Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69573C1A31AB11ECAB908E42C4F9AE02.roa
File:                     69573C1A31AB11ECAB908E42C4F9AE02.roa (raw, json)
Hash identifier:          kJXXFLYJsFjMfRAlajLfEEDxEItCA80SkpRR5RbGDOo=
Subject key identifier:   03:F5:91:07:E0:EE:EE:10:6B:BA:4C:19:54:5D:51:17:23:17:EC:D7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3A1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69573C1A31AB11ECAB908E42C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:18:16 +0000
ROA not before:           Mon 06 Jul 2026 17:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141880
IP address blocks:        103.164.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62369 (0xf3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be357-25c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:05:07:74:bc:e2:0c:b1:ca:28:8a:9d:74:
                    22:4b:70:ed:c8:6b:11:62:5f:f1:bd:92:d5:7a:88:
                    76:84:39:ad:2f:75:21:65:e2:92:13:e6:48:36:1a:
                    c4:01:c8:d2:fc:cd:fe:c0:92:24:ec:83:82:5f:e0:
                    c6:f4:eb:d3:1b:7d:38:be:62:df:c3:f2:88:a6:e9:
                    0a:db:00:56:40:45:c1:8f:96:ee:06:39:e2:a8:18:
                    c0:ec:ed:f7:20:4e:36:77:78:7d:5b:1d:31:9a:64:
                    ea:02:a5:1a:c3:3d:31:cd:66:76:a8:12:5a:50:f5:
                    c2:8c:21:70:d8:6e:94:58:9b:41:62:45:b2:61:a9:
                    f2:fb:fd:1c:5b:c0:c5:b9:a1:d7:f3:93:0f:a4:72:
                    aa:37:85:0f:67:71:61:12:3e:91:4e:c3:b6:14:e7:
                    73:3a:6e:95:52:9d:8e:7b:c3:b9:3d:be:64:5d:49:
                    bb:82:b1:ce:31:a3:9e:86:91:fe:b4:e5:3e:18:31:
                    6a:bd:43:67:bf:73:18:9f:da:1a:3f:dc:4a:5d:2e:
                    45:94:ea:54:89:38:61:f2:77:64:17:ca:41:25:2c:
                    13:5d:88:20:4f:a1:fa:d7:80:0d:f7:13:6e:67:c1:
                    c6:9f:0a:7c:01:e1:91:8c:aa:a7:01:ae:b8:28:e2:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:91:07:E0:EE:EE:10:6B:BA:4C:19:54:5D:51:17:23:17:EC:D7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69573C1A31AB11ECAB908E42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:6c:3a:6d:17:31:04:7f:be:ff:38:e6:7f:78:ae:6b:6f:
         f7:a6:02:36:2a:6c:11:16:9d:26:e7:20:7d:e2:f9:e7:24:a9:
         f0:cc:ee:2b:52:c4:ec:6f:c7:3a:5a:4a:ca:e8:b5:79:ab:85:
         dd:9a:10:2a:82:df:ac:98:5a:1e:70:1a:b6:aa:fd:c7:c6:0f:
         63:f4:04:0c:11:88:18:dc:84:94:7b:0d:14:e4:fb:87:73:51:
         2f:22:83:c6:ba:88:0f:0a:60:90:3a:de:92:c6:40:a2:10:69:
         bf:e9:d8:1c:ad:d1:dd:fd:83:14:f4:2c:ed:85:bb:d9:81:4f:
         eb:65:6b:6a:f4:c8:f1:fc:31:3e:5d:0d:92:a8:2a:05:eb:9b:
         6d:9c:a0:03:d4:ff:44:8b:1c:dc:82:38:8c:c5:a7:a2:55:ac:
         98:cd:d1:7c:ac:0a:72:ef:2b:26:b0:34:91:bb:ed:11:ba:75:
         d5:d4:df:1d:7e:25:4d:f8:d6:61:8b:5f:ad:84:0c:3e:53:6c:
         bd:c2:1f:d2:8c:90:fc:50:46:31:68:78:47:9e:0f:df:37:66:
         f8:c8:ad:65:22:d4:c2:e2:0d:9b:f1:d1:fc:35:61:88:33:af:
         ad:68:37:d8:d0:f9:89:1d:2f:e2:00:b8:1e:3c:fd:9c:69:77:
         1d:db:35:20
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPOhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTgxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzNTctMjVjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJKtBQd0vOIMscooip10Iktw7chrEWJf8b2S1XqIdoQ5rS91IWXikhPmSDYa
xAHI0vzN/sCSJOyDgl/gxvTr0xt9OL5i38PyiKbpCtsAVkBFwY+W7gY54qgYwOzt
9yBONnd4fVsdMZpk6gKlGsM9Mc1mdqgSWlD1wowhcNhulFibQWJFsmGp8vv9HFvA
xbmh1/OTD6RyqjeFD2dxYRI+kU7DthTnczpulVKdjnvDuT2+ZF1Ju4KxzjGjnoaR
/rTlPhgxar1DZ79zGJ/aGj/cSl0uRZTqVIk4YfJ3ZBfKQSUsE12IIE+h+teADfcT
bmfBxp8KfAHhkYyqpwGuuCjivLsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQD9ZEH
4O7uEGu6TBlUXVEXIxfs1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY5NTczQzFB
MzFBQjExRUNBQjkwOEU0MkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeknDANBgkqhkiG9w0BAQsFAAOCAQEAHS9sOm0XMQR/vv845n94
rmtv96YCNipsERadJucgfeL55ySp8MzuK1LE7G/HOlpKyui1eauF3ZoQKoLfrJha
HnAatqr9x8YPY/QEDBGIGNyElHsNFOT7h3NRLyKDxrqIDwpgkDreksZAohBpv+nY
HK3R3f2DFPQs7YW72YFP62VravTI8fwxPl0NkqgqBeubbZygA9T/RIsc3II4jMWn
olWsmM3RfKwKcu8rJrA0kbvtEbp11dTfHX4lTfjWYYtfrYQMPlNsvcIf0oyQ/FBG
MWh4R54P3zdm+MitZSLUwuINm/HR/DVhiDOvrWg32ND5iR0v4gC4Hjz9nGl3Hds1
IA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:03 2026 by rpki-client