Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26561A62C6E811ECBBCD4363C4F9AE02.roa
File:                     26561A62C6E811ECBBCD4363C4F9AE02.roa (raw, json)
Hash identifier:          xkfaIY6GlJWUVbgoYzg/bqMjfB0TTe533/4IOZeWnJA=
Subject key identifier:   1E:51:87:7A:54:A4:75:3D:6E:A7:50:5F:A2:6F:97:A8:83:EA:6B:71
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F440
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26561A62C6E811ECBBCD4363C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:23:41 +0000
ROA not before:           Mon 06 Jul 2026 17:23:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147205
IP address blocks:        103.173.205.0/24 maxlen: 24
                          103.175.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62528 (0xf440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:23:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be49d-0c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:4c:da:8d:bd:31:08:f5:21:09:9b:09:13:
                    8c:77:b7:93:cc:35:6b:19:a9:ec:ed:80:d6:a4:db:
                    39:fd:10:2f:74:b6:94:c9:03:00:89:a8:18:9f:13:
                    17:50:15:b4:4b:7f:2e:43:0b:5b:0c:01:c8:c8:ae:
                    d1:6d:cd:05:03:e8:22:d2:4b:56:dd:fc:68:5b:7a:
                    1a:c9:dc:4c:0d:b5:79:65:37:dc:f6:3a:7f:e2:d1:
                    ec:3f:19:80:37:c6:ec:30:30:eb:d7:01:bd:1d:0c:
                    60:59:88:fb:4f:4d:5a:de:7d:5f:22:86:85:f6:6b:
                    7a:94:47:ed:4d:18:88:c9:6d:34:44:ba:67:32:61:
                    c9:e1:d0:60:09:fa:84:20:d1:b4:b7:77:5b:9f:05:
                    92:48:be:cb:6f:d3:fd:d0:96:c5:f9:19:ea:49:7b:
                    2f:e2:b0:ed:4c:93:49:f7:87:74:ee:12:36:42:be:
                    54:01:b9:a9:af:b1:79:ed:55:ef:e1:22:a4:e4:54:
                    65:ce:77:e3:f5:ec:f1:f4:48:04:7d:66:5d:85:79:
                    1a:9b:04:5b:4b:bb:e7:69:42:0f:b3:e4:ee:f1:fb:
                    db:a0:ac:6b:26:5a:0b:30:86:bb:e6:48:11:c3:db:
                    46:bc:67:57:1c:1a:72:46:c3:7b:6c:72:3c:07:4a:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:87:7A:54:A4:75:3D:6E:A7:50:5F:A2:6F:97:A8:83:EA:6B:71
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26561A62C6E811ECBBCD4363C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.205.0/24
                  103.175.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:a3:4e:5a:1a:41:03:88:d0:41:3b:2d:6c:06:76:3e:1f:
         1f:51:53:ae:d8:3f:e5:eb:56:5e:82:c4:d5:12:bd:91:ce:01:
         7d:10:59:46:1f:e0:06:34:00:c2:89:c2:32:e1:15:08:23:78:
         0b:f6:59:82:b5:52:08:3f:1e:97:4c:29:f4:06:03:b1:53:09:
         20:c1:e9:d7:06:2c:37:9e:35:5e:26:f9:9e:87:85:07:e9:4a:
         92:44:46:2e:c1:79:59:17:23:30:90:4b:2d:90:a1:89:78:18:
         0c:85:1a:f2:c2:c0:23:ce:0c:2c:b7:c7:dc:d9:51:d1:a8:78:
         32:7c:d9:83:96:3f:f3:5a:2a:b6:5a:a1:1a:35:6c:3c:09:1f:
         ee:13:7e:b5:aa:e1:62:05:97:89:37:d9:db:0c:3d:ae:fc:a8:
         16:8b:9f:ed:05:f9:db:5f:c5:91:81:22:ef:29:85:c1:8d:e2:
         b2:36:e5:c0:72:6e:72:7a:1b:bf:7a:99:25:67:cc:25:fb:9c:
         06:1b:62:46:e5:5b:43:10:66:0d:44:ce:26:3a:d5:0e:82:46:
         27:61:6b:a7:af:e5:0d:52:ff:c6:75:8c:33:d8:42:9b:69:ee:
         75:6b:77:11:e4:1a:f2:3c:8c:a9:51:a8:8a:ca:ea:ee:2d:66:
         bb:f9:7e:a4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPRAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjM0MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU0OWQtMGMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkfTNqNvTEI9SEJmwkTjHe3k8w1axmp7O2A1qTbOf0QL3S2lMkDAImoGJ8T
F1AVtEt/LkMLWwwByMiu0W3NBQPoItJLVt38aFt6GsncTA21eWU33PY6f+LR7D8Z
gDfG7DAw69cBvR0MYFmI+09NWt59XyKGhfZrepRH7U0YiMltNES6ZzJhyeHQYAn6
hCDRtLd3W58Fkki+y2/T/dCWxfkZ6kl7L+Kw7UyTSfeHdO4SNkK+VAG5qa+xee1V
7+EipORUZc534/Xs8fRIBH1mXYV5GpsEW0u752lCD7Pk7vH726CsayZaCzCGu+ZI
EcPbRrxnVxwackbDe2xyPAdKt3cCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQeUYd6
VKR1PW6nUF+ib5eog+prcTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI2NTYxQTYy
QzZFODExRUNCQkNENDM2M0M0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGetzQMEAWevdDANBgkqhkiG9w0BAQsFAAOCAQEAsoyjTloaQQOI
0EE7LWwGdj4fH1FTrtg/5etWXoLE1RK9kc4BfRBZRh/gBjQAwonCMuEVCCN4C/ZZ
grVSCD8el0wp9AYDsVMJIMHp1wYsN541Xib5noeFB+lKkkRGLsF5WRcjMJBLLZCh
iXgYDIUa8sLAI84MLLfH3NlR0ah4MnzZg5Y/81oqtlqhGjVsPAkf7hN+tarhYgWX
iTfZ2ww9rvyoFouf7QX521/FkYEi7ymFwY3isjblwHJucnobv3qZJWfMJfucBhti
RuVbQxBmDUTOJjrVDoJGJ2Frp6/lDVL/xnWMM9hCm2nudWt3EeQa8jyMqVGoisrq
7i1mu/l+pA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:15 2026 by rpki-client