLzAsr32UAbUejdRJam5B3dULq1OJq7BLzSjwIJ
JrLoGyFkU6rZAK1ubJAY24O8vX6JOnvxo6MdOnPwd9m35lKJD3Z+XjJqcXuSHyjy
fb4AngwBn5AdOtVpDYrIxGRfLZcPM5uLC/Otv2PK+Td3xBcN4iU1Wf4LrENGTBrG
2wzB535ISgvdD4bP+5LOGKBEgnjh6QJq4EVa9EpvLpMb4qzA2uhmJsIJb414rgEW
5JsepOdLzyizIwrLFFD/mfveWBZ5P8C3V4viDKFXpJK/XUj6KoYglyzsQFQIMmVU
+A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:47 2026 by rpki-client