Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B46576CAC3811ED946B6039C4F9AE02.roa
File:                     3B46576CAC3811ED946B6039C4F9AE02.roa (raw, json)
Hash identifier:          +UjmunrO4w6OY2JRECJr+uHU3JGoQQ2SYatBAtSWQJI=
Subject key identifier:   B5:0A:6E:2D:54:C0:3B:CD:38:D6:73:30:4F:9B:7A:C8:82:4E:92:87
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E928
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B46576CAC3811ED946B6039C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:33:43 +0000
ROA not before:           Sun 31 May 2026 17:33:43 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150059
IP address blocks:        103.5.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59688 (0xe928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:33:43 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c70f6-bf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:89:99:8b:df:9d:16:14:a1:ed:2a:59:5a:
                    5c:b7:a3:fd:07:00:d7:7e:96:72:4a:c6:4e:25:02:
                    ca:9e:71:e3:f5:24:d7:2b:f0:45:a0:0f:83:9d:a3:
                    da:6c:84:bc:06:b4:b6:18:0f:a7:21:4c:b2:58:af:
                    4f:79:83:c8:82:1e:7f:2f:9d:20:7b:14:d5:e0:e7:
                    cd:04:10:8e:c9:cd:cf:01:56:c4:50:12:60:87:df:
                    2d:31:ec:ae:b1:8b:58:dd:1b:40:e2:78:3e:02:ac:
                    92:01:0e:45:07:5a:b9:de:e3:9d:0c:6e:f5:b7:5b:
                    d9:26:30:95:68:80:de:9d:6b:8d:f0:cd:32:3c:ee:
                    d6:fc:01:a4:25:59:27:ea:37:52:a1:cc:fb:ae:62:
                    e1:67:0c:de:7d:5c:79:3f:2b:92:69:cb:6d:c8:c6:
                    24:a1:45:2b:e3:5a:7c:aa:23:5c:f0:a9:49:5d:05:
                    9d:09:cd:11:25:ed:72:55:14:fa:89:46:a3:2d:0a:
                    a0:82:65:9c:ed:b0:72:11:d9:e3:28:58:c4:5f:62:
                    b4:af:5b:9f:3a:d1:59:7c:59:b8:76:08:38:15:e7:
                    0f:7c:67:da:cc:3d:67:39:e6:47:06:aa:9f:11:01:
                    5d:85:fa:47:8e:69:9c:88:77:07:23:83:dc:fe:26:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:6E:2D:54:C0:3B:CD:38:D6:73:30:4F:9B:7A:C8:82:4E:92:87
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B46576CAC3811ED946B6039C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:fe:b4:0f:d1:03:23:7d:dc:03:da:d4:14:c6:95:32:30:26:
         93:00:0d:84:c2:29:62:ff:30:12:bc:af:ff:da:d9:8b:f5:75:
         9c:87:df:02:52:eb:ab:99:19:be:cd:3f:28:62:67:24:89:85:
         2a:f1:14:ac:9b:f1:f1:c7:c8:39:ab:71:70:f3:1e:3e:65:e2:
         4e:74:48:73:8c:17:12:9a:ac:7f:85:91:80:ad:d1:4b:b5:95:
         95:c2:bc:07:a6:71:89:f2:3d:ea:d2:71:73:cf:e6:f7:5f:43:
         ee:dc:9b:55:1e:c7:f8:26:4d:13:7e:72:89:92:04:b6:84:f9:
         9d:a3:e9:13:c5:ee:ef:46:ab:85:c1:f2:67:5d:ee:66:6f:ba:
         04:b5:c2:d2:f9:9e:a8:62:22:f7:60:a4:98:60:2f:47:53:d8:
         8c:71:00:8b:60:e7:48:58:1b:3c:4b:37:85:06:14:5f:53:f2:
         d7:fc:f1:61:66:a7:0f:63:6a:bb:b2:fa:80:72:5b:00:18:7f:
         50:2a:c9:9c:52:6e:dc:79:4d:17:fe:e1:d0:c2:e9:97:fa:40:
         9b:38:50:c1:5e:f4:7a:af:e4:fa:54:55:93:3e:92:58:44:06:
         72:53:fc:da:0f:78:d8:d4:72:1d:da:7e:b7:89:27:23:f1:08:
         2e:1d:9f:68
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOkoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzM0M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcwZjYtYmY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVviZmL350WFKHtKllaXLej/QcA136WckrGTiUCyp5x4/Uk1yvwRaAPg52j
2myEvAa0thgPpyFMslivT3mDyIIefy+dIHsU1eDnzQQQjsnNzwFWxFASYIffLTHs
rrGLWN0bQOJ4PgKskgEORQdaud7jnQxu9bdb2SYwlWiA3p1rjfDNMjzu1vwBpCVZ
J+o3UqHM+65i4WcM3n1ceT8rkmnLbcjGJKFFK+NafKojXPCpSV0FnQnNESXtclUU
+olGoy0KoIJlnO2wchHZ4yhYxF9itK9bnzrRWXxZuHYIOBXnD3xn2sw9ZznmRwaq
nxEBXYX6R45pnIh3ByOD3P4mjqkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBS1Cm4t
VMA7zTjWczBPm3rIgk6ShzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNCNDY1NzZD
QUMzODExRUQ5NDZCNjAzOUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGcFaDANBgkqhkiG9w0BAQsFAAOCAQEAuv60D9EDI33cA9rUFMaV
MjAmkwANhMIpYv8wEryv/9rZi/V1nIffAlLrq5kZvs0/KGJnJImFKvEUrJvx8cfI
OatxcPMePmXiTnRIc4wXEpqsf4WRgK3RS7WVlcK8B6ZxifI96tJxc8/m919D7tyb
VR7H+CZNE35yiZIEtoT5naPpE8Xu70arhcHyZ13uZm+6BLXC0vmeqGIi92CkmGAv
R1PYjHEAi2DnSFgbPEs3hQYUX1Py1/zxYWanD2Nqu7L6gHJbABh/UCrJnFJu3HlN
F/7h0MLpl/pAmzhQwV70eq/k+lRVkz6SWEQGclP82g942NRyHdp+t4knI/EILh2f
aA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:48 2026 by rpki-client