Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20D2CD4AE2E911EFAF06BB3FC4F9AE02.roa
File:                     20D2CD4AE2E911EFAF06BB3FC4F9AE02.roa (raw, json)
Hash identifier:          EsJ0nYpUBsaK8ZApUXvjowlBYNo5XdOLWrzDBoh1Cw0=
Subject key identifier:   B5:05:92:CD:C8:72:FF:7F:06:0D:87:0D:41:06:59:FB:97:0B:05:52
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20D2CD4AE2E911EFAF06BB3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:29:35 +0000
ROA not before:           Mon 06 Jul 2026 17:29:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149581
IP address blocks:        103.187.196.0/24 maxlen: 24
                          103.187.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62712 (0xf4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:29:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5ff-f35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:11:7f:a5:ee:38:0b:a8:a0:89:bd:c5:ca:
                    7a:2c:0c:1e:70:0f:67:0c:a6:0d:f5:4e:f6:2a:f6:
                    5b:c0:d1:17:a9:cb:6e:99:c4:4e:7d:30:d6:1e:17:
                    47:bd:35:5b:1f:fe:18:dc:69:b8:73:cc:1d:3b:7c:
                    1c:5c:99:4b:62:8c:f5:97:5f:27:e7:4e:b1:55:33:
                    da:42:db:16:6e:be:86:5a:26:a6:dd:cf:f9:e0:7b:
                    90:7a:a1:e2:b9:19:c4:ab:f9:37:47:d0:f5:50:4e:
                    dc:df:07:53:fe:41:74:d1:8b:c4:ca:79:8c:ae:94:
                    dc:ea:2e:ec:95:70:dd:26:0b:0c:ae:e5:ae:24:61:
                    3d:79:59:67:2d:81:d1:01:a6:58:38:92:23:45:1c:
                    72:0e:73:3f:48:5f:f2:ce:24:3f:a3:ba:52:2d:df:
                    f4:93:79:76:ff:24:3f:67:29:60:c2:fe:a8:6b:33:
                    8a:3d:6b:ad:3c:66:e9:f2:74:0a:fd:05:e0:08:26:
                    14:a5:de:47:cd:7d:7f:ea:41:d0:e9:c4:ae:a3:ed:
                    92:c9:26:eb:31:e0:01:51:70:9f:70:40:95:73:79:
                    1f:0c:2a:31:9f:b2:b0:62:83:58:39:a1:2d:75:86:
                    ec:9b:0e:11:82:22:d7:bf:77:d8:d9:ee:3d:40:db:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:92:CD:C8:72:FF:7F:06:0D:87:0D:41:06:59:FB:97:0B:05:52
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20D2CD4AE2E911EFAF06BB3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:16:8e:08:24:cc:3d:6d:09:60:de:ea:0a:18:05:fe:ca:
         4d:3d:6e:7e:d8:9d:22:b4:9d:32:2c:cb:4c:f7:24:ca:c1:bd:
         aa:83:20:49:54:0a:2b:ff:30:57:a3:3f:75:08:9c:83:37:55:
         62:65:b4:f7:20:1f:de:ad:51:c9:e0:46:c8:e5:35:91:43:b7:
         d9:14:28:59:99:4f:19:e2:df:56:db:b8:a4:42:32:91:a2:10:
         a6:c8:2a:d1:50:0e:0c:0f:85:9e:3a:fe:3a:95:dc:79:9f:f8:
         c8:b0:82:31:5f:85:49:e7:08:0f:a1:e2:de:3b:9e:b2:1b:0d:
         df:9b:38:4a:05:3b:6c:14:6b:f2:53:83:21:94:18:6f:2a:7d:
         13:3f:49:0d:54:8e:f4:99:84:df:74:76:28:fb:76:27:15:aa:
         52:6c:32:d4:3f:f3:53:df:b9:ac:32:cd:87:b8:bd:b5:b0:a6:
         0a:73:e8:d8:f2:cb:ab:bd:ed:e8:9f:dd:50:96:6f:19:7a:db:
         16:ea:d9:2f:50:19:73:21:fc:10:55:53:da:58:b2:30:ff:84:
         a3:c7:91:28:c3:8a:74:56:e1:19:3e:b0:e6:83:36:48:ff:7f:
         56:ec:e0:48:4b:e8:24:39:12:a4:35:44:ca:75:4f:f1:4f:75:
         c4:de:3e:f3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPT4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjkzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU1ZmYtZjM1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3pEX+l7jgLqKCJvcXKeiwMHnAPZwymDfVO9ir2W8DRF6nLbpnETn0w1h4X
R701Wx/+GNxpuHPMHTt8HFyZS2KM9ZdfJ+dOsVUz2kLbFm6+hlompt3P+eB7kHqh
4rkZxKv5N0fQ9VBO3N8HU/5BdNGLxMp5jK6U3Oou7JVw3SYLDK7lriRhPXlZZy2B
0QGmWDiSI0Uccg5zP0hf8s4kP6O6Ui3f9JN5dv8kP2cpYML+qGszij1rrTxm6fJ0
Cv0F4AgmFKXeR819f+pB0OnErqPtkskm6zHgAVFwn3BAlXN5HwwqMZ+ysGKDWDmh
LXWG7JsOEYIi17932NnuPUDbYUMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBS1BZLN
yHL/fwYNhw1BBln7lwsFUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwRDJDRDRB
RTJFOTExRUZBRjA2QkIzRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe7xDANBgkqhkiG9w0BAQsFAAOCAQEAjYgWjggkzD1tCWDe6goY
Bf7KTT1uftidIrSdMizLTPckysG9qoMgSVQKK/8wV6M/dQicgzdVYmW09yAf3q1R
yeBGyOU1kUO32RQoWZlPGeLfVtu4pEIykaIQpsgq0VAODA+Fnjr+OpXceZ/4yLCC
MV+FSecID6Hi3jueshsN35s4SgU7bBRr8lODIZQYbyp9Ez9JDVSO9JmE33R2KPt2
JxWqUmwy1D/zU9+5rDLNh7i9tbCmCnPo2PLLq73t6J/dUJZvGXrbFurZL1AZcyH8
EFVT2liyMP+Eo8eRKMOKdFbhGT6w5oM2SP9/VuzgSEvoJDkSpDVEynVP8U91xN4+
8w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:58 2026 by rpki-client