Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3357DB6E24F611F097471751C4F9AE02.roa
File:                     3357DB6E24F611F097471751C4F9AE02.roa (raw, json)
Hash identifier:          6KEoONiZUXLsjTC27eNnC/Sn2gOpD5PondByB5Rst6M=
Subject key identifier:   42:ED:14:F1:A0:76:ED:48:07:1E:BD:C5:19:E9:F9:9C:E1:30:30:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2C9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3357DB6E24F611F097471751C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:10:59 +0000
ROA not before:           Mon 06 Jul 2026 17:10:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140704
IP address blocks:        103.28.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62153 (0xf2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:10:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be1a3-c9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:ac:0a:5a:16:fb:a1:3a:87:47:f4:24:5d:
                    20:e5:c3:90:76:20:e4:14:4c:0e:66:d1:e7:03:90:
                    ea:18:c1:49:a4:e7:b8:cf:03:71:8a:ce:42:01:e6:
                    43:4f:1c:48:84:88:71:9a:a1:30:09:ff:4c:ab:0a:
                    a7:0e:48:5a:de:87:5f:d5:85:6c:b1:ab:b8:cc:c8:
                    84:c3:d3:a6:81:31:ab:23:c1:eb:e6:7e:70:7c:fd:
                    37:e8:fa:c9:cb:7d:a9:cb:6f:2e:0e:81:5b:e7:2a:
                    41:92:d2:8e:5f:5c:14:d4:53:93:50:a2:23:3f:d8:
                    26:62:60:87:3c:e8:ce:40:c6:88:b2:98:cf:bd:a2:
                    2a:39:b9:0c:1a:d8:88:d0:50:7b:97:66:07:e8:c4:
                    5d:68:6b:7f:64:98:3a:59:e8:94:92:08:3d:65:0a:
                    77:c9:8a:1f:19:0a:fc:af:64:a4:27:33:dd:ed:08:
                    74:e3:a3:8e:77:06:80:d9:8d:db:ce:a5:75:19:f5:
                    1b:f6:4f:35:e7:f7:d0:45:39:92:fe:70:00:38:9c:
                    b5:d7:c1:69:cf:78:a6:87:57:0d:e7:d9:f8:ed:ff:
                    58:cf:e0:ea:65:bf:ea:ec:d5:23:ba:d2:79:d5:ac:
                    f8:ff:d1:71:05:ca:29:5f:2a:f2:51:d3:fc:8a:dd:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:14:F1:A0:76:ED:48:07:1E:BD:C5:19:E9:F9:9C:E1:30:30:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3357DB6E24F611F097471751C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ec:12:85:27:d9:59:ec:05:f5:ed:23:c9:9d:79:bb:b3:4b:
         34:28:08:06:99:98:7f:06:b4:f0:b9:d3:8b:b1:df:d4:17:58:
         d3:8c:65:15:8b:f4:2d:ec:dc:de:23:c2:6e:54:3e:97:d3:d3:
         00:4b:5c:3f:fe:32:dc:d7:7d:8d:03:d7:76:41:b5:bd:05:af:
         2b:6c:a0:d4:3e:9c:c8:96:99:29:99:5b:7d:0e:62:67:a6:ea:
         5f:1c:8f:81:e7:3f:84:6d:c6:71:cd:f1:48:6d:a7:32:16:9f:
         66:4c:ae:7b:34:f4:79:74:61:c4:51:74:d8:95:c9:b3:c4:5f:
         04:4c:49:b7:3a:58:cd:7f:6d:f8:25:88:53:49:d5:12:4f:33:
         75:68:f7:f1:2c:3a:2f:f4:bf:b9:39:ee:64:a0:5d:c8:8f:15:
         1c:e4:01:05:64:80:5b:61:02:aa:68:fd:2d:b4:6f:00:91:70:
         32:de:33:ec:53:0e:cf:f7:62:7e:9d:d8:34:7c:ea:57:dd:00:
         af:4a:56:8b:9f:14:c7:12:00:24:a2:8b:43:33:8c:88:ce:2e:
         a8:d2:05:2b:d3:21:24:89:8c:15:a5:8e:eb:32:3b:db:11:cf:
         bc:45:00:33:53:d2:3f:1d:b3:b0:b4:0a:eb:d1:ec:ed:45:dc:
         55:1f:5e:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPLJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTA1OVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxYTMtYzljMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMEorApaFvuhOodH9CRdIOXDkHYg5BRMDmbR5wOQ6hjBSaTnuM8DcYrOQgHm
Q08cSISIcZqhMAn/TKsKpw5IWt6HX9WFbLGruMzIhMPTpoExqyPB6+Z+cHz9N+j6
yct9qctvLg6BW+cqQZLSjl9cFNRTk1CiIz/YJmJghzzozkDGiLKYz72iKjm5DBrY
iNBQe5dmB+jEXWhrf2SYOlnolJIIPWUKd8mKHxkK/K9kpCcz3e0IdOOjjncGgNmN
286ldRn1G/ZPNef30EU5kv5wADictdfBac94podXDefZ+O3/WM/g6mW/6uzVI7rS
edWs+P/RcQXKKV8q8lHT/IrdnS8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRC7RTx
oHbtSAcevcUZ6fmc4TAwUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzNTdEQjZF
MjRGNjExRjA5NzQ3MTc1MUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGcc9zANBgkqhkiG9w0BAQsFAAOCAQEAH+wShSfZWewF9e0jyZ15
u7NLNCgIBpmYfwa08LnTi7Hf1BdY04xlFYv0Lezc3iPCblQ+l9PTAEtcP/4y3Nd9
jQPXdkG1vQWvK2yg1D6cyJaZKZlbfQ5iZ6bqXxyPgec/hG3Gcc3xSG2nMhafZkyu
ezT0eXRhxFF02JXJs8RfBExJtzpYzX9t+CWIU0nVEk8zdWj38Sw6L/S/uTnuZKBd
yI8VHOQBBWSAW2ECqmj9LbRvAJFwMt4z7FMOz/difp3YNHzqV90Ar0pWi58UxxIA
JKKLQzOMiM4uqNIFK9MhJImMFaWO6zI72xHPvEUAM1PSPx2zsLQK69Hs7UXcVR9e
rg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:53 2026 by rpki-client