Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83145DFAC9AE11EBA5A2444FC4F9AE02.roa
File:                     83145DFAC9AE11EBA5A2444FC4F9AE02.roa (raw, json)
Hash identifier:          EMkuzEOvs3IE9qH9V7uzZLnxw58yN1qVw6+LiVcMaPU=
Subject key identifier:   0D:24:38:F1:B0:0B:80:6B:77:12:54:54:12:83:D0:94:61:45:7A:1D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E6CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83145DFAC9AE11EBA5A2444FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:13:30 +0000
ROA not before:           Sun 31 May 2026 17:13:30 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141276
IP address blocks:        103.159.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59082 (0xe6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:13:30 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6c3a-855f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:9a:98:97:e3:42:a9:46:fb:63:cf:53:fe:
                    2a:f5:1a:e9:38:da:77:0e:9f:0e:cc:14:de:1f:af:
                    52:41:5e:66:f0:6e:0c:cd:b7:7d:81:83:51:dd:f2:
                    7f:05:9e:b3:65:0a:8e:36:58:4d:c4:e2:51:29:88:
                    b2:5c:50:e0:92:d5:bf:75:1c:1f:96:8d:50:c9:f5:
                    84:22:60:b9:ff:ab:04:d5:56:e8:dd:65:f1:a2:c7:
                    8e:18:7e:79:22:2b:fc:28:8d:29:25:1b:0e:86:d7:
                    d5:b1:7a:64:27:e4:3d:a9:33:6c:d1:05:34:46:48:
                    90:52:bc:35:25:f9:b6:a6:a0:75:c6:7b:a2:9c:1f:
                    31:96:3e:1a:4b:d5:d1:a9:3b:61:13:0f:cf:44:6e:
                    6d:fa:6c:b0:b1:c3:7e:1f:ac:56:58:69:8d:0a:96:
                    36:27:1b:14:d1:34:bb:e7:78:ce:de:60:f7:01:9f:
                    ab:44:ca:1b:6a:b2:df:3f:ed:a2:b3:49:f6:9d:6e:
                    e0:e8:a9:ce:50:94:08:9b:16:ce:9b:2d:7e:9c:2d:
                    97:5e:c7:09:d1:25:ec:8e:6d:8b:bc:43:1a:53:e8:
                    c8:85:93:ec:98:34:4b:4d:a8:9a:ec:dd:1c:3f:c1:
                    54:72:51:f2:6a:5c:05:52:3b:fe:c5:9a:d8:81:b1:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:38:F1:B0:0B:80:6B:77:12:54:54:12:83:D0:94:61:45:7A:1D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83145DFAC9AE11EBA5A2444FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:24:05:d9:f3:82:ad:92:b9:19:f5:4a:1c:27:81:01:2b:
         64:09:ad:14:f2:58:b8:00:28:66:cd:19:43:67:a7:ec:a6:de:
         81:fe:c3:95:13:83:25:49:24:e8:95:6e:ea:bf:a3:3d:5e:7c:
         8d:e7:a4:4b:af:da:7a:6e:ed:c2:7f:83:fd:3b:4c:98:95:e3:
         94:27:39:c2:c6:b2:80:95:1a:12:a5:ce:10:9a:42:36:ee:a5:
         34:c8:25:df:8c:6e:40:99:11:2a:d0:08:b6:6a:fb:68:a7:0d:
         b3:a0:14:3c:06:ef:b3:93:dc:b3:35:90:26:24:98:af:fb:05:
         1d:fb:20:66:86:e5:14:41:bd:fa:d1:7e:0d:68:7c:38:4d:e2:
         59:ad:03:eb:1f:25:82:be:53:2e:f5:b3:07:2a:be:2c:a3:69:
         5a:27:ba:8a:aa:78:8e:7f:4b:df:53:79:3f:88:f6:87:96:7a:
         89:1f:63:e6:f8:41:1f:e8:35:8d:17:48:76:fa:92:f6:ea:0e:
         bf:2e:3f:bc:2e:35:93:f3:2d:04:21:06:0a:42:83:71:a6:94:
         aa:e1:1e:16:33:44:28:ea:d9:70:26:d9:9b:c4:8b:7a:ad:de:
         3f:25:a7:88:84:25:4a:bc:9a:5c:eb:6d:c7:de:15:64:0f:54:
         e9:e9:50:6f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAObKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTMzMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZjM2EtODU1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpImpiX40KpRvtjz1P+KvUa6Tjadw6fDswU3h+vUkFeZvBuDM23fYGDUd3y
fwWes2UKjjZYTcTiUSmIslxQ4JLVv3UcH5aNUMn1hCJguf+rBNVW6N1l8aLHjhh+
eSIr/CiNKSUbDobX1bF6ZCfkPakzbNEFNEZIkFK8NSX5tqagdcZ7opwfMZY+GkvV
0ak7YRMPz0RubfpssLHDfh+sVlhpjQqWNicbFNE0u+d4zt5g9wGfq0TKG2qy3z/t
orNJ9p1u4OipzlCUCJsWzpstfpwtl17HCdEl7I5ti7xDGlPoyIWT7Jg0S02omuzd
HD/BVHJR8mpcBVI7/sWa2IGx1UMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQNJDjx
sAuAa3cSVFQSg9CUYUV6HTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgzMTQ1REZB
QzlBRTExRUJBNUEyNDQ0RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWefKDANBgkqhkiG9w0BAQsFAAOCAQEAdagkBdnzgq2SuRn1Shwn
gQErZAmtFPJYuAAoZs0ZQ2en7Kbegf7DlRODJUkk6JVu6r+jPV58jeekS6/aem7t
wn+D/TtMmJXjlCc5wsaygJUaEqXOEJpCNu6lNMgl34xuQJkRKtAItmr7aKcNs6AU
PAbvs5PcszWQJiSYr/sFHfsgZoblFEG9+tF+DWh8OE3iWa0D6x8lgr5TLvWzByq+
LKNpWie6iqp4jn9L31N5P4j2h5Z6iR9j5vhBH+g1jRdIdvqS9uoOvy4/vC41k/Mt
BCEGCkKDcaaUquEeFjNEKOrZcCbZm8SLeq3ePyWniIQlSryaXOttx94VZA9U6elQ
bw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:12 2026 by rpki-client