Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62DE91D6BDCF11EA8755D90DC4F9AE02.roa
File:                     62DE91D6BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          HSqSvF3hoVAQAAEMzhPJ/9MsRs4hL5m7AKZKDM8sUjc=
Subject key identifier:   04:71:67:1F:2D:70:58:B4:ED:BE:9C:13:C0:76:AF:58:06:5C:D3:E4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E601
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62DE91D6BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:06:46 +0000
ROA not before:           Sun 31 May 2026 17:06:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138763
IP address blocks:        103.140.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58881 (0xe601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:06:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6aa6-a553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:3f:e7:32:2a:ee:6a:bf:90:1a:c0:ad:f2:
                    c4:86:c7:04:06:39:bc:b4:7f:90:81:75:ce:95:8d:
                    9c:44:f3:02:f0:26:8d:ab:48:a9:6d:a2:a3:c1:18:
                    cc:c9:ce:8a:c9:62:d0:78:98:c5:63:9b:e6:42:6d:
                    5a:5a:aa:0b:22:d0:03:c5:dd:bf:93:8b:53:02:33:
                    a6:3b:5c:82:01:52:89:85:a8:0e:2c:13:5e:b5:58:
                    8d:bf:a6:9b:42:19:f3:91:a9:65:e4:e4:9e:d3:8a:
                    05:e4:ed:64:ef:b7:9a:73:7f:ff:df:88:84:4a:f7:
                    a9:98:38:ce:70:4c:f3:05:23:3d:8c:10:15:19:c1:
                    f6:37:a6:21:a7:ef:e3:da:48:40:05:37:e8:7d:1e:
                    96:45:1a:33:d1:0f:e1:ab:9e:6c:e9:98:1a:8d:19:
                    32:54:97:ee:02:26:5f:56:8e:9a:66:51:e9:30:72:
                    26:22:32:0f:7b:3d:0a:05:d0:f7:f9:e1:66:bc:81:
                    64:ca:0d:ce:06:82:29:84:e3:5d:65:8a:64:e0:1a:
                    e0:9d:14:3d:6b:a8:22:60:6d:67:d3:66:17:9a:36:
                    75:c1:2a:f7:ef:c1:1e:45:16:40:10:35:b0:b2:4e:
                    fd:6c:35:0c:a8:6b:a5:c2:53:15:bc:b7:02:69:b2:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:71:67:1F:2D:70:58:B4:ED:BE:9C:13:C0:76:AF:58:06:5C:D3:E4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62DE91D6BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:d0:ef:fd:e4:4d:2d:24:cb:82:9e:84:85:b9:c8:1d:61:
         ba:c4:e4:01:6c:7e:28:73:7e:08:5b:ad:8c:19:a8:a2:64:76:
         ea:e9:46:ef:b2:02:99:57:78:65:03:e8:5a:48:86:e6:b1:99:
         93:a6:bc:72:18:73:93:08:ed:b7:28:7b:08:04:c1:9c:86:6d:
         18:89:a4:d5:03:ba:f8:7c:fd:19:3f:ce:72:90:d3:55:94:57:
         4f:78:7f:e7:d2:5c:39:66:67:4f:79:6f:3a:58:c1:db:fa:39:
         72:6c:0b:18:51:03:0e:95:97:a9:7d:68:76:44:54:d5:82:0b:
         7b:87:4d:7b:cd:92:7b:2c:a1:b0:9c:44:67:0f:97:55:23:d8:
         fb:49:73:63:b0:63:6c:10:2d:8d:06:fa:14:a7:5e:fc:62:42:
         78:84:76:b9:d9:de:f0:12:71:10:4b:50:20:17:51:02:da:ec:
         3e:b1:48:e2:08:d0:49:93:07:66:e2:58:e6:61:11:48:4e:bc:
         4d:b6:69:5d:81:e4:28:59:8c:b0:9a:b5:87:a8:ae:1b:c6:cf:
         f4:19:7e:c3:bb:c5:65:3f:dc:51:25:e0:e6:67:96:e1:61:8b:
         95:52:38:31:c6:f5:38:74:40:a7:29:38:d8:0a:5d:5b:54:75:
         49:20:08:a3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOYBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDY0NloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZhYTYtYTU1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK52P+cyKu5qv5AawK3yxIbHBAY5vLR/kIF1zpWNnETzAvAmjatIqW2io8EY
zMnOisli0HiYxWOb5kJtWlqqCyLQA8Xdv5OLUwIzpjtcggFSiYWoDiwTXrVYjb+m
m0IZ85GpZeTkntOKBeTtZO+3mnN//9+IhEr3qZg4znBM8wUjPYwQFRnB9jemIafv
49pIQAU36H0elkUaM9EP4auebOmYGo0ZMlSX7gImX1aOmmZR6TByJiIyD3s9CgXQ
9/nhZryBZMoNzgaCKYTjXWWKZOAa4J0UPWuoImBtZ9NmF5o2dcEq9+/BHkUWQBA1
sLJO/Ww1DKhrpcJTFby3AmmyAH0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQEcWcf
LXBYtO2+nBPAdq9YBlzT5DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYyREU5MUQ2
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeMrjANBgkqhkiG9w0BAQsFAAOCAQEAtsXQ7/3kTS0ky4KehIW5
yB1husTkAWx+KHN+CFutjBmoomR26ulG77ICmVd4ZQPoWkiG5rGZk6a8chhzkwjt
tyh7CATBnIZtGImk1QO6+Hz9GT/OcpDTVZRXT3h/59JcOWZnT3lvOljB2/o5cmwL
GFEDDpWXqX1odkRU1YILe4dNe82SeyyhsJxEZw+XVSPY+0lzY7BjbBAtjQb6FKde
/GJCeIR2udne8BJxEEtQIBdRAtrsPrFI4gjQSZMHZuJY5mERSE68TbZpXYHkKFmM
sJq1h6iuG8bP9Bl+w7vFZT/cUSXg5meW4WGLlVI4Mcb1OHRApyk42ApdW1R1SSAI
ow==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:47 2026 by rpki-client