Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/580E615ABDCF11EA8755D90DC4F9AE02.roa
File:                     580E615ABDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          zVDOkY0XwrjPLy0sa6VRlhhRTHbHjmGXpbV+pUPXkVg=
Subject key identifier:   9D:4E:CC:A5:69:AC:4B:5D:77:0A:76:44:2D:4F:8C:88:E2:EA:45:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E423
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/580E615ABDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:51:23 +0000
ROA not before:           Sun 31 May 2026 16:51:23 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135781
IP address blocks:        103.139.246.0/24 maxlen: 24
                          103.139.247.0/24 maxlen: 24
                          2400:61e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 09:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58403 (0xe423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:51:23 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c670b-1ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:15:42:3b:67:59:f3:78:23:df:67:bf:b5:
                    7a:86:53:26:c0:28:1a:4a:a2:1e:7b:2f:a1:2b:91:
                    80:ee:9a:f8:4c:49:59:42:98:f5:98:d7:3e:0c:45:
                    e9:ad:ad:b6:e8:39:4f:f1:5f:4a:e2:53:ea:f6:ad:
                    c4:3b:a3:c4:15:f0:e1:b0:eb:d5:c4:f0:93:ef:b5:
                    f3:7f:38:2d:db:0f:98:4b:31:1e:8b:39:b6:2c:b6:
                    65:5b:25:0d:45:d6:43:4b:3c:a3:b5:0d:36:19:3b:
                    d5:84:3b:6f:2b:3f:e0:29:a4:f7:69:90:81:ac:aa:
                    c2:3e:69:02:9f:e3:a2:63:33:20:68:d2:24:14:90:
                    00:3a:4d:47:40:e2:f1:16:08:5f:12:fd:cd:f6:00:
                    0e:e6:cf:b7:24:4f:27:b8:c5:64:70:63:c4:c6:c9:
                    bf:9f:8f:d0:61:d0:91:8d:64:ab:41:91:01:57:f0:
                    b1:be:f5:d6:80:ed:9c:ea:fb:f1:8e:1a:a4:cb:10:
                    17:0e:23:6b:d9:49:4e:00:dd:c2:1c:ea:49:29:e6:
                    21:0e:d3:59:5b:1b:99:ec:8f:83:74:46:09:2d:c2:
                    00:b3:e5:94:c0:76:68:a1:6a:77:7e:97:4f:c3:2d:
                    5d:24:5f:e9:ba:62:7f:f8:cb:b8:06:19:8b:ae:4e:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:CC:A5:69:AC:4B:5D:77:0A:76:44:2D:4F:8C:88:E2:EA:45:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/580E615ABDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.246.0/23
                IPv6:
                  2400:61e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:9c:fe:54:d1:b7:28:3b:85:66:45:71:21:29:26:99:b4:
         47:31:77:91:bd:4b:98:fb:c0:34:6c:d8:6c:a8:72:16:94:d2:
         00:59:b0:63:11:01:f1:06:2b:3a:fd:38:4b:bf:23:ac:5f:de:
         03:74:0e:b7:e4:33:5b:ec:33:a5:dd:0c:78:19:13:c0:13:1b:
         b9:87:81:3c:c7:e5:85:aa:9c:42:40:1e:80:0b:51:5a:26:5d:
         89:8a:a1:89:6d:4c:e2:d6:f8:bb:5b:37:18:56:61:6c:11:9d:
         1e:4b:5a:6c:0a:0f:20:33:3c:d3:5b:56:b9:70:3d:4c:e7:b6:
         1d:0e:01:0b:07:6c:df:e0:a8:a4:0a:7b:66:21:14:14:54:5a:
         af:bd:fe:bf:e5:0e:cc:47:b6:36:78:6a:22:e0:04:8e:06:05:
         32:13:31:67:5b:6c:26:91:26:7b:16:67:47:eb:f5:58:be:bd:
         46:45:4d:f9:d4:28:df:bd:0b:7e:55:02:5e:4b:e9:87:54:3b:
         f7:9f:58:25:bf:fb:27:4b:e9:f7:c0:4e:c7:98:95:bb:e3:5c:
         ab:54:b7:e2:7d:5d:44:2a:68:1b:5a:1a:04:a4:c2:ef:bb:b1:
         72:d4:41:b6:44:cb:69:a4:3c:66:e6:08:75:dd:99:f6:fc:ac:
         d6:d3:47:7b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTEyM1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY3MGItMWNhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm/FUI7Z1nzeCPfZ7+1eoZTJsAoGkqiHnsvoSuRgO6a+ExJWUKY9ZjXPgxF
6a2ttug5T/FfSuJT6vatxDujxBXw4bDr1cTwk++18384LdsPmEsxHos5tiy2ZVsl
DUXWQ0s8o7UNNhk71YQ7bys/4Cmk92mQgayqwj5pAp/jomMzIGjSJBSQADpNR0Di
8RYIXxL9zfYADubPtyRPJ7jFZHBjxMbJv5+P0GHQkY1kq0GRAVfwsb711oDtnOr7
8Y4apMsQFw4ja9lJTgDdwhzqSSnmIQ7TWVsbmeyPg3RGCS3CALPllMB2aKFqd36X
T8MtXSRf6bpif/jLuAYZi65Or4ECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSdTsyl
aaxLXXcKdkQtT4yI4upFEDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4MEU2MTVB
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWeL9jANBAIAAjAHAwUAJABh4DANBgkqhkiG9w0BAQsFAAOCAQEA
JMmc/lTRtyg7hWZFcSEpJpm0RzF3kb1LmPvANGzYbKhyFpTSAFmwYxEB8QYrOv04
S78jrF/eA3QOt+QzW+wzpd0MeBkTwBMbuYeBPMflhaqcQkAegAtRWiZdiYqhiW1M
4tb4u1s3GFZhbBGdHktabAoPIDM801tWuXA9TOe2HQ4BCwds3+CopAp7ZiEUFFRa
r73+v+UOzEe2NnhqIuAEjgYFMhMxZ1tsJpEmexZnR+v1WL69RkVN+dQo370LflUC
Xkvph1Q7959YJb/7J0vp98BOx5iVu+Ncq1S34n1dRCpoG1oaBKTC77uxctRBtkTL
aaQ8ZuYIdd2Z9vys1tNHew==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:39 2026 by rpki-client