Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747DDE8E5C8911F0B356E41FC4F9AE02.roa
File:                     747DDE8E5C8911F0B356E41FC4F9AE02.roa (raw, json)
Hash identifier:          mtD1qd1IQko7MRbaSZ/7MWahZgGLlHixAZXrafuhyBo=
Subject key identifier:   77:F0:EC:BF:39:5B:01:DB:BB:22:8D:C5:C4:65:42:49:10:2A:E7:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E8AE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747DDE8E5C8911F0B356E41FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:29:24 +0000
ROA not before:           Sun 31 May 2026 17:29:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149526
IP address blocks:        103.182.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 09:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59566 (0xe8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:29:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ff4-f5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:fb:e1:f8:bf:25:e7:32:31:2e:ac:1a:5b:
                    60:d1:c2:2d:a8:f3:f6:18:4e:0d:48:87:fe:26:49:
                    3b:a8:a3:73:e1:9a:cc:74:2f:72:e7:b0:8e:2f:70:
                    ef:c4:78:dd:60:36:20:58:4e:3c:3b:55:79:9b:38:
                    4d:79:ec:95:da:58:c1:28:5e:ca:74:c6:1a:13:46:
                    49:3f:38:01:82:3e:fc:87:ab:79:bf:84:68:61:fe:
                    4a:ea:11:1d:78:5c:8e:0f:38:32:dd:9b:ca:a3:a2:
                    44:74:22:90:ca:a2:89:0f:b2:a4:5c:fe:6b:9f:c0:
                    41:8f:77:19:df:b7:6b:df:6f:77:5d:70:38:33:09:
                    ae:35:2f:15:48:68:21:e6:1e:69:69:23:15:57:c4:
                    f1:86:26:3e:43:ce:3a:76:7e:50:1a:25:1d:0e:fb:
                    b6:ce:c3:57:a3:67:e4:f6:97:2b:84:9f:26:7e:7b:
                    5e:b7:23:06:24:8c:29:df:15:7b:f1:39:2e:4c:b5:
                    60:37:35:d4:1d:28:89:21:a4:ac:26:b5:54:fc:df:
                    93:54:a9:78:6d:fc:25:af:e2:70:d6:48:2c:5f:f8:
                    2a:19:69:5c:d5:c0:2b:0a:54:44:c9:bd:c9:1a:2b:
                    7d:17:af:6d:a7:b5:b3:df:f9:96:32:f0:93:0a:24:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:EC:BF:39:5B:01:DB:BB:22:8D:C5:C4:65:42:49:10:2A:E7:AB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/747DDE8E5C8911F0B356E41FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:d2:8b:0f:4d:78:50:bc:f6:75:de:30:5e:0f:bd:14:fd:7a:
         78:4c:cd:96:bf:c6:71:e5:1c:f6:18:a4:92:01:17:20:4a:a7:
         68:df:aa:45:3b:51:77:cc:89:85:ce:ff:1a:a9:0f:b5:bb:be:
         ae:07:37:38:4e:b7:58:e5:ab:d8:2d:e5:30:49:0d:c7:e4:1f:
         33:87:fd:e6:86:ac:6f:ed:ce:ae:3d:ee:21:25:b4:64:9f:14:
         ec:c9:c7:a1:09:6f:72:1f:5a:e0:83:09:4a:78:a3:77:77:78:
         8d:1b:0c:f1:b7:28:4d:f4:21:d7:14:02:cc:e2:92:ad:7a:a1:
         85:5f:93:59:c6:2e:1c:c3:16:5e:c1:85:33:7f:a2:7a:6d:13:
         7a:df:8a:fc:0b:d2:00:44:c9:7f:64:f9:73:95:bc:33:8e:6c:
         27:16:11:c8:4b:9f:4d:1d:6b:0d:7d:a4:98:18:ae:11:f6:10:
         b3:35:9a:51:60:db:d4:69:f0:91:59:bd:e7:e3:84:7e:7b:12:
         9c:82:93:05:e5:2e:ea:d3:c0:0a:b5:26:d8:5b:7a:84:17:39:
         fd:60:2c:e1:88:71:13:a2:b1:47:47:f2:76:86:0e:98:f8:fd:
         52:08:21:a1:29:aa:d7:f3:bc:73:3a:3b:c2:3d:42:8b:68:c6:
         46:fb:cc:32
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOiuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjkyNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZmZjQtZjVlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALc0++H4vyXnMjEurBpbYNHCLajz9hhODUiH/iZJO6ijc+GazHQvcuewji9w
78R43WA2IFhOPDtVeZs4TXnsldpYwSheynTGGhNGST84AYI+/Iereb+EaGH+SuoR
HXhcjg84Mt2byqOiRHQikMqiiQ+ypFz+a5/AQY93Gd+3a99vd11wODMJrjUvFUho
IeYeaWkjFVfE8YYmPkPOOnZ+UBolHQ77ts7DV6Nn5PaXK4SfJn57XrcjBiSMKd8V
e/E5Lky1YDc11B0oiSGkrCa1VPzfk1SpeG38Ja/icNZILF/4KhlpXNXAKwpURMm9
yRorfRevbae1s9/5ljLwkwok9KUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR38Oy/
OVsB27sijcXEZUJJECrnqzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc0N0RERThF
NUM4OTExRjBCMzU2RTQxRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe2hDANBgkqhkiG9w0BAQsFAAOCAQEAq9KLD014ULz2dd4wXg+9
FP16eEzNlr/GceUc9hikkgEXIEqnaN+qRTtRd8yJhc7/GqkPtbu+rgc3OE63WOWr
2C3lMEkNx+QfM4f95oasb+3Orj3uISW0ZJ8U7MnHoQlvch9a4IMJSnijd3d4jRsM
8bcoTfQh1xQCzOKSrXqhhV+TWcYuHMMWXsGFM3+iem0Tet+K/AvSAETJf2T5c5W8
M45sJxYRyEufTR1rDX2kmBiuEfYQszWaUWDb1GnwkVm95+OEfnsSnIKTBeUu6tPA
CrUm2Ft6hBc5/WAs4YhxE6KxR0fydoYOmPj9UgghoSmq1/O8czo7wj1Ci2jGRvvM
Mg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:05 2026 by rpki-client