Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
File:                     322150E0541611EC80009E4EC4F9AE02.roa (raw, json)
Hash identifier:          79yiYpSoN5N+ZZCGJNXcrRZz0hOfhTnfO8XLhJFyg/s=
Subject key identifier:   5C:6E:5E:F1:D7:7D:AC:30:93:5B:46:3B:33:C7:D9:E0:04:18:3A:25
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1A5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:01:21 +0000
ROA not before:           Mon 06 Jul 2026 17:01:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137662
IP address blocks:        103.122.56.0/22 maxlen: 24
                          2001:df1:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61861 (0xf1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:01:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdf61-7c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:48:3c:28:f2:4d:e2:71:29:98:54:22:2e:
                    57:90:06:4e:89:ac:22:e6:62:b0:4c:dd:74:5f:ba:
                    a5:aa:c7:ff:bd:ae:dd:da:60:e3:db:c6:bf:6b:bd:
                    a8:30:51:98:8f:23:a3:dc:cb:74:87:63:2e:20:d8:
                    06:c1:58:7d:78:5d:7d:e4:ea:15:4a:52:ed:6e:9a:
                    fd:c1:a3:4d:1a:bd:fa:b2:fc:a4:74:6b:41:01:90:
                    31:1f:8c:d0:f6:de:26:d9:4c:da:a7:ff:14:69:e5:
                    e2:88:e0:14:84:88:a0:60:b6:a7:a6:e2:a0:c5:33:
                    92:45:3b:c1:9e:0c:b8:b7:0d:08:0f:03:54:fc:d0:
                    b5:ab:ee:46:d1:91:d7:8b:b0:55:3a:16:1e:6b:9c:
                    7b:4c:d9:ab:92:74:b1:0c:86:90:2d:c0:1c:9a:11:
                    25:30:9f:84:c2:84:ef:f1:f1:82:3f:f6:55:c2:90:
                    7b:28:21:55:f8:c3:da:12:bb:b8:5c:2e:04:25:88:
                    cb:a5:eb:87:cd:71:ff:39:d7:5a:8c:94:8d:0c:4b:
                    01:f5:31:13:9e:78:bf:e0:47:1d:23:3c:3a:f7:4d:
                    50:7a:65:db:d1:c8:00:2d:9b:96:34:99:b1:12:ba:
                    fb:23:6b:3f:5b:03:a5:bf:0f:1a:e8:ae:0e:ec:b7:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6E:5E:F1:D7:7D:AC:30:93:5B:46:3B:33:C7:D9:E0:04:18:3A:25
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.56.0/22
                IPv6:
                  2001:df1:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:0a:0f:7e:1c:52:8e:01:7f:d5:a1:70:11:ca:f1:21:c2:
         09:bc:ff:98:15:df:ab:d3:a6:59:0c:80:74:ce:db:02:88:ec:
         88:31:03:9e:5d:c9:05:d5:75:96:26:61:e4:52:5b:4f:5e:31:
         8b:c1:96:9c:cf:c2:a3:ba:a7:7c:5b:fc:eb:84:a4:c8:8f:6f:
         d0:6b:3a:cf:aa:70:58:66:8e:98:ea:fb:83:31:97:f5:e4:7e:
         5b:f1:62:b4:e6:25:e7:a7:39:09:7f:b5:eb:06:52:28:3f:a8:
         42:06:24:a6:d8:5e:66:0b:e8:4d:20:b2:f8:cc:56:24:d8:98:
         da:bf:02:3c:15:2a:5e:c9:99:74:4c:9c:c9:cb:fb:96:2d:46:
         b2:11:8b:61:bc:94:68:9d:16:69:22:c9:de:43:48:97:69:32:
         ec:93:53:35:24:a6:5e:8f:59:83:84:25:d1:5b:2b:c0:82:04:
         75:15:ff:82:df:e8:87:e1:89:31:03:82:c0:96:3e:5a:4f:bd:
         d6:b1:73:34:aa:a9:22:4f:03:82:46:41:48:2a:f6:5a:a7:55:
         6c:5b:9e:94:e7:be:bd:08:f9:82:f0:e8:5b:5d:3f:95:ec:43:
         17:86:cc:31:90:ec:8b:e6:db:ea:48:53:15:6e:9a:9d:f4:8f:
         c0:99:fb:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPGlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDEyMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRmNjEtN2MyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKevSDwo8k3icSmYVCIuV5AGTomsIuZisEzddF+6parH/72u3dpg49vGv2u9
qDBRmI8jo9zLdIdjLiDYBsFYfXhdfeTqFUpS7W6a/cGjTRq9+rL8pHRrQQGQMR+M
0PbeJtlM2qf/FGnl4ojgFISIoGC2p6bioMUzkkU7wZ4MuLcNCA8DVPzQtavuRtGR
14uwVToWHmuce0zZq5J0sQyGkC3AHJoRJTCfhMKE7/Hxgj/2VcKQeyghVfjD2hK7
uFwuBCWIy6Xrh81x/znXWoyUjQxLAfUxE554v+BHHSM8OvdNUHpl29HIAC2bljSZ
sRK6+yNrP1sDpb8PGuiuDuy3x5UCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRcbl7x
132sMJNbRjszx9ngBBg6JTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyMjE1MEUw
NTQxNjExRUM4MDAwOUU0RUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAmd6ODAPBAIAAjAJAwcAIAEN8QZAMA0GCSqGSIb3DQEBCwUAA4IB
AQBviQoPfhxSjgF/1aFwEcrxIcIJvP+YFd+r06ZZDIB0ztsCiOyIMQOeXckF1XWW
JmHkUltPXjGLwZacz8Kjuqd8W/zrhKTIj2/QazrPqnBYZo6Y6vuDMZf15H5b8WK0
5iXnpzkJf7XrBlIoP6hCBiSm2F5mC+hNILL4zFYk2JjavwI8FSpeyZl0TJzJy/uW
LUayEYthvJRonRZpIsneQ0iXaTLsk1M1JKZej1mDhCXRWyvAggR1Ff+C3+iH4Ykx
A4LAlj5aT73WsXM0qqkiTwOCRkFIKvZap1VsW56U5769CPmC8OhbXT+V7EMXhswx
kOyL5tvqSFMVbpqd9I/Amfs2
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:36:54 2026 by rpki-client