Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa
File:                     24475A1ED70811EA82518948C4F9AE02.roa (raw, json)
Hash identifier:          aN0PeRM7uLgE7cQ39paGo5tbmotqnKJ7TkjkL3hL0A0=
Subject key identifier:   83:B5:6C:AE:F2:35:27:4F:BE:9A:0B:73:9B:B8:4B:C2:D7:62:87:AA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E55D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:01:29 +0000
ROA not before:           Sun 31 May 2026 17:01:29 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137598
IP address blocks:        103.93.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58717 (0xe55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:01:29 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6968-2838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:5f:9b:f4:28:39:bc:45:23:46:4b:ee:d7:
                    38:f7:64:ac:d9:70:90:64:a0:3e:e1:aa:b2:5a:87:
                    a2:7d:2d:57:7e:42:86:ec:3d:f9:18:52:f8:69:8a:
                    80:eb:b8:07:dc:fb:20:b6:a6:58:41:18:83:fa:3a:
                    34:f3:3c:17:f7:75:ba:2f:2f:f1:37:0f:1c:c9:3f:
                    ca:20:94:74:8a:1e:8b:96:46:3c:25:89:55:b3:84:
                    42:ba:a4:15:61:88:69:e9:b7:38:c7:98:e3:9b:35:
                    0a:00:ba:3b:49:17:82:c4:72:b4:d3:61:0f:2b:25:
                    8d:dd:2a:16:bd:a0:60:98:c7:e3:bb:65:80:1b:d0:
                    22:d7:52:9d:99:2c:01:cf:2c:06:b5:e3:63:ab:8d:
                    61:3d:42:ea:b2:8a:d7:c4:49:80:87:b9:3b:2a:78:
                    8e:2e:0e:4f:15:65:53:70:03:b6:79:74:5a:f7:fb:
                    96:77:a2:f7:46:fa:75:d3:77:f4:b6:ce:c1:18:85:
                    95:5d:d2:21:1e:e9:ea:dd:fb:8a:72:c6:ac:23:a1:
                    b7:52:61:fa:bb:9c:0a:41:ac:28:b4:fb:32:32:af:
                    39:7d:f7:8f:d0:d4:53:73:57:92:99:95:02:59:94:
                    7d:7a:57:2e:0d:48:a2:58:70:b2:bc:5d:f3:81:a2:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:6C:AE:F2:35:27:4F:BE:9A:0B:73:9B:B8:4B:C2:D7:62:87:AA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24475A1ED70811EA82518948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:c3:27:3b:80:11:00:77:4d:ba:88:ea:6d:a3:80:e8:2a:
         06:f6:ff:e2:c3:bc:e9:cb:20:ed:51:0f:3d:fb:7d:3e:86:3c:
         bb:4f:97:97:13:4a:92:c2:79:77:06:43:7b:44:06:75:aa:1e:
         df:e9:95:4b:a7:63:04:f4:e6:af:aa:4c:7a:0b:26:c3:8e:e2:
         c5:39:24:fd:92:07:b2:dc:88:fb:e3:67:8b:3f:05:a1:e1:cc:
         47:5b:ed:31:49:bc:2b:d7:4a:e2:a2:03:ec:73:bc:85:89:fd:
         71:e1:dc:3e:42:a3:da:4b:c3:e1:c1:25:cc:af:a5:76:20:d8:
         e6:7b:74:21:9a:24:24:63:e3:e2:19:09:9c:d1:99:30:e6:fb:
         5b:aa:02:08:92:81:2a:a3:e5:a4:f2:11:a3:74:30:e1:23:a8:
         11:29:eb:a1:2e:40:5b:54:88:1b:93:99:83:5e:6a:74:15:2a:
         46:d1:3e:75:88:36:54:b8:fe:0e:ce:f4:7b:97:54:07:98:40:
         cd:8f:12:5b:bf:14:38:1c:38:55:20:44:95:7f:29:22:94:49:
         93:9d:6e:f3:f1:97:e3:99:a2:65:91:2e:d8:72:71:a3:43:24:
         9a:99:8c:eb:35:f0:6f:9f:94:9d:61:b8:2a:e4:c0:7b:d8:9f:
         4a:02:2d:e1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOVdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDEyOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY5NjgtMjgzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJrjX5v0KDm8RSNGS+7XOPdkrNlwkGSgPuGqslqHon0tV35Chuw9+RhS+GmK
gOu4B9z7ILamWEEYg/o6NPM8F/d1ui8v8TcPHMk/yiCUdIoei5ZGPCWJVbOEQrqk
FWGIaem3OMeY45s1CgC6O0kXgsRytNNhDysljd0qFr2gYJjH47tlgBvQItdSnZks
Ac8sBrXjY6uNYT1C6rKK18RJgIe5Oyp4ji4OTxVlU3ADtnl0Wvf7lnei90b6ddN3
9LbOwRiFlV3SIR7p6t37inLGrCOht1Jh+rucCkGsKLT7MjKvOX33j9DUU3NXkpmV
AlmUfXpXLg1Iolhwsrxd84Girq0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSDtWyu
8jUnT76aC3ObuEvC12KHqjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI0NDc1QTFF
RDcwODExRUE4MjUxODk0OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmddrDANBgkqhkiG9w0BAQsFAAOCAQEAZovDJzuAEQB3TbqI6m2j
gOgqBvb/4sO86csg7VEPPft9PoY8u0+XlxNKksJ5dwZDe0QGdaoe3+mVS6djBPTm
r6pMegsmw47ixTkk/ZIHstyI++Nniz8FoeHMR1vtMUm8K9dK4qID7HO8hYn9ceHc
PkKj2kvD4cElzK+ldiDY5nt0IZokJGPj4hkJnNGZMOb7W6oCCJKBKqPlpPIRo3Qw
4SOoESnroS5AW1SIG5OZg15qdBUqRtE+dYg2VLj+Ds70e5dUB5hAzY8SW78UOBw4
VSBElX8pIpRJk51u8/GX45miZZEu2HJxo0MkmpmM6zXwb5+UnWG4KuTAe9ifSgIt
4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:39 2026 by rpki-client