Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa
File:                     76D93B7CB13211EF942ED23FC4F9AE02.roa (raw, json)
Hash identifier:          pQRsyj0JPzCj8SkzQC5WV2ZfPtcpjTFmI+VChryAkco=
Subject key identifier:   DB:A7:D4:14:C1:C9:08:35:A5:76:31:65:17:97:8F:73:4E:C6:D2:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EE84
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:35:12 +0000
ROA not before:           Mon 06 Jul 2026 16:35:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133291
IP address blocks:        103.94.174.0/24 maxlen: 24
                          103.94.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61060 (0xee84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:35:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd93f-7e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:6d:ff:b5:ed:b3:9e:9e:78:5e:7c:78:02:
                    e0:65:7c:dc:2a:1e:cc:ac:2b:4d:5f:b5:90:0b:c1:
                    7c:b4:ee:76:71:be:89:f3:27:44:b1:50:05:73:69:
                    f5:1f:69:c4:a0:f7:b2:4e:47:e2:8b:03:51:62:6b:
                    35:e4:f4:92:be:36:0c:4f:bb:3f:62:ef:41:10:3e:
                    b1:a0:59:cc:45:31:b3:ce:ff:38:59:85:a2:42:b9:
                    47:6d:92:fc:75:2f:7f:8f:b5:a7:22:55:b1:f9:df:
                    17:3e:79:c5:d5:5d:f5:0c:c4:3a:09:ea:64:ab:87:
                    0a:11:86:d5:e7:ee:63:95:4f:db:8b:45:6a:dd:90:
                    86:a5:4b:25:0a:b6:ba:0d:74:4b:10:9e:91:c3:3b:
                    cc:a8:8c:46:ab:55:e1:68:e4:70:27:1a:9c:df:f0:
                    c5:df:a7:08:3d:56:ec:e0:69:d4:d3:97:28:84:83:
                    a5:cd:fc:06:aa:ee:83:c0:5d:36:8c:a9:a3:af:21:
                    34:cc:c6:cb:c4:ac:0d:99:80:fc:e4:93:9d:a4:67:
                    83:52:3f:5b:57:07:23:fa:db:cb:a2:71:6f:05:af:
                    5d:31:32:08:b3:3c:17:a8:ff:67:10:4f:e5:f6:d1:
                    d6:42:7b:b2:8b:8d:ac:47:ab:fc:cb:2c:2c:5c:02:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:D4:14:C1:C9:08:35:A5:76:31:65:17:97:8F:73:4E:C6:D2:8A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:c2:b1:0d:2a:4a:5b:32:63:38:23:2f:fc:14:5a:b3:99:7d:
         fa:45:d6:e0:ae:4c:3e:5b:9c:8a:8a:dd:31:bc:5d:c6:ce:bf:
         bf:1e:47:66:36:77:b8:81:d2:e7:86:11:40:b6:4b:8e:25:40:
         45:cd:e6:d9:e5:74:74:c1:9b:62:4c:b5:70:dd:17:4d:88:92:
         20:60:24:55:60:51:1d:c2:52:30:6d:31:8e:5f:9b:9d:d2:4f:
         4a:fb:76:ac:19:19:55:2a:13:e8:50:ca:f1:6c:8a:03:ae:44:
         fa:1f:f8:b5:56:54:e4:4f:ab:86:3f:94:1a:c1:a0:d3:0c:24:
         3b:36:82:4f:d4:af:49:51:8e:1c:99:c5:93:70:34:c6:18:4b:
         62:65:34:7c:66:cd:f4:81:32:c2:d7:ed:cf:64:39:f0:a0:54:
         41:2c:ff:74:3b:61:1d:b6:c3:d0:07:8e:bf:bf:9f:bb:b3:74:
         91:2f:67:8e:0f:99:17:e9:94:ca:d8:b2:f7:b1:85:65:8a:54:
         2c:63:6f:fe:fd:89:83:76:5a:79:d2:9a:b1:0c:2d:de:97:5c:
         42:2c:ec:e6:bb:92:3f:58:26:2d:d8:2a:62:3b:63:7a:85:e0:
         74:3a:e2:c5:61:cf:f9:7e:a8:57:d6:60:2f:5d:b9:f8:26:7c:
         1b:53:5c:d2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO6EMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzUxMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5M2YtN2U5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZHbf+17bOennhefHgC4GV83CoezKwrTV+1kAvBfLTudnG+ifMnRLFQBXNp
9R9pxKD3sk5H4osDUWJrNeT0kr42DE+7P2LvQRA+saBZzEUxs87/OFmFokK5R22S
/HUvf4+1pyJVsfnfFz55xdVd9QzEOgnqZKuHChGG1efuY5VP24tFat2QhqVLJQq2
ug10SxCekcM7zKiMRqtV4WjkcCcanN/wxd+nCD1W7OBp1NOXKISDpc38Bqrug8Bd
Noypo68hNMzGy8SsDZmA/OSTnaRng1I/W1cHI/rby6JxbwWvXTEyCLM8F6j/ZxBP
5fbR1kJ7souNrEer/MssLFwCB00CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTbp9QU
wckINaV2MWUXl49zTsbSijAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc2RDkzQjdD
QjEzMjExRUY5NDJFRDIzRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWderjANBgkqhkiG9w0BAQsFAAOCAQEAr8KxDSpKWzJjOCMv/BRa
s5l9+kXW4K5MPluciordMbxdxs6/vx5HZjZ3uIHS54YRQLZLjiVARc3m2eV0dMGb
Yky1cN0XTYiSIGAkVWBRHcJSMG0xjl+bndJPSvt2rBkZVSoT6FDK8WyKA65E+h/4
tVZU5E+rhj+UGsGg0wwkOzaCT9SvSVGOHJnFk3A0xhhLYmU0fGbN9IEywtftz2Q5
8KBUQSz/dDthHbbD0AeOv7+fu7N0kS9njg+ZF+mUytiy97GFZYpULGNv/v2Jg3Za
edKasQwt3pdcQizs5ruSP1gmLdgqYjtjeoXgdDrixWHP+X6oV9ZgL125+CZ8G1Nc
0g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:42 2026 by rpki-client