Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F2C4900BDD611EA97CDF72CC4F9AE02.roa
File:                     5F2C4900BDD611EA97CDF72CC4F9AE02.roa (raw, json)
Hash identifier:          YmbmbT16xO0fBWN4da1Dhoy1glc7NnhDiEc57GNfbFo=
Subject key identifier:   01:04:3B:26:88:B8:74:D4:5F:D7:5F:58:6A:47:8E:E5:96:66:A0:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F097
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F2C4900BDD611EA97CDF72CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:52:23 +0000
ROA not before:           Mon 06 Jul 2026 16:52:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136304
IP address blocks:        103.90.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61591 (0xf097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:52:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdd47-5a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:95:78:e4:5d:49:86:34:56:1d:36:51:18:6e:
                    3b:48:f4:18:a9:30:5d:f4:84:3b:32:10:d8:eb:41:
                    b2:55:4b:2b:c7:bd:3e:04:ee:62:d8:fa:b8:8d:e0:
                    64:19:09:c1:9a:56:55:98:46:82:57:de:9a:8c:31:
                    12:fa:05:fa:d2:fc:83:29:cc:37:42:93:a9:77:d3:
                    40:b2:92:40:23:3b:a5:60:52:23:d3:c7:ff:69:88:
                    b7:16:c8:38:b1:d0:6d:5e:7e:05:d3:b8:c1:d1:06:
                    f5:e9:ac:b3:77:6d:44:e7:db:e2:e2:aa:da:f9:5a:
                    c4:66:2a:3c:a7:02:83:67:e5:38:f9:d4:1e:ba:db:
                    a8:42:e0:46:b6:8a:b5:9a:56:ac:e6:72:b4:2d:10:
                    19:eb:f8:f0:25:cd:a1:70:a2:18:c5:4b:a3:37:ee:
                    11:81:da:03:bb:8a:42:62:c9:96:31:ec:1b:7c:21:
                    d1:0d:dd:0c:a1:79:08:9e:d8:82:69:1d:fa:fd:e7:
                    98:16:07:e4:cf:4c:42:d9:44:9d:19:fb:8a:20:34:
                    35:21:80:cd:0b:4d:33:63:e3:53:ac:b9:f9:03:2c:
                    b6:bc:6e:f0:75:f5:1f:a6:a4:6a:7a:e4:4e:b0:18:
                    e3:2c:8a:84:2c:bf:46:4b:cb:3c:cb:8d:a9:af:17:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:3B:26:88:B8:74:D4:5F:D7:5F:58:6A:47:8E:E5:96:66:A0:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F2C4900BDD611EA97CDF72CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:be:a1:fc:44:2f:9f:c1:6d:ad:84:11:0a:20:72:25:f2:0f:
         4f:89:7b:6f:d0:66:02:61:15:b0:7a:da:6c:e0:ea:23:17:8d:
         ad:6b:75:8f:6c:19:fc:53:b5:43:b3:07:de:a1:2e:96:fd:cb:
         40:a5:e2:9b:99:72:64:09:4f:a0:05:9e:6b:65:3c:86:0d:96:
         4e:f2:f7:70:27:cd:0a:4d:ca:4b:40:06:46:ce:cf:f9:e1:37:
         02:fe:bd:90:dd:80:a3:74:ce:d4:14:78:f1:6d:a7:f6:d8:ea:
         5d:bf:c8:ad:89:da:65:47:e0:6a:59:fa:46:bc:d7:83:96:3e:
         bd:70:97:75:17:e1:50:e1:ab:f3:ef:11:13:e3:ab:f7:28:92:
         86:e9:f4:0d:c5:fb:00:be:60:1e:fb:2d:a6:69:0a:ca:da:3e:
         7c:74:ed:5d:b1:46:f8:55:8f:d7:9e:41:d1:f8:8a:24:eb:93:
         d9:8d:d2:61:bf:34:0b:2c:bf:53:0e:96:25:e4:86:57:ea:38:
         d7:ed:79:08:c9:4e:46:83:2b:6d:d8:6e:b7:86:88:ee:b3:f4:
         16:b7:4a:bd:b6:56:0f:6a:07:e8:ba:b6:9b:44:84:51:64:96:
         39:de:14:9b:86:5e:d3:55:fc:ad:96:c3:16:9c:79:b5:83:2e:
         33:95:14:46
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPCXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTIyM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRkNDctNWE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+VeORdSYY0Vh02URhuO0j0GKkwXfSEOzIQ2OtBslVLK8e9PgTuYtj6uI3g
ZBkJwZpWVZhGglfemowxEvoF+tL8gynMN0KTqXfTQLKSQCM7pWBSI9PH/2mItxbI
OLHQbV5+BdO4wdEG9emss3dtROfb4uKq2vlaxGYqPKcCg2flOPnUHrrbqELgRraK
tZpWrOZytC0QGev48CXNoXCiGMVLozfuEYHaA7uKQmLJljHsG3wh0Q3dDKF5CJ7Y
gmkd+v3nmBYH5M9MQtlEnRn7iiA0NSGAzQtNM2PjU6y5+QMstrxu8HX1H6akanrk
TrAY4yyKhCy/RkvLPMuNqa8XdsECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQBBDsm
iLh01F/XX1hqR47llmagjzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGMkM0OTAw
QkRENjExRUE5N0NERjcyQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdaTzANBgkqhkiG9w0BAQsFAAOCAQEAjr6h/EQvn8FtrYQRCiBy
JfIPT4l7b9BmAmEVsHrabODqIxeNrWt1j2wZ/FO1Q7MH3qEulv3LQKXim5lyZAlP
oAWea2U8hg2WTvL3cCfNCk3KS0AGRs7P+eE3Av69kN2Ao3TO1BR48W2n9tjqXb/I
rYnaZUfgaln6RrzXg5Y+vXCXdRfhUOGr8+8RE+Or9yiShun0DcX7AL5gHvstpmkK
yto+fHTtXbFG+FWP155B0fiKJOuT2Y3SYb80Cyy/Uw6WJeSGV+o41+15CMlORoMr
bdhut4aI7rP0FrdKvbZWD2oH6Lq2m0SEUWSWOd4Um4Ze01X8rZbDFpx5tYMuM5UU
Rg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:43 2026 by rpki-client