Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726E6DD088BB11F0B054DF09C4F9AE02.roa
File:                     726E6DD088BB11F0B054DF09C4F9AE02.roa (raw, json)
Hash identifier:          lFwGz3h8zzoK7YPVllPWbhL8BrVtcSyKCUZQfWjXfRA=
Subject key identifier:   C6:0A:32:BE:8B:B5:61:EC:C2:E5:7E:36:5B:47:C4:12:60:B3:90:F0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F150
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726E6DD088BB11F0B054DF09C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:58:23 +0000
ROA not before:           Mon 06 Jul 2026 16:58:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137144
IP address blocks:        103.106.100.0/23 maxlen: 24
                          103.106.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61776 (0xf150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:58:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdeaf-062b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:ed:02:14:f8:13:b8:22:74:42:fd:a1:28:
                    0a:80:f2:6f:56:26:72:9b:bb:52:dc:b3:48:ce:90:
                    61:71:bf:b1:7f:10:d6:0a:bb:e7:b2:d2:be:ee:f0:
                    82:c8:69:c1:79:7b:62:05:fb:87:4c:d4:6d:07:fb:
                    8f:a6:b6:9d:62:70:82:da:ca:39:56:2c:d7:a2:fe:
                    01:07:6d:1e:b8:9a:37:25:9e:23:fb:e7:8a:22:67:
                    eb:dd:61:2f:a8:4b:d1:af:bd:99:59:eb:77:89:9a:
                    d5:6f:4a:90:0e:bd:a2:43:02:b4:4f:f2:62:21:8e:
                    83:85:75:9b:85:fb:f1:71:0b:05:43:44:cb:ad:e9:
                    90:55:64:3d:b1:8c:6b:46:b1:85:a8:9b:58:b8:cc:
                    94:18:9e:1a:a0:32:5b:49:14:fc:0d:21:d5:85:31:
                    77:06:cd:d7:35:df:1d:1b:56:bb:92:55:68:90:e8:
                    f8:94:90:66:3e:ad:57:c6:c3:de:fa:2d:69:42:0c:
                    05:3a:1d:fa:70:e2:e6:54:c7:19:50:a6:4c:f3:f6:
                    9e:70:4b:9e:7f:df:7d:86:37:04:24:e9:ba:e0:b1:
                    34:bc:18:4e:95:8a:94:28:60:15:ba:08:4a:e7:f8:
                    8d:8e:65:76:34:68:11:f7:a0:34:aa:00:24:ae:27:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:32:BE:8B:B5:61:EC:C2:E5:7E:36:5B:47:C4:12:60:B3:90:F0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726E6DD088BB11F0B054DF09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.100.0/23
                  103.106.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:d3:87:ad:97:21:99:0d:e7:93:85:b0:5a:d2:56:79:73:
         8a:55:8e:2f:4b:66:10:45:de:62:e0:cd:c3:a3:b4:27:84:f7:
         fb:bb:25:78:74:bf:d2:93:76:9d:5b:ca:99:dd:49:2e:8f:b2:
         d0:7c:f0:14:50:bd:9a:9a:14:93:b6:fc:59:7a:3b:00:6e:7f:
         e7:a0:10:a8:9b:64:26:13:f6:f1:f2:9a:1d:e7:df:b0:75:21:
         a0:17:51:d1:7b:64:c5:30:a9:ba:40:dc:15:c2:cd:b8:ce:59:
         b3:10:e7:9b:a4:1d:84:a5:af:99:80:39:44:af:8f:41:cb:7c:
         e3:3b:db:11:99:27:8a:6a:6d:5e:55:68:14:48:ea:b0:d4:6e:
         62:17:ef:09:ff:f6:90:82:6e:f4:10:1f:8d:38:02:46:6e:83:
         fd:62:75:d3:5d:5b:37:d9:7e:55:4d:2e:30:29:9a:63:27:68:
         7f:b3:ad:aa:69:12:6d:31:41:5c:5b:9a:27:0e:38:53:3e:72:
         f1:0c:22:fe:96:fb:76:02:4d:e1:e2:d9:86:0a:a8:f9:81:17:
         15:19:b6:8f:8c:88:63:0a:5f:c6:36:bf:7a:e1:b0:66:01:34:
         5e:e4:4e:67:21:4e:6e:3d:eb:4c:cb:36:80:f2:2e:03:24:b3:
         75:b3:94:99
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPFQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTgyM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRlYWYtMDYyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmU7QIU+BO4InRC/aEoCoDyb1Ymcpu7UtyzSM6QYXG/sX8Q1gq757LSvu7w
gshpwXl7YgX7h0zUbQf7j6a2nWJwgtrKOVYs16L+AQdtHriaNyWeI/vniiJn691h
L6hL0a+9mVnrd4ma1W9KkA69okMCtE/yYiGOg4V1m4X78XELBUNEy63pkFVkPbGM
a0axhaibWLjMlBieGqAyW0kU/A0h1YUxdwbN1zXfHRtWu5JVaJDo+JSQZj6tV8bD
3votaUIMBTod+nDi5lTHGVCmTPP2nnBLnn/ffYY3BCTpuuCxNLwYTpWKlChgFboI
Suf4jY5ldjRoEfegNKoAJK4npAMCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTGCjK+
i7Vh7MLlfjZbR8QSYLOQ8DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyNkU2REQw
ODhCQjExRjBCMDU0REYwOUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAWdqZAMEAGdqZzANBgkqhkiG9w0BAQsFAAOCAQEAMHvTh62XIZkN
55OFsFrSVnlzilWOL0tmEEXeYuDNw6O0J4T3+7sleHS/0pN2nVvKmd1JLo+y0Hzw
FFC9mpoUk7b8WXo7AG5/56AQqJtkJhP28fKaHeffsHUhoBdR0XtkxTCpukDcFcLN
uM5ZsxDnm6QdhKWvmYA5RK+PQct84zvbEZknimptXlVoFEjqsNRuYhfvCf/2kIJu
9BAfjTgCRm6D/WJ1011bN9l+VU0uMCmaYydof7OtqmkSbTFBXFuaJw44Uz5y8Qwi
/pb7dgJN4eLZhgqo+YEXFRm2j4yIYwpfxja/euGwZgE0XuROZyFObj3rTMs2gPIu
AySzdbOUmQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:11 2026 by rpki-client