Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2913F514DD3B11EAAEE3692BC4F9AE02.roa
File:                     2913F514DD3B11EAAEE3692BC4F9AE02.roa (raw, json)
Hash identifier:          JS37N87Vvoo97p+QqRW5IP2pKYU2HE3+hB//b2CObnM=
Subject key identifier:   AF:C8:45:C1:C8:17:70:5D:C4:F2:52:73:3D:5A:50:B3:3A:F0:A5:2F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F14F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2913F514DD3B11EAAEE3692BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:58:21 +0000
ROA not before:           Mon 06 Jul 2026 16:58:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137143
IP address blocks:        103.105.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61775 (0xf14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:58:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdead-8366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:35:e6:3c:c0:7c:c3:f3:9d:e7:8e:cd:14:
                    d5:e0:7c:d4:f3:2d:c3:0d:56:3e:8c:89:a4:4a:38:
                    32:7d:e0:2a:d1:64:49:f2:bd:d8:74:60:4e:b3:37:
                    b2:f9:d7:ed:5c:3b:a9:1c:bb:b4:dd:42:9a:2c:b9:
                    c3:ec:ce:cc:53:53:db:44:12:1d:f4:17:92:b1:5a:
                    a5:5b:fa:91:5c:8d:47:1d:2e:3a:92:d6:73:70:f5:
                    01:af:1d:2a:6c:98:04:6a:78:a1:5f:68:e1:32:1e:
                    9c:b5:3e:ef:a2:79:b3:a0:44:86:d9:ac:46:e4:69:
                    46:ee:d2:12:34:1b:71:fc:49:1e:50:10:b6:2b:e2:
                    6e:81:0a:4c:28:ee:cb:42:b6:a0:95:18:6a:2f:73:
                    36:2f:80:10:f5:4d:24:8a:b5:b7:f3:17:61:8a:db:
                    13:bd:8a:f7:e8:97:76:95:9b:ea:99:c5:78:5f:67:
                    52:f9:28:ae:72:e5:29:24:fd:23:94:7a:9e:a1:08:
                    0e:71:5c:39:48:73:9f:73:ad:3f:26:3d:c1:e1:dc:
                    bd:40:82:a7:1a:d9:84:30:b4:77:a5:ab:17:0d:18:
                    be:37:e3:13:5f:78:4b:65:d3:40:e4:3a:2c:dc:f8:
                    ba:55:f1:57:7f:1f:94:44:eb:28:7b:b7:c6:f1:17:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:45:C1:C8:17:70:5D:C4:F2:52:73:3D:5A:50:B3:3A:F0:A5:2F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2913F514DD3B11EAAEE3692BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:08:5f:e7:b7:6e:0e:18:97:6a:c0:27:de:e9:da:94:58:
         35:1f:ed:09:63:e7:26:cc:21:e7:a9:8d:e6:a8:f0:47:3b:be:
         ec:60:fb:9f:b1:d9:0f:ea:c6:c2:44:8e:d2:60:a4:b7:39:f4:
         f3:8c:d8:e1:a6:51:c8:cb:f5:b9:63:2b:4e:4d:d8:15:7b:79:
         da:69:57:df:f0:f7:13:78:77:96:9a:3d:f1:43:93:d2:6d:b7:
         f1:89:99:e6:5d:d4:cb:96:0a:2a:9d:72:88:e1:63:4f:7d:89:
         a9:e2:04:df:f0:8f:1d:ed:7f:1d:02:1a:bb:83:fe:f3:5f:86:
         a6:c5:aa:29:1e:88:bf:a6:5c:12:3a:7f:56:0d:78:b9:d0:ac:
         1d:0d:1b:4e:34:44:39:24:50:d6:20:a8:dd:61:6f:e7:97:f9:
         32:76:1c:da:f4:9c:20:fc:5c:a8:d0:f7:e5:ad:96:6f:d3:07:
         38:3e:0d:d0:46:ec:d7:43:7f:2f:fa:14:14:17:6c:f1:7a:1d:
         6e:c2:e4:63:c8:c0:91:a6:cf:91:89:bd:ad:02:8b:40:29:45:
         a0:34:f0:70:3f:18:75:bf:6b:2c:14:66:0a:ea:c6:ea:01:84:
         ee:3e:bb:4b:a1:98:7f:1e:60:50:9f:f1:f4:28:4c:db:f6:c4:
         a5:b6:cd:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPFPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTgyMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRlYWQtODM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYFNeY8wHzD853njs0U1eB81PMtww1WPoyJpEo4Mn3gKtFkSfK92HRgTrM3
svnX7Vw7qRy7tN1Cmiy5w+zOzFNT20QSHfQXkrFapVv6kVyNRx0uOpLWc3D1Aa8d
KmyYBGp4oV9o4TIenLU+76J5s6BEhtmsRuRpRu7SEjQbcfxJHlAQtiviboEKTCju
y0K2oJUYai9zNi+AEPVNJIq1t/MXYYrbE72K9+iXdpWb6pnFeF9nUvkornLlKST9
I5R6nqEIDnFcOUhzn3OtPyY9weHcvUCCpxrZhDC0d6WrFw0YvjfjE194S2XTQOQ6
LNz4ulXxV38flETrKHu3xvEXX18CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSvyEXB
yBdwXcTyUnM9WlCzOvClLzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI5MTNGNTE0
REQzQjExRUFBRUUzNjkyQkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdpKDANBgkqhkiG9w0BAQsFAAOCAQEADLoIX+e3bg4Yl2rAJ97p
2pRYNR/tCWPnJswh56mN5qjwRzu+7GD7n7HZD+rGwkSO0mCktzn084zY4aZRyMv1
uWMrTk3YFXt52mlX3/D3E3h3lpo98UOT0m238YmZ5l3Uy5YKKp1yiOFjT32JqeIE
3/CPHe1/HQIau4P+81+GpsWqKR6Iv6ZcEjp/Vg14udCsHQ0bTjREOSRQ1iCo3WFv
55f5MnYc2vScIPxcqND35a2Wb9MHOD4N0Ebs10N/L/oUFBds8XodbsLkY8jAkabP
kYm9rQKLQClFoDTwcD8Ydb9rLBRmCurG6gGE7j67S6GYfx5gUJ/x9ChM2/bEpbbN
Dg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:23 2026 by rpki-client