Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
File:                     518165E2081B11ED8C0F9244C4F9AE02.roa (raw, json)
Hash identifier:          05HzVfO2mgNL/YPMZi8pxyQXSisRuy1Gg6emWOEXUQQ=
Subject key identifier:   2D:A2:1D:A1:3E:8D:42:0A:49:D0:C3:8B:DB:DC:49:6C:98:AB:2D:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:10:26 +0000
ROA not before:           Mon 06 Jul 2026 17:10:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140192
IP address blocks:        103.156.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62137 (0xf2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:10:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be182-8781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:cf:bd:ec:45:d1:96:98:7b:62:23:f9:65:
                    25:29:69:52:dc:e6:38:24:7a:92:a0:db:9f:98:44:
                    52:15:92:00:8e:14:b6:4f:b0:1a:80:99:be:93:96:
                    4e:ef:8d:74:a6:33:a0:7a:c0:fc:a3:9a:eb:8f:65:
                    36:a4:66:db:ab:0e:71:01:38:50:55:0e:21:7e:b1:
                    ac:8e:83:93:af:e9:f5:80:01:64:0b:f3:f7:2e:33:
                    13:2d:e7:0f:f2:9c:f6:da:4f:df:c8:0e:e5:1f:b4:
                    80:b4:f3:9d:42:a0:e5:a8:d2:b6:85:bb:97:35:d7:
                    2e:9a:ef:dc:56:18:64:39:5e:50:10:c5:ae:c5:4e:
                    cd:f6:d4:f6:b3:54:47:4a:a5:16:d9:6d:a8:87:a4:
                    8f:64:b1:56:d4:92:61:b5:b8:f6:e4:66:d0:4a:e6:
                    83:c9:b7:85:64:84:00:66:4a:82:3d:0a:bd:1f:77:
                    db:f1:ea:76:99:e4:a0:2e:29:fd:78:f3:74:85:fd:
                    20:c7:64:ae:cc:17:30:6c:9a:74:44:80:83:34:cf:
                    84:ef:0f:b4:bc:70:45:5f:95:01:77:a9:38:9f:a4:
                    d9:1f:96:c5:26:65:bf:f3:ed:fb:3b:0f:f9:b2:97:
                    c4:c0:6e:32:31:dd:b2:44:f6:fb:f3:dd:6a:e7:97:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:1D:A1:3E:8D:42:0A:49:D0:C3:8B:DB:DC:49:6C:98:AB:2D:B9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f3:83:ac:87:96:bf:7b:f5:e0:53:be:46:25:52:4e:4f:19:
         8a:0c:fb:9c:12:15:d5:87:59:b2:1c:29:9e:df:a1:be:7b:73:
         a9:55:ae:17:cf:a7:42:f9:d7:d0:9a:9f:8c:f9:c2:78:0a:16:
         5e:b1:bf:9f:e0:6c:64:9d:ce:69:99:24:cc:fa:f8:30:ec:8e:
         07:91:31:a0:2d:b3:fc:5b:93:79:ab:b5:9e:40:72:fc:d0:3e:
         22:ee:5f:62:69:c1:00:02:04:0f:a6:27:f1:cb:80:6f:44:f9:
         f7:d3:07:04:cd:c2:6f:32:68:63:1c:f0:a7:9c:8c:27:e3:56:
         b5:c1:e9:81:69:5f:3e:5d:38:93:40:5f:fd:34:47:c1:14:db:
         c9:18:41:77:ff:88:95:d3:07:55:5f:67:62:1e:8a:29:9d:79:
         a3:5d:c5:d8:e7:1b:8b:ac:7c:f8:11:a2:de:5c:bf:18:e0:09:
         3d:4c:5a:2e:08:9f:ee:45:e1:0a:f7:36:5b:95:22:a2:e0:4f:
         60:df:78:0e:b9:28:8c:74:b0:80:c5:32:8d:86:d3:d6:f5:3e:
         5f:32:b6:69:20:b6:03:66:68:83:59:b3:60:c1:ca:73:91:9c:
         57:37:72:32:41:66:7e:32:48:ce:a3:dd:76:8a:b1:da:a6:e5:
         8e:81:57:bd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPK5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTAyNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxODItODc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhZz73sRdGWmHtiI/llJSlpUtzmOCR6kqDbn5hEUhWSAI4Utk+wGoCZvpOW
Tu+NdKYzoHrA/KOa649lNqRm26sOcQE4UFUOIX6xrI6Dk6/p9YABZAvz9y4zEy3n
D/Kc9tpP38gO5R+0gLTznUKg5ajStoW7lzXXLprv3FYYZDleUBDFrsVOzfbU9rNU
R0qlFtltqIekj2SxVtSSYbW49uRm0Ermg8m3hWSEAGZKgj0KvR932/HqdpnkoC4p
/XjzdIX9IMdkrswXMGyadESAgzTPhO8PtLxwRV+VAXepOJ+k2R+WxSZlv/Pt+zsP
+bKXxMBuMjHdskT2+/PdaueXd3ECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQtoh2h
Po1CCknQw4vb3ElsmKstuTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUxODE2NUUy
MDgxQjExRUQ4QzBGOTI0NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGecvDANBgkqhkiG9w0BAQsFAAOCAQEAa/ODrIeWv3v14FO+RiVS
Tk8Zigz7nBIV1YdZshwpnt+hvntzqVWuF8+nQvnX0JqfjPnCeAoWXrG/n+BsZJ3O
aZkkzPr4MOyOB5ExoC2z/FuTeau1nkBy/NA+Iu5fYmnBAAIED6Yn8cuAb0T599MH
BM3CbzJoYxzwp5yMJ+NWtcHpgWlfPl04k0Bf/TRHwRTbyRhBd/+IldMHVV9nYh6K
KZ15o13F2Ocbi6x8+BGi3ly/GOAJPUxaLgif7kXhCvc2W5UiouBPYN94DrkojHSw
gMUyjYbT1vU+XzK2aSC2A2Zog1mzYMHKc5GcVzdyMkFmfjJIzqPddoqx2qbljoFX
vQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:34 2026 by rpki-client