Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5AB4BEA11111ECB4D14668C4F9AE02.roa
File:                     7D5AB4BEA11111ECB4D14668C4F9AE02.roa (raw, json)
Hash identifier:          nuylxxA0MAhMM+pR02pfdMxto1yASxW/OVj6mF+MscQ=
Subject key identifier:   9D:D2:CA:4C:EB:4C:E1:BD:87:AA:8B:8E:56:7E:79:57:37:6A:36:5C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E88D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5AB4BEA11111ECB4D14668C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:28:15 +0000
ROA not before:           Sun 31 May 2026 17:28:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149233
IP address blocks:        103.181.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59533 (0xe88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:28:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6fae-655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:e5:2f:17:7d:46:40:c4:77:15:63:fd:22:
                    b2:b5:05:5b:a8:bd:ea:23:e8:b2:b2:3c:0e:70:57:
                    23:25:12:b0:60:ad:92:42:9f:4d:84:a3:a8:e2:bd:
                    2e:be:4a:0c:6a:f7:4b:57:f6:a5:53:4c:e4:77:f0:
                    21:f4:08:14:80:ae:44:fd:b5:06:b7:10:a1:6e:49:
                    b0:0c:21:5c:27:f1:ed:0f:45:63:fd:3f:64:07:22:
                    8f:13:a1:ea:27:c8:e3:81:68:72:c3:0c:00:07:9e:
                    89:72:fb:cd:69:cd:14:ce:01:74:f6:6e:7b:35:df:
                    4d:ca:ff:93:cb:83:90:ca:07:87:a0:8a:19:2a:7f:
                    ab:05:7e:0f:b5:e5:8a:44:84:cf:51:40:98:26:4e:
                    5b:5c:82:80:a2:64:a8:31:a7:db:8c:a9:02:35:e8:
                    8e:b0:21:69:b8:34:eb:3d:91:84:fd:be:8f:72:04:
                    72:f1:ab:f7:d7:73:84:97:e5:ad:0d:14:0c:4a:b5:
                    c0:6f:7d:c6:7a:53:c3:3f:ce:ab:7b:c0:c9:8f:6f:
                    33:06:ea:f8:c2:2f:70:86:f8:bd:0c:81:16:1e:eb:
                    b6:2f:8c:ef:13:17:ea:22:49:1b:78:14:ae:6d:68:
                    d3:52:9c:0f:2f:55:c9:06:2d:41:52:96:3b:2c:e4:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:CA:4C:EB:4C:E1:BD:87:AA:8B:8E:56:7E:79:57:37:6A:36:5C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5AB4BEA11111ECB4D14668C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:3f:5a:63:8b:a5:cd:d3:e7:fb:20:15:46:d9:0b:e4:27:
         42:0f:8a:d2:68:a9:02:a2:ef:4c:8d:a6:04:f6:92:e5:26:9f:
         95:5d:32:11:c5:0f:f0:33:78:13:56:61:fd:56:93:d1:68:ce:
         c1:e2:13:12:bc:42:19:0f:d8:97:cf:d6:f8:24:da:be:c5:08:
         a2:4e:79:a4:a8:51:07:1b:79:21:b7:92:a4:d1:fe:88:df:81:
         c3:78:fb:01:08:e0:85:93:68:4c:9f:28:24:fa:f3:1b:b1:fe:
         af:d9:03:95:bc:75:26:e1:76:22:38:2b:3e:58:bf:93:a1:1e:
         f2:ed:41:72:08:cb:79:c5:75:3f:26:bf:27:6e:af:d1:86:23:
         2f:51:1a:ce:ae:1d:92:59:7e:f7:57:7e:15:41:bb:86:7a:ec:
         e2:58:e0:a2:65:ff:c3:a2:f1:5e:05:b1:14:9e:6e:a7:23:0b:
         23:09:c8:a1:b0:31:8f:65:3e:e0:06:7b:cc:ba:83:d2:61:d5:
         c0:89:1a:3c:e4:d6:e3:ff:ba:c4:9b:21:0e:3b:c7:85:4e:a5:
         94:54:75:d2:32:d2:ba:f6:4f:3a:3c:9c:06:42:d3:78:8e:b4:
         cc:5c:25:2a:f1:04:c3:51:76:c4:1b:d1:71:d4:29:ee:8a:c4:
         d0:61:b9:c2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOiNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjgxNVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZmYWUtNjU1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKR5S8XfUZAxHcVY/0isrUFW6i96iPosrI8DnBXIyUSsGCtkkKfTYSjqOK9
Lr5KDGr3S1f2pVNM5HfwIfQIFICuRP21BrcQoW5JsAwhXCfx7Q9FY/0/ZAcijxOh
6ifI44FocsMMAAeeiXL7zWnNFM4BdPZuezXfTcr/k8uDkMoHh6CKGSp/qwV+D7Xl
ikSEz1FAmCZOW1yCgKJkqDGn24ypAjXojrAhabg06z2RhP2+j3IEcvGr99dzhJfl
rQ0UDEq1wG99xnpTwz/Oq3vAyY9vMwbq+MIvcIb4vQyBFh7rti+M7xMX6iJJG3gU
rm1o01KcDy9VyQYtQVKWOyzk8vsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSd0spM
60zhvYeqi45WfnlXN2o2XDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdENUFCNEJF
QTExMTExRUNCNEQxNDY2OEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe1QjANBgkqhkiG9w0BAQsFAAOCAQEAR/w/WmOLpc3T5/sgFUbZ
C+QnQg+K0mipAqLvTI2mBPaS5SaflV0yEcUP8DN4E1Zh/VaT0WjOweITErxCGQ/Y
l8/W+CTavsUIok55pKhRBxt5IbeSpNH+iN+Bw3j7AQjghZNoTJ8oJPrzG7H+r9kD
lbx1JuF2IjgrPli/k6Ee8u1BcgjLecV1Pya/J26v0YYjL1Eazq4dkll+91d+FUG7
hnrs4ljgomX/w6LxXgWxFJ5upyMLIwnIobAxj2U+4AZ7zLqD0mHVwIkaPOTW4/+6
xJshDjvHhU6llFR10jLSuvZPOjycBkLTeI60zFwlKvEEw1F2xBvRcdQp7orE0GG5
wg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:52 2026 by rpki-client