Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa
File:                     5F583B02BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          at9KSODIa4tVD2nzummldjn7VXa9S50Zu8mJTYnsiAQ=
Subject key identifier:   A7:4A:4D:CE:5A:10:D0:70:15:94:4B:BE:95:AB:79:6C:E4:2A:54:89
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E5F9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:06:31 +0000
ROA not before:           Sun 31 May 2026 17:06:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138752
IP address blocks:        103.138.0.0/23 maxlen: 24
                          2402:11e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58873 (0xe5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:06:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6a97-9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:51:46:d0:ed:a7:82:37:08:22:16:17:12:
                    52:87:54:8c:65:0d:f0:5d:9d:f2:c3:df:6e:76:83:
                    7d:d5:84:08:e4:f5:56:44:11:0d:47:77:80:1b:3f:
                    2d:5b:8f:7b:17:3c:cb:01:cd:06:7c:f0:77:78:72:
                    c3:79:4f:81:4e:5a:de:d2:1c:d3:25:fc:77:d5:c4:
                    d1:f6:3d:81:ac:fc:ae:7d:b0:7c:c9:b2:98:49:88:
                    a2:51:b4:ca:36:1e:63:9e:86:b3:bf:7f:ca:cf:d7:
                    da:ed:79:45:5e:63:4a:f8:f0:ad:fb:4d:9d:27:73:
                    38:68:3a:48:59:9b:29:40:60:a2:c8:45:f4:62:39:
                    b1:8a:5e:d5:f7:be:29:bb:01:13:e1:63:3b:b2:bf:
                    0b:37:98:c9:d0:6e:19:8b:76:db:13:67:16:d1:5e:
                    e4:21:4d:39:bf:73:42:eb:96:40:0f:0a:05:10:af:
                    92:6c:02:8b:41:48:a8:22:8b:db:66:4c:65:a6:2e:
                    fe:60:90:76:b7:fe:c9:c2:81:d1:39:79:68:fa:e4:
                    70:64:33:f0:eb:f1:42:7f:b1:0a:da:b3:d7:90:3b:
                    27:b9:f6:ef:00:d8:a5:df:4a:8a:5d:6a:24:26:3c:
                    32:ea:78:19:17:a8:04:cb:e3:cd:eb:9f:40:de:3c:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4A:4D:CE:5A:10:D0:70:15:94:4B:BE:95:AB:79:6C:E4:2A:54:89
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.0.0/23
                IPv6:
                  2402:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:79:15:0c:d8:ec:ee:ba:a7:2f:4c:ee:2a:62:76:2c:b2:5a:
         ca:d6:6c:f0:17:3c:03:41:f6:b0:9e:43:1e:12:bd:cb:e5:38:
         08:5e:dd:f2:46:0f:f8:96:22:2a:b5:29:fc:37:4a:d4:6e:2a:
         30:65:23:41:cb:9f:7e:87:9b:88:c3:bc:b2:cb:0d:4b:d4:4c:
         69:8c:6a:3a:92:88:b3:f3:74:b6:02:6c:30:cf:d9:19:f2:25:
         73:96:2b:6a:16:f3:fa:ea:e0:e6:7f:da:3b:96:40:dc:a5:6f:
         40:ec:a6:20:50:bf:d4:0d:4c:c5:a0:3f:f3:88:21:dc:5d:e8:
         d9:88:b2:51:3c:eb:e4:0d:cb:a4:ea:3f:3c:33:52:dc:38:ea:
         a2:49:5a:f2:19:2c:f4:24:a2:26:9e:54:5e:bf:9d:cd:58:d6:
         97:d3:64:53:b5:64:43:96:16:28:53:c8:52:a6:5f:64:b8:b2:
         93:01:22:61:e4:70:c6:06:15:ef:4a:44:e4:ac:a6:1a:6c:ad:
         7d:5a:e3:49:d2:a2:25:a7:03:d8:b9:5c:3c:27:03:5e:e4:98:
         1c:4b:b3:aa:08:d6:b1:02:b5:f2:73:d7:91:18:7f:68:37:81:
         d6:94:4a:44:3a:89:11:2b:38:47:bf:00:11:cc:c9:e2:57:24:
         21:11:ee:bf
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOX5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDYzMVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZhOTctOTI5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIjkUUbQ7aeCNwgiFhcSUodUjGUN8F2d8sPfbnaDfdWECOT1VkQRDUd3gBs/
LVuPexc8ywHNBnzwd3hyw3lPgU5a3tIc0yX8d9XE0fY9gaz8rn2wfMmymEmIolG0
yjYeY56Gs79/ys/X2u15RV5jSvjwrftNnSdzOGg6SFmbKUBgoshF9GI5sYpe1fe+
KbsBE+FjO7K/CzeYydBuGYt22xNnFtFe5CFNOb9zQuuWQA8KBRCvkmwCi0FIqCKL
22ZMZaYu/mCQdrf+ycKB0Tl5aPrkcGQz8OvxQn+xCtqz15A7J7n27wDYpd9Kil1q
JCY8Mup4GReoBMvjzeufQN48UpECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSnSk3O
WhDQcBWUS76Vq3ls5CpUiTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGNTgzQjAy
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWeKADANBAIAAjAHAwUAJAIR4DANBgkqhkiG9w0BAQsFAAOCAQEA
knkVDNjs7rqnL0zuKmJ2LLJaytZs8Bc8A0H2sJ5DHhK9y+U4CF7d8kYP+JYiKrUp
/DdK1G4qMGUjQcuffoebiMO8sssNS9RMaYxqOpKIs/N0tgJsMM/ZGfIlc5Yrahbz
+urg5n/aO5ZA3KVvQOymIFC/1A1MxaA/84gh3F3o2YiyUTzr5A3LpOo/PDNS3Djq
okla8hks9CSiJp5UXr+dzVjWl9NkU7VkQ5YWKFPIUqZfZLiykwEiYeRwxgYV70pE
5KymGmytfVrjSdKiJacD2LlcPCcDXuSYHEuzqgjWsQK18nPXkRh/aDeB1pRKRDqJ
ESs4R78AEczJ4lckIRHuvw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:51 2026 by rpki-client