Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa
File:                     251361A4E2F111EB8C6B4E40C4F9AE02.roa (raw, json)
Hash identifier:          xGPLMiPdMoi7y6/7WaLFsatJfjI3vAQHFIfLT449gDQ=
Subject key identifier:   AC:1D:A8:ED:EB:AE:24:AE:FF:67:28:94:A8:10:76:D5:95:4D:30:0D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E216
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:34:19 +0000
ROA not before:           Sun 31 May 2026 16:34:19 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132956
IP address blocks:        103.212.16.0/24 maxlen: 24
                          103.212.17.0/24 maxlen: 24
                          103.212.18.0/24 maxlen: 24
                          103.212.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57878 (0xe216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:34:19 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c630b-00b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:6f:58:3c:b2:59:27:06:d8:21:02:9f:06:
                    36:69:ca:8f:7e:16:37:17:af:72:40:d2:ed:66:05:
                    54:b8:e4:de:20:c5:70:24:80:93:40:01:e2:a2:41:
                    79:2d:40:d0:c9:d8:34:db:19:8f:7b:78:9c:76:94:
                    39:ff:44:63:3e:27:41:58:a1:80:f6:17:9a:84:1a:
                    63:d8:51:a0:3c:c5:84:5b:c2:98:b8:83:f6:da:fa:
                    60:76:9c:77:36:7c:cf:1f:33:3c:24:4d:33:05:5c:
                    77:58:fe:45:e4:bb:38:15:6b:d6:65:8c:ce:3f:11:
                    17:07:b3:69:5a:93:e1:3a:a6:94:eb:0f:a4:4e:f6:
                    07:1f:8a:bf:7a:39:58:6d:f8:e1:43:69:f9:e0:70:
                    70:c4:6c:46:42:8d:13:96:93:fe:0b:ee:bb:0e:5a:
                    bc:96:6a:4c:fc:5c:d8:21:8b:86:e1:61:03:f8:4f:
                    3c:d0:0d:c8:ef:51:c4:ca:66:67:b2:ee:8d:c9:96:
                    53:86:bd:6d:ad:55:60:f6:e3:04:93:b3:69:14:ba:
                    ec:e9:4e:33:ad:fc:28:51:26:1a:1c:39:b2:ed:eb:
                    7c:7a:65:fa:c4:cd:6d:c9:0f:b0:b3:be:86:3a:11:
                    1c:31:54:71:ef:84:a1:0c:35:07:3e:d8:0a:7c:03:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1D:A8:ED:EB:AE:24:AE:FF:67:28:94:A8:10:76:D5:95:4D:30:0D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/251361A4E2F111EB8C6B4E40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:ef:2b:94:17:24:63:73:a7:84:77:f4:12:e6:dc:c1:08:
         c8:cb:56:a3:17:87:72:de:6b:ca:78:31:3c:3a:31:3a:ca:67:
         56:e3:51:0a:d1:c5:58:29:f1:1b:ca:2a:44:e9:d2:a2:28:d4:
         b4:78:36:ec:20:83:4d:43:aa:14:01:00:06:1a:c0:10:f1:18:
         dc:e4:91:ef:93:ca:7b:0c:ce:aa:73:85:b7:47:57:69:f5:04:
         25:11:23:71:10:ae:04:df:8e:22:aa:55:64:8e:c4:88:5a:4a:
         42:24:b2:b9:a8:99:c5:1d:ef:85:91:61:71:3d:b3:89:9b:78:
         9d:28:21:d9:7b:92:3b:c0:98:b8:2b:27:b5:18:82:71:08:d0:
         90:3a:43:f6:e7:b4:de:70:16:03:78:27:64:c5:21:ab:33:52:
         6a:fe:8d:f2:5d:52:ad:6f:ec:b7:0c:45:71:6a:b1:3e:f3:92:
         a7:f8:8c:67:2e:9d:72:21:ea:b9:a0:9c:1f:c9:82:3b:e5:3e:
         c9:02:82:85:63:c3:e2:2c:f6:e3:15:59:d6:58:e8:94:af:d1:
         a2:f9:5d:f5:21:3e:3f:08:e7:b9:69:71:2f:03:a7:83:e0:51:
         ad:46:e1:70:eb:a8:fa:d6:09:89:c4:59:16:21:d4:0f:15:cd:
         59:6e:bb:fa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOIWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzQxOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzMGItMDBiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANhvb1g8slknBtghAp8GNmnKj34WNxevckDS7WYFVLjk3iDFcCSAk0AB4qJB
eS1A0MnYNNsZj3t4nHaUOf9EYz4nQVihgPYXmoQaY9hRoDzFhFvCmLiD9tr6YHac
dzZ8zx8zPCRNMwVcd1j+ReS7OBVr1mWMzj8RFwezaVqT4TqmlOsPpE72Bx+Kv3o5
WG344UNp+eBwcMRsRkKNE5aT/gvuuw5avJZqTPxc2CGLhuFhA/hPPNANyO9RxMpm
Z7LujcmWU4a9ba1VYPbjBJOzaRS67OlOM638KFEmGhw5su3rfHpl+sTNbckPsLO+
hjoRHDFUce+EoQw1Bz7YCnwDDHUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSsHajt
664krv9nKJSoEHbVlU0wDTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1MTM2MUE0
RTJGMTExRUI4QzZCNEU0MEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfUEDANBgkqhkiG9w0BAQsFAAOCAQEAnjTvK5QXJGNzp4R39BLm
3MEIyMtWoxeHct5ryngxPDoxOspnVuNRCtHFWCnxG8oqROnSoijUtHg27CCDTUOq
FAEABhrAEPEY3OSR75PKewzOqnOFt0dXafUEJREjcRCuBN+OIqpVZI7EiFpKQiSy
uaiZxR3vhZFhcT2ziZt4nSgh2XuSO8CYuCsntRiCcQjQkDpD9ue03nAWA3gnZMUh
qzNSav6N8l1SrW/stwxFcWqxPvOSp/iMZy6dciHquaCcH8mCO+U+yQKChWPD4iz2
4xVZ1ljolK/Rovld9SE+PwjnuWlxLwOng+BRrUbhcOuo+tYJicRZFiHUDxXNWW67
+g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:34 2026 by rpki-client