Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa
File:                     6D4C0054BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          ZCgH/g7AiiL8sGF9VTssE8YZ1XcLBM9NndwOQfPGAi0=
Subject key identifier:   EF:70:BE:18:0E:F0:D7:AB:B6:3A:78:70:1D:A9:79:71:FD:38:3E:2B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E64A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:09:10 +0000
ROA not before:           Sun 31 May 2026 17:09:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139536
IP address blocks:        103.145.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58954 (0xe64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:09:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b36-446a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:3c:54:57:de:c9:09:11:c5:c8:93:86:57:
                    66:b2:18:44:a4:0d:16:ec:99:5c:66:7d:88:81:e7:
                    46:0a:b2:0e:2f:88:ce:32:a0:96:91:0c:aa:0e:77:
                    9a:6f:0a:a2:c4:b6:1c:3b:ca:56:97:71:31:9f:e0:
                    09:61:1f:90:44:52:3b:7a:2a:ef:d1:73:6e:19:7a:
                    99:04:e1:dd:82:51:fe:09:bf:1c:5c:d1:27:73:fb:
                    80:27:f5:9f:e8:0c:28:37:ec:85:a7:4a:ef:46:8f:
                    95:f5:6c:eb:5d:93:e9:a2:36:7e:3e:41:b3:02:23:
                    65:58:f3:e7:2c:ad:17:02:6b:00:0b:08:29:ec:e1:
                    84:a2:ca:ac:8f:53:cf:63:d3:e8:df:d8:41:8f:65:
                    dc:ca:3d:4d:11:f3:90:ba:c4:d6:18:96:bb:4e:b2:
                    35:aa:c3:bb:da:89:bd:d4:f2:eb:29:0e:5c:03:64:
                    b5:d3:c4:06:79:04:75:d6:6a:f1:d2:6a:df:60:94:
                    44:70:4d:e9:cd:c2:2e:42:7d:c2:71:ba:e3:f7:66:
                    f1:65:32:58:8a:7b:bd:a7:04:22:d1:eb:d6:17:f3:
                    18:e3:09:c6:8d:6d:e9:f9:0a:ff:7e:59:ad:d0:67:
                    ae:9a:4c:30:a1:a5:1d:eb:10:4c:79:ee:26:f4:77:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:BE:18:0E:F0:D7:AB:B6:3A:78:70:1D:A9:79:71:FD:38:3E:2B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:17:25:dc:05:24:bc:44:00:fa:fc:d8:f7:63:ac:d4:d7:ef:
         93:db:f6:f5:ca:9c:f7:31:2d:31:c3:75:48:90:a9:e3:77:5a:
         ed:a7:13:a2:84:d2:fe:03:34:5d:1d:26:b9:c4:8f:05:2a:86:
         9d:52:ab:60:20:36:c0:a2:f0:c2:01:c6:35:0d:40:e3:6b:73:
         f4:a6:da:ac:a8:76:4f:c6:3d:1d:7f:e1:df:98:0a:e8:11:05:
         2f:80:e7:33:84:03:4f:90:20:10:4f:bc:5f:5b:9f:24:0e:33:
         70:0a:e7:db:5c:e0:1f:ff:d6:3b:20:c2:36:a4:85:55:f2:6d:
         ea:f3:34:ae:53:81:7e:8d:bb:e6:39:fd:0f:db:7b:7d:35:18:
         82:02:74:f3:83:27:3f:b4:d7:f0:30:e5:6b:97:f2:93:bf:54:
         ce:db:79:d3:ec:e7:98:43:55:6e:ff:48:00:46:9d:52:2a:b4:
         bd:36:05:f0:1f:5d:b8:35:7e:1b:d6:63:0b:56:5c:cc:d5:a8:
         d5:e4:9d:95:6e:a2:0a:d1:dd:0f:ef:59:6d:b2:c6:92:3a:7c:
         53:45:1e:1c:b0:42:90:44:ab:ad:89:c0:a8:bf:97:35:2e:f3:
         b8:06:41:b7:3b:9d:c3:b8:0c:c7:6f:43:04:70:6b:44:ac:31:
         e4:d7:7c:ea
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOZKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDkxMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiMzYtNDQ2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXXPFRX3skJEcXIk4ZXZrIYRKQNFuyZXGZ9iIHnRgqyDi+IzjKglpEMqg53
mm8KosS2HDvKVpdxMZ/gCWEfkERSO3oq79Fzbhl6mQTh3YJR/gm/HFzRJ3P7gCf1
n+gMKDfshadK70aPlfVs612T6aI2fj5BswIjZVjz5yytFwJrAAsIKezhhKLKrI9T
z2PT6N/YQY9l3Mo9TRHzkLrE1hiWu06yNarDu9qJvdTy6ykOXANktdPEBnkEddZq
8dJq32CURHBN6c3CLkJ9wnG64/dm8WUyWIp7vacEItHr1hfzGOMJxo1t6fkK/35Z
rdBnrppMMKGlHesQTHnuJvR3dI8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTvcL4Y
DvDXq7Y6eHAdqXlx/Tg+KzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZENEMwMDU0
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeR+TANBgkqhkiG9w0BAQsFAAOCAQEAhBcl3AUkvEQA+vzY92Os
1Nfvk9v29cqc9zEtMcN1SJCp43da7acTooTS/gM0XR0mucSPBSqGnVKrYCA2wKLw
wgHGNQ1A42tz9KbarKh2T8Y9HX/h35gK6BEFL4DnM4QDT5AgEE+8X1ufJA4zcArn
21zgH//WOyDCNqSFVfJt6vM0rlOBfo275jn9D9t7fTUYggJ084MnP7TX8DDla5fy
k79Uztt50+znmENVbv9IAEadUiq0vTYF8B9duDV+G9ZjC1ZczNWo1eSdlW6iCtHd
D+9ZbbLGkjp8U0UeHLBCkESrrYnAqL+XNS7zuAZBtzudw7gMx29DBHBrRKwx5Nd8
6g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:20 2026 by rpki-client