Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa
File:                     2788B5627ACA11F18BD90C416FA30FBC.roa (raw, json)
Hash identifier:          Auxc/TbSu3jPH5tv+v4YY83Lpj6I9Y2V38z1JgyXM4M=
Subject key identifier:   C9:EA:B6:83:EF:F2:68:C7:62:4D:F4:19:D5:AC:89:19:7A:C4:D8:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F7F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa
Signing time:             Wed 08 Jul 2026 12:40:09 +0000
ROA not before:           Wed 08 Jul 2026 12:40:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146851
IP address blocks:        103.171.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63475 (0xf7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  8 12:40:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4e4529-5856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:39:34:cc:1f:2f:6d:b8:e2:5f:14:c0:3c:
                    23:a3:73:fd:8e:72:7c:9f:31:e2:74:c3:7d:4d:fb:
                    85:88:7b:28:c4:2b:2a:8e:9f:9c:bb:21:a6:6a:e8:
                    c0:2b:1c:44:32:6e:a1:63:b3:90:5b:81:3e:00:cc:
                    ca:e8:f7:01:98:23:88:52:b4:f4:ea:e3:1c:80:26:
                    1e:5e:8f:f0:2c:c8:fb:46:a8:bb:17:5e:4c:0e:f9:
                    35:60:3d:33:5b:6b:86:58:dc:b2:4e:62:97:8f:c1:
                    c7:53:b3:9b:66:81:7c:0c:4d:48:a7:22:3b:19:42:
                    24:c8:d1:7e:dc:a2:8a:4e:3d:53:04:7f:00:dd:9e:
                    b4:5b:a8:8d:34:be:b4:5f:60:7b:93:88:a9:30:10:
                    20:d8:2d:6a:8d:ef:20:bc:64:6a:83:7e:50:92:6d:
                    5b:47:12:b5:3b:07:11:b2:a6:28:b1:aa:20:39:46:
                    95:6b:53:eb:2d:5f:28:8d:d9:79:37:33:2c:82:16:
                    50:a1:0a:57:96:4a:f3:f4:60:e0:49:b5:6f:e5:48:
                    8f:fe:db:cb:01:fb:e3:4a:a8:8c:d9:2e:6b:8d:9d:
                    c2:7b:27:79:d9:40:2e:39:72:fe:60:a5:b0:a4:40:
                    f3:11:69:28:ab:34:7b:0a:7b:40:27:42:45:2c:87:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:B6:83:EF:F2:68:C7:62:4D:F4:19:D5:AC:89:19:7A:C4:D8:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2788B5627ACA11F18BD90C416FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:14:6f:f3:a2:49:f9:03:38:cf:9f:8b:5a:e7:6b:c4:a7:8e:
         53:4e:8c:bf:87:b1:61:be:44:04:35:4b:d2:4f:55:65:be:8d:
         d0:fb:8b:02:2f:18:52:c9:1a:d7:51:81:dd:aa:13:96:e0:48:
         e6:aa:8d:b7:45:f1:a7:46:1a:1f:14:bc:6f:f9:db:a6:cd:1d:
         75:64:4f:26:5f:6f:74:ce:25:a1:2d:8b:0a:4a:44:1b:01:4a:
         bc:a9:35:4e:87:c0:30:1c:8a:19:59:e1:4f:7b:a1:56:03:79:
         ae:b2:5b:31:41:a0:8f:d4:3a:75:6e:69:da:12:11:c5:1c:93:
         e3:bc:8a:f3:0c:0c:eb:38:fb:fb:98:6c:fd:5a:3d:e8:f2:f4:
         0a:15:86:83:6b:9c:e5:69:69:11:97:f7:9e:34:1d:61:d7:9a:
         cd:98:39:5d:83:f2:9e:a5:11:fd:4d:88:50:e7:b2:63:66:c2:
         e9:f7:f9:f5:fd:43:93:d6:ed:88:10:ed:a1:66:36:83:b8:0e:
         0b:d7:59:a1:1a:38:10:b5:2e:5e:d6:11:c4:f8:42:70:7b:15:
         09:1c:78:08:26:d5:fc:9f:8d:d9:c0:21:c7:93:af:40:bf:ca:
         df:39:d0:e6:eb:9e:11:dd:a1:f5:e7:da:07:22:21:04:10:01:
         7d:2f:b7:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPfzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwODEyNDAwOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0ZTQ1MjktNTg1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAId4OTTMHy9tuOJfFMA8I6Nz/Y5yfJ8x4nTDfU37hYh7KMQrKo6fnLshpmro
wCscRDJuoWOzkFuBPgDMyuj3AZgjiFK09OrjHIAmHl6P8CzI+0aouxdeTA75NWA9
M1trhljcsk5il4/Bx1Ozm2aBfAxNSKciOxlCJMjRftyiik49UwR/AN2etFuojTS+
tF9ge5OIqTAQINgtao3vILxkaoN+UJJtW0cStTsHEbKmKLGqIDlGlWtT6y1fKI3Z
eTczLIIWUKEKV5ZK8/Rg4Em1b+VIj/7bywH740qojNkua42dwnsnedlALjly/mCl
sKRA8xFpKKs0ewp7QCdCRSyHHFECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTJ6raD
7/Jox2JN9BnVrIkZesTYvTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3ODhCNTYy
N0FDQTExRjE4QkQ5MEM0MTZGQTMwRkJDLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGer+DANBgkqhkiG9w0BAQsFAAOCAQEAZxRv86JJ+QM4z5+LWudr
xKeOU06Mv4exYb5EBDVL0k9VZb6N0PuLAi8YUska11GB3aoTluBI5qqNt0Xxp0Ya
HxS8b/nbps0ddWRPJl9vdM4loS2LCkpEGwFKvKk1TofAMByKGVnhT3uhVgN5rrJb
MUGgj9Q6dW5p2hIRxRyT47yK8wwM6zj7+5hs/Vo96PL0ChWGg2uc5WlpEZf3njQd
YdeazZg5XYPynqUR/U2IUOeyY2bC6ff59f1Dk9btiBDtoWY2g7gOC9dZoRo4ELUu
XtYRxPhCcHsVCRx4CCbV/J+N2cAhx5OvQL/K3znQ5uueEd2h9efaByIhBBABfS+3
xA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:18 2026 by rpki-client