Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa
File:                     675BE610FD6611EAB965EC15C4F9AE02.roa (raw, json)
Hash identifier:          obTvO5cl5HyiU5vONmvgonq4Yr54mi9hJ6gfH2/+hZE=
Subject key identifier:   32:AB:57:9D:26:A9:B9:47:C8:34:34:C0:85:A7:C5:91:7C:2F:39:16
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E28A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:38:04 +0000
ROA not before:           Sun 31 May 2026 16:38:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133658
IP address blocks:        103.148.119.0/24 maxlen: 24
                          2001:df0:8640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57994 (0xe28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:38:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c63ec-7a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:94:85:3a:5a:eb:1c:bd:1d:56:68:bd:f7:
                    37:09:dd:d3:f5:1e:77:9c:44:71:fe:bc:8a:d8:06:
                    86:7e:11:57:56:80:7c:20:c6:7e:e8:67:46:d7:18:
                    e9:7f:0d:96:27:9f:ec:7f:14:ae:25:bf:a1:29:de:
                    9b:a0:7a:10:25:34:1c:9e:5f:0a:84:48:54:b9:0f:
                    ce:63:e6:db:36:a5:14:00:67:12:50:7e:d7:fd:e7:
                    48:0a:2e:0a:15:43:33:e1:85:25:2d:28:c9:c0:14:
                    e9:39:04:96:5b:d3:58:88:df:64:56:03:7f:5c:1c:
                    ee:a0:44:21:c9:c0:8c:ac:c6:48:e4:7a:1d:47:78:
                    a7:dd:4a:5b:ae:36:6a:e5:1b:a4:c1:70:64:5f:db:
                    2b:eb:98:29:f2:bc:17:43:91:aa:c9:73:94:c2:09:
                    48:f4:1b:76:c0:3b:d4:76:1e:57:87:c5:34:58:78:
                    dc:18:41:c4:c9:2b:0b:70:87:8e:35:c4:c9:f4:0a:
                    80:ed:29:f9:fb:bb:76:c8:ec:ac:8b:cc:4e:c8:70:
                    5f:b2:8e:f6:93:7a:0d:a1:1c:aa:53:55:d6:18:8f:
                    50:d9:5b:66:31:1f:cb:51:17:d8:b4:d9:84:9f:60:
                    d8:41:47:7a:a3:54:a6:7f:ba:a4:9f:de:4a:f7:57:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:57:9D:26:A9:B9:47:C8:34:34:C0:85:A7:C5:91:7C:2F:39:16
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/675BE610FD6611EAB965EC15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.119.0/24
                IPv6:
                  2001:df0:8640::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:c0:17:f3:f4:00:60:d7:4a:bf:19:36:e8:0a:6c:27:ff:fa:
         02:79:1b:df:d2:3b:3f:a2:a8:91:3b:ef:3e:b4:7c:4b:6d:26:
         7b:c1:37:9d:cf:6e:76:10:a3:d9:60:22:3a:46:4c:f4:68:8e:
         38:33:31:b6:3c:ec:15:e8:75:05:f4:0a:73:da:48:60:1b:e0:
         76:47:2b:87:d8:f6:c8:66:8f:89:a8:d3:f1:18:7e:f0:c0:a3:
         d0:34:4c:bc:d6:59:36:8a:5f:44:81:85:a0:ea:f5:f4:53:a2:
         c8:eb:06:48:ab:8a:93:2a:44:2a:b8:39:d6:fa:4c:49:79:30:
         a2:84:5a:5f:11:c5:2f:96:93:5d:7d:de:45:24:da:e9:40:e2:
         29:08:a2:db:51:a0:f6:ab:ec:43:27:85:86:af:26:13:28:60:
         f0:09:35:74:c9:e4:e1:84:42:6b:58:e7:d6:eb:d9:63:db:8d:
         b3:99:8b:b9:38:a6:ef:41:8f:0e:cf:53:52:ba:67:12:8e:86:
         7f:3a:a3:52:54:c5:d9:4a:1c:ae:64:fe:56:d7:a9:d4:61:15:
         b8:12:c5:a2:70:4c:71:00:b1:77:01:21:62:30:16:7e:ec:c7:
         c0:11:ca:4e:b4:a8:31:15:0d:62:4b:e7:7d:6e:31:17:1e:d4:
         ab:9a:92:1c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOKKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzgwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzZWMtN2E5YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZHlIU6WuscvR1WaL33Nwnd0/Ued5xEcf68itgGhn4RV1aAfCDGfuhnRtcY
6X8Nlief7H8UriW/oSnem6B6ECU0HJ5fCoRIVLkPzmPm2zalFABnElB+1/3nSAou
ChVDM+GFJS0oycAU6TkEllvTWIjfZFYDf1wc7qBEIcnAjKzGSOR6HUd4p91KW642
auUbpMFwZF/bK+uYKfK8F0ORqslzlMIJSPQbdsA71HYeV4fFNFh43BhBxMkrC3CH
jjXEyfQKgO0p+fu7dsjsrIvMTshwX7KO9pN6DaEcqlNV1hiPUNlbZjEfy1EX2LTZ
hJ9g2EFHeqNUpn+6pJ/eSvdX57cCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQyq1ed
Jqm5R8g0NMCFp8WRfC85FjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY3NUJFNjEw
RkQ2NjExRUFCOTY1RUMxNUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGeUdzAPBAIAAjAJAwcAIAEN8IZAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+wBfz9ABg10q/GTboCmwn//oCeRvf0js/oqiRO+8+tHxLbSZ7wTedz252EKPZ
YCI6Rkz0aI44MzG2POwV6HUF9Apz2khgG+B2RyuH2PbIZo+JqNPxGH7wwKPQNEy8
1lk2il9EgYWg6vX0U6LI6wZIq4qTKkQquDnW+kxJeTCihFpfEcUvlpNdfd5FJNrp
QOIpCKLbUaD2q+xDJ4WGryYTKGDwCTV0yeThhEJrWOfW69lj242zmYu5OKbvQY8O
z1NSumcSjoZ/OqNSVMXZShyuZP5W16nUYRW4EsWicExxALF3ASFiMBZ+7MfAEcpO
tKgxFQ1iS+d9bjEXHtSrmpIc
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:59 2026 by rpki-client