Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73C72CDAA2C711ED9F43725AC4F9AE02.roa
File:                     73C72CDAA2C711ED9F43725AC4F9AE02.roa (raw, json)
Hash identifier:          TK6hck81KeROGjL1jUYDp1vv+Gt7WjSQqcy61D5PnkM=
Subject key identifier:   3B:AD:1C:81:5B:A9:8A:9C:0F:83:B0:15:0E:9F:C2:3B:AB:4B:3F:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E978
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73C72CDAA2C711ED9F43725AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:36:20 +0000
ROA not before:           Sun 31 May 2026 17:36:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150619
IP address blocks:        103.146.121.0/24 maxlen: 24
                          2001:df1:d9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59768 (0xe978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:36:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7194-768f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:15:2f:d6:16:73:ae:ac:f6:53:ea:40:83:
                    8d:2c:85:8b:cf:be:3a:99:d9:5b:af:86:07:4f:60:
                    a1:21:a3:19:c2:c8:f9:a4:fb:63:33:04:67:ea:50:
                    56:27:7e:9c:39:1d:4c:b1:d8:8c:38:b3:5a:54:42:
                    40:dc:87:1c:79:03:ab:b2:2c:58:98:84:cc:27:b5:
                    17:c6:5e:e0:cb:38:a6:04:76:ac:5c:a9:ed:72:32:
                    f3:fe:13:98:b0:1e:5b:fb:d8:a4:23:58:2f:34:19:
                    14:bd:c6:94:19:c2:28:dd:9f:76:2a:6e:c9:f3:0d:
                    de:32:a8:84:9c:07:82:0f:ce:56:a8:49:05:b6:09:
                    70:44:46:35:6e:18:78:ef:ac:da:ef:08:48:b1:63:
                    ce:90:92:bd:c4:d7:af:8f:e8:09:ca:0d:3d:77:ca:
                    c8:6c:af:6f:db:88:0f:18:f4:88:a8:00:bb:3e:25:
                    3c:b8:54:65:73:41:44:6b:a9:4e:37:64:b9:ef:8b:
                    93:48:89:f9:88:ad:f4:11:6f:92:53:4e:b9:cd:4c:
                    1f:81:3e:eb:59:a2:76:7f:3c:55:df:aa:1f:c0:6b:
                    d0:b7:c0:0f:8e:d4:b4:52:c7:a5:c5:ea:94:a0:40:
                    bb:db:30:dc:0b:f3:ca:52:12:c8:19:2b:17:bd:05:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:1C:81:5B:A9:8A:9C:0F:83:B0:15:0E:9F:C2:3B:AB:4B:3F:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73C72CDAA2C711ED9F43725AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.121.0/24
                IPv6:
                  2001:df1:d9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:93:b1:d1:b9:6e:6e:13:be:6d:b1:27:03:5a:51:ac:79:0e:
         8e:f5:64:91:8b:74:49:a8:ec:1b:9c:46:0e:11:83:9b:e1:37:
         06:9b:df:c1:35:24:3d:ee:04:e5:19:73:13:84:ab:ee:d0:c5:
         7f:dc:d0:55:8d:15:42:02:ca:a9:bb:bb:ce:97:f2:d9:ed:90:
         51:9f:d5:3d:87:d2:3b:02:ba:7c:e4:5b:1d:4f:56:59:ba:ec:
         b9:f8:55:fd:5f:72:0a:73:3a:18:34:f7:1b:07:25:d8:0f:7e:
         78:f4:9f:c6:38:5d:43:eb:48:1a:77:12:46:dd:7c:44:ce:1f:
         82:6b:ca:cb:e5:a1:8a:9f:c0:a3:40:b1:a3:b6:eb:dc:48:af:
         7e:ee:4d:d7:51:81:76:66:d8:e1:8d:d5:14:f5:2c:ac:ff:5a:
         8e:85:cc:89:8c:36:98:7b:f4:0f:ce:c5:d4:5b:19:05:6b:7d:
         8c:0a:93:25:9f:97:a8:63:e0:ea:1b:07:8a:10:47:e2:21:fb:
         5c:e0:c7:05:19:bf:aa:d9:04:31:d6:56:03:5e:86:6e:9b:5c:
         fc:d4:09:8f:81:23:f3:80:ff:37:d2:e3:0d:dd:bd:5d:b0:33:
         a3:b7:0c:3d:7c:2f:1e:01:9e:e6:00:94:98:73:59:da:70:98:
         b0:37:de:35
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOl4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzYyMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxOTQtNzY4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDlFS/WFnOurPZT6kCDjSyFi8++OpnZW6+GB09goSGjGcLI+aT7YzMEZ+pQ
Vid+nDkdTLHYjDizWlRCQNyHHHkDq7IsWJiEzCe1F8Ze4Ms4pgR2rFyp7XIy8/4T
mLAeW/vYpCNYLzQZFL3GlBnCKN2fdipuyfMN3jKohJwHgg/OVqhJBbYJcERGNW4Y
eO+s2u8ISLFjzpCSvcTXr4/oCcoNPXfKyGyvb9uIDxj0iKgAuz4lPLhUZXNBRGup
Tjdkue+Lk0iJ+Yit9BFvklNOuc1MH4E+61midn88Vd+qH8Br0LfAD47UtFLHpcXq
lKBAu9sw3AvzylISyBkrF70Fdu0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQ7rRyB
W6mKnA+DsBUOn8I7q0s/ETAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczQzcyQ0RB
QTJDNzExRUQ5RjQzNzI1QUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGeSeTAPBAIAAjAJAwcAIAEN8dnAMA0GCSqGSIb3DQEBCwUAA4IB
AQCFk7HRuW5uE75tsScDWlGseQ6O9WSRi3RJqOwbnEYOEYOb4TcGm9/BNSQ97gTl
GXMThKvu0MV/3NBVjRVCAsqpu7vOl/LZ7ZBRn9U9h9I7Arp85FsdT1ZZuuy5+FX9
X3IKczoYNPcbByXYD3549J/GOF1D60gadxJG3XxEzh+Ca8rL5aGKn8CjQLGjtuvc
SK9+7k3XUYF2ZtjhjdUU9Sys/1qOhcyJjDaYe/QPzsXUWxkFa32MCpMln5eoY+Dq
GweKEEfiIftc4McFGb+q2QQx1lYDXoZum1z81AmPgSPzgP830uMN3b1dsDOjtww9
fC8eAZ7mAJSYc1nacJiwN941
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:16 2026 by rpki-client