Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F65A3683DE111EF9367F655C4F9AE02.roa
File:                     6F65A3683DE111EF9367F655C4F9AE02.roa (raw, json)
Hash identifier:          FCNcdEgpPG+Se228PoWcH2sD0OECBlGHq+fv8WEPKbQ=
Subject key identifier:   3F:87:6B:FB:FC:75:E9:68:B4:C8:54:80:87:2E:F1:DB:DA:99:E1:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2E7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F65A3683DE111EF9367F655C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:41:04 +0000
ROA not before:           Sun 31 May 2026 16:41:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134024
IP address blocks:        103.55.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58087 (0xe2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:41:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c64a0-c919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:28:20:9a:04:57:ab:2b:ee:2d:b3:87:60:
                    37:47:12:89:b2:31:99:fc:9a:89:32:67:9b:47:b1:
                    f1:f9:9f:00:70:3f:31:c9:d2:af:d9:b2:65:a7:e9:
                    8c:80:b5:bc:16:29:52:3a:9e:d6:7f:86:42:30:8c:
                    36:25:00:7f:78:64:b9:d3:19:2c:01:fa:e1:16:06:
                    d7:89:88:4e:01:7a:52:f6:f0:b4:49:04:4e:d6:54:
                    31:1d:a5:6e:03:f8:29:9b:70:d9:20:fe:ab:4c:af:
                    c7:10:fc:e0:ab:f8:74:0b:26:fa:53:6b:cd:f9:ac:
                    4a:75:0b:c2:81:84:bb:d1:ed:e6:26:89:da:0a:78:
                    aa:88:22:c4:31:9e:78:3e:06:e5:44:4a:9f:ab:0e:
                    b4:0e:ba:9c:ef:7a:d0:e1:73:eb:fa:74:65:4f:95:
                    a3:ea:96:d8:42:8d:33:c7:87:17:05:62:98:7a:7f:
                    44:25:e1:99:67:5d:da:d6:e9:aa:14:68:e0:96:d7:
                    9e:e1:63:3c:5e:9d:01:7f:67:c9:78:97:cb:f6:be:
                    50:c2:33:42:9e:83:68:2b:bd:0b:6c:68:71:c3:06:
                    64:42:70:65:bc:74:78:cd:1c:33:c9:65:be:93:42:
                    3f:1e:c4:c1:9d:47:82:3f:56:76:f1:e1:e0:fd:82:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:6B:FB:FC:75:E9:68:B4:C8:54:80:87:2E:F1:DB:DA:99:E1:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F65A3683DE111EF9367F655C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:b1:fa:78:56:da:3d:31:52:65:43:31:93:a6:a8:0d:e0:
         34:c8:eb:d0:35:cf:21:63:53:86:aa:b4:3e:75:93:7c:8c:f8:
         58:be:4c:ce:13:81:77:ed:b9:c4:37:34:fc:03:2e:60:75:6e:
         3f:7b:bd:c7:d5:f5:8c:fd:75:b9:85:6e:59:1f:b5:a0:91:6a:
         8f:de:f0:dd:3d:57:10:ee:7e:d5:d4:55:c0:a6:7e:21:c4:ab:
         b9:78:d4:3f:f8:b0:25:59:da:ca:8e:30:2e:d1:80:36:71:83:
         21:e2:15:7c:71:12:2a:ad:fe:ff:67:72:73:30:3e:36:2d:ff:
         0f:57:65:1e:73:36:54:3b:ff:7a:7f:15:b8:76:ad:a0:f5:26:
         f8:64:e4:d5:e6:73:9b:77:d3:02:0d:7a:d2:28:4a:8c:0e:08:
         0e:71:db:2c:5d:96:07:c9:d8:a4:39:29:20:21:29:55:68:8c:
         f8:46:dc:ca:b6:44:65:7d:dd:27:68:8c:6b:cc:0d:00:d9:81:
         18:69:de:71:a4:dd:7e:69:98:91:af:45:d9:f9:de:63:67:00:
         31:f3:77:af:42:10:b9:75:25:96:e9:fd:4c:4a:e3:19:3f:29:
         01:81:a2:0d:82:81:77:55:4a:54:61:d2:c6:21:c4:49:e5:c1:
         0f:2b:26:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOLnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NDEwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY0YTAtYzkxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANE8KCCaBFerK+4ts4dgN0cSibIxmfyaiTJnm0ex8fmfAHA/McnSr9myZafp
jIC1vBYpUjqe1n+GQjCMNiUAf3hkudMZLAH64RYG14mITgF6UvbwtEkETtZUMR2l
bgP4KZtw2SD+q0yvxxD84Kv4dAsm+lNrzfmsSnULwoGEu9Ht5iaJ2gp4qogixDGe
eD4G5URKn6sOtA66nO960OFz6/p0ZU+Vo+qW2EKNM8eHFwVimHp/RCXhmWdd2tbp
qhRo4JbXnuFjPF6dAX9nyXiXy/a+UMIzQp6DaCu9C2xoccMGZEJwZbx0eM0cM8ll
vpNCPx7EwZ1Hgj9WdvHh4P2CNPECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQ/h2v7
/HXpaLTIVICHLvHb2pnhETAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZGNjVBMzY4
M0RFMTExRUY5MzY3RjY1NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmc3uDANBgkqhkiG9w0BAQsFAAOCAQEAbQqx+nhW2j0xUmVDMZOm
qA3gNMjr0DXPIWNThqq0PnWTfIz4WL5MzhOBd+25xDc0/AMuYHVuP3u9x9X1jP11
uYVuWR+1oJFqj97w3T1XEO5+1dRVwKZ+IcSruXjUP/iwJVnayo4wLtGANnGDIeIV
fHESKq3+/2dyczA+Ni3/D1dlHnM2VDv/en8VuHatoPUm+GTk1eZzm3fTAg160ihK
jA4IDnHbLF2WB8nYpDkpICEpVWiM+EbcyrZEZX3dJ2iMa8wNANmBGGnecaTdfmmY
ka9F2fneY2cAMfN3r0IQuXUllun9TErjGT8pAYGiDYKBd1VKVGHSxiHESeXBDysm
7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:21 2026 by rpki-client