Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6307CB7033F111F1949F1DECBB833773.roa
File:                     6307CB7033F111F1949F1DECBB833773.roa (raw, json)
Hash identifier:          VO/Q1U84PsRAh99k9fncb+Mf41VOWaORR+/g85Ry7Uc=
Subject key identifier:   E8:C2:13:F6:15:A4:5E:C9:15:78:25:CD:14:F2:5F:73:1A:4F:95:7C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE67
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6307CB7033F111F1949F1DECBB833773.roa
Signing time:             Mon 06 Jul 2026 16:34:11 +0000
ROA not before:           Mon 06 Jul 2026 16:34:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133252
IP address blocks:        203.78.128.0/22 maxlen: 22
                          203.78.128.0/24 maxlen: 24
                          203.78.129.0/24 maxlen: 24
                          2001:df6:ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61031 (0xee67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:34:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd903-940b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:ce:17:de:82:9e:85:37:38:17:77:e1:2f:
                    c7:04:bf:10:d7:38:5d:92:c8:19:d1:1d:7d:38:2b:
                    56:4d:e2:3d:90:4a:ef:bb:a0:87:a3:8d:7a:72:51:
                    e3:cd:dd:20:85:f1:99:8e:1b:e8:f8:32:19:01:84:
                    ae:d2:23:e3:f8:d3:ed:22:f4:36:d7:18:88:d8:1e:
                    6d:df:5e:00:84:9b:18:16:d0:b7:07:37:3f:dc:cc:
                    86:2e:58:76:02:32:fe:33:11:55:7d:de:25:7a:2c:
                    5e:c8:c0:e0:3c:18:26:1c:e6:90:4b:21:6c:96:20:
                    64:ba:c1:64:b4:87:72:53:69:86:c4:d2:ea:92:8c:
                    6e:f6:a6:94:14:6e:b5:df:ba:f5:99:e5:df:9e:6d:
                    35:ff:90:e6:28:2a:f0:32:97:e3:47:9a:39:79:b7:
                    ff:ad:ae:fd:f8:96:b8:d3:24:82:c8:d1:67:19:d8:
                    11:ac:6c:8d:6a:52:f6:ed:2d:18:5f:88:b2:39:15:
                    65:07:6e:72:00:40:83:a4:4b:a7:69:a9:c2:d2:5c:
                    9c:34:81:0b:16:fa:7d:6a:ca:9f:c1:1a:de:ed:de:
                    13:1e:ae:da:37:34:55:60:d0:44:34:17:19:3a:83:
                    93:c5:13:be:61:73:92:ec:5b:00:4f:d1:eb:69:bb:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:13:F6:15:A4:5E:C9:15:78:25:CD:14:F2:5F:73:1A:4F:95:7C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6307CB7033F111F1949F1DECBB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.128.0/22
                IPv6:
                  2001:df6:ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:d1:f6:27:54:ff:7b:e9:44:0f:39:25:1a:e8:ff:a3:70:
         5f:2c:02:c7:54:23:69:1a:5f:b9:62:40:03:c6:80:4b:16:0c:
         42:c7:db:80:82:03:cd:20:e6:6d:43:6c:f1:70:66:27:07:b2:
         ea:ea:b3:9c:f5:9c:ca:f9:1f:85:28:02:00:91:5e:26:b1:06:
         23:26:d9:b2:be:66:20:fc:2f:81:5f:ee:07:61:ac:b4:32:1b:
         0a:83:14:c7:88:68:68:98:ea:df:ea:b5:3a:47:8b:49:9b:fe:
         9c:a1:a3:ee:25:fe:3f:c2:be:eb:4c:84:2c:f4:4c:33:0e:6f:
         2a:fb:04:99:9b:aa:0d:84:f8:c4:4a:c1:75:29:4a:06:69:32:
         28:c0:9a:9d:e4:f5:9e:73:e4:49:48:c8:7b:17:65:ec:19:f2:
         d2:87:9e:45:56:78:bb:8d:29:6a:65:d9:31:80:78:01:55:42:
         27:8f:b1:7a:6c:94:f4:74:52:2c:05:93:a5:be:96:cd:cb:a7:
         4f:99:de:72:1f:f8:67:6c:47:c8:ea:35:49:9a:17:c3:01:09:
         fa:c0:a1:bd:de:2a:bd:22:ea:b8:c8:1d:ee:21:2c:d0:5c:09:
         30:91:ad:6e:0f:5d:43:78:ad:ce:b3:3d:ab:7f:00:fd:16:3c:
         b0:f9:38:3a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAO5nMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzQxMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5MDMtOTQwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAWzhfegp6FNzgXd+EvxwS/ENc4XZLIGdEdfTgrVk3iPZBK77ugh6ONenJR
483dIIXxmY4b6PgyGQGErtIj4/jT7SL0NtcYiNgebd9eAISbGBbQtwc3P9zMhi5Y
dgIy/jMRVX3eJXosXsjA4DwYJhzmkEshbJYgZLrBZLSHclNphsTS6pKMbvamlBRu
td+69Znl355tNf+Q5igq8DKX40eaOXm3/62u/fiWuNMkgsjRZxnYEaxsjWpS9u0t
GF+IsjkVZQducgBAg6RLp2mpwtJcnDSBCxb6fWrKn8Ea3u3eEx6u2jc0VWDQRDQX
GTqDk8UTvmFzkuxbAE/R62m7aocCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTowhP2
FaReyRV4Jc0U8l9zGk+VfDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzMDdDQjcw
MzNGMTExRjE5NDlGMURFQ0JCODMzNzczLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAstOgDAPBAIAAjAJAwcAIAEN9grAMA0GCSqGSIb3DQEBCwUAA4IB
AQAV+tH2J1T/e+lEDzklGuj/o3BfLALHVCNpGl+5YkADxoBLFgxCx9uAggPNIOZt
Q2zxcGYnB7Lq6rOc9ZzK+R+FKAIAkV4msQYjJtmyvmYg/C+BX+4HYay0MhsKgxTH
iGhomOrf6rU6R4tJm/6coaPuJf4/wr7rTIQs9EwzDm8q+wSZm6oNhPjESsF1KUoG
aTIowJqd5PWec+RJSMh7F2XsGfLSh55FVni7jSlqZdkxgHgBVUInj7F6bJT0dFIs
BZOlvpbNy6dPmd5yH/hnbEfI6jVJmhfDAQn6wKG93iq9Iuq4yB3uISzQXAkwka1u
D11DeK3Osz2rfwD9Fjyw+Tg6
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:46 2026 by rpki-client