Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa
File:                     6CF07A9699EB11ECA68BB67CC4F9AE02.roa (raw, json)
Hash identifier:          724if/WZnuA72ndtAuE9shQthGrGpZ/uASxSyQrX81I=
Subject key identifier:   F4:22:CA:C7:CE:94:94:DE:AD:63:95:EF:DB:4C:CA:9A:A7:17:AD:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F4C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:28:00 +0000
ROA not before:           Mon 06 Jul 2026 17:28:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149277
IP address blocks:        103.182.120.0/23 maxlen: 24
                          2001:df0:7940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62662 (0xf4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:28:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be5a0-191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:f6:bd:92:28:3b:e5:9d:bb:66:6a:f7:1c:
                    ef:e3:66:9a:d5:b7:4b:3d:ae:ed:19:6d:ee:a9:0b:
                    8a:5d:6c:4b:ef:69:ed:0a:de:66:b1:43:df:a6:02:
                    5d:bf:1b:3c:88:c6:0b:d3:99:de:5e:5f:d5:95:da:
                    59:d9:9e:13:9f:bf:d6:0a:4f:d5:6b:4b:83:37:01:
                    f2:f4:ae:c4:be:b4:50:22:08:d2:83:64:71:25:b3:
                    4c:f3:37:72:d4:0c:09:c2:f7:88:df:55:09:79:32:
                    50:b7:3e:4d:fd:8a:17:69:11:58:3f:42:43:87:9b:
                    b3:4d:fa:02:93:13:bd:d4:7b:69:d6:3c:f3:5f:b4:
                    ca:ea:b6:f2:5e:85:4f:ef:9c:da:15:62:c7:d9:4f:
                    a2:2f:0a:13:50:7f:ab:8c:61:02:08:a6:88:52:f6:
                    d0:bd:f7:f5:0c:7a:1a:27:ad:8a:ba:7f:e3:d3:0b:
                    df:af:c4:d5:4b:d9:17:75:4c:d5:47:22:50:b5:32:
                    16:32:1f:58:6f:02:9e:da:a5:d8:84:98:6b:e9:b0:
                    58:b5:54:b2:ea:ea:f0:f6:b1:9d:be:65:98:5a:59:
                    43:94:f3:f7:ed:70:ae:0c:0a:26:84:bf:9f:41:c0:
                    f6:d1:5d:07:5d:66:7e:79:79:4d:bc:ff:d8:65:58:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:22:CA:C7:CE:94:94:DE:AD:63:95:EF:DB:4C:CA:9A:A7:17:AD:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.120.0/23
                IPv6:
                  2001:df0:7940::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:10:d8:61:c1:44:7d:88:78:7b:8c:21:b9:e1:e8:14:26:b4:
         5c:f9:5b:c4:81:b1:57:a7:68:58:e1:f0:b2:98:c0:96:2c:be:
         1a:4f:52:44:5c:b1:a9:57:b6:cd:e8:d8:f6:d7:b6:d7:58:ef:
         47:b4:ca:15:35:f9:a3:58:e6:44:c1:68:70:4a:0e:67:a1:fd:
         e9:12:e7:86:97:8b:fe:07:a4:33:ef:32:ec:56:c8:65:a1:6c:
         fc:36:e9:1f:36:fd:13:16:91:11:d7:6b:0f:de:48:0a:14:3f:
         72:74:83:f2:80:9c:c7:48:10:fc:16:33:51:d3:e0:c3:8b:19:
         9e:a1:db:e6:72:47:5d:71:fa:c3:d5:7b:42:a0:c5:48:ae:fc:
         34:e1:8b:30:0a:db:7b:d1:df:6e:8a:60:d9:00:bf:b3:56:fe:
         df:17:35:b0:19:fc:37:30:65:11:5c:87:de:9e:8b:c4:ca:0c:
         72:35:84:15:98:76:1c:f7:d2:c3:b0:0c:b5:64:ea:50:f3:20:
         37:5f:55:7d:4b:27:47:3d:6f:45:bb:83:1a:86:91:44:86:9d:
         96:e1:d0:03:4b:00:c2:76:96:0d:77:59:4a:e5:d8:ab:13:a7:
         3f:42:7f:fb:c9:eb:12:61:c2:71:a9:4d:63:d7:68:db:d4:16:
         87:46:40:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPTGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjgwMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU1YTAtMTkxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4C9r2SKDvlnbtmavcc7+NmmtW3Sz2u7Rlt7qkLil1sS+9p7QreZrFD36YC
Xb8bPIjGC9OZ3l5f1ZXaWdmeE5+/1gpP1WtLgzcB8vSuxL60UCII0oNkcSWzTPM3
ctQMCcL3iN9VCXkyULc+Tf2KF2kRWD9CQ4ebs036ApMTvdR7adY881+0yuq28l6F
T++c2hVix9lPoi8KE1B/q4xhAgimiFL20L339Qx6Gietirp/49ML36/E1UvZF3VM
1UciULUyFjIfWG8Cntql2ISYa+mwWLVUsurq8Paxnb5lmFpZQ5Tz9+1wrgwKJoS/
n0HA9tFdB11mfnl5Tbz/2GVY6hUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBT0IsrH
zpSU3q1jle/bTMqapxetWTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDRjA3QTk2
OTlFQjExRUNBNjhCQjY3Q0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWe2eDAPBAIAAjAJAwcAIAEN8HlAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5ENhhwUR9iHh7jCG54egUJrRc+VvEgbFXp2hY4fCymMCWLL4aT1JEXLGpV7bN
6Nj217bXWO9HtMoVNfmjWOZEwWhwSg5nof3pEueGl4v+B6Qz7zLsVshloWz8Nukf
Nv0TFpER12sP3kgKFD9ydIPygJzHSBD8FjNR0+DDixmeodvmckddcfrD1XtCoMVI
rvw04YswCtt70d9uimDZAL+zVv7fFzWwGfw3MGURXIfenovEygxyNYQVmHYc99LD
sAy1ZOpQ8yA3X1V9SydHPW9Fu4MahpFEhp2W4dADSwDCdpYNd1lK5dirE6c/Qn/7
yesSYcJxqU1j12jb1BaHRkDj
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:29 2026 by rpki-client