Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
File:                     9735049C02F811F09ECE6379C4F9AE02.roa (raw, json)
Hash identifier:          r1KsuIBp17vYFDRhcnJWQkGwI+YIZxSKFoI4JtnqICI=
Subject key identifier:   11:80:D9:77:3A:6C:C8:C1:04:C2:57:03:4D:8B:7A:A6:F5:57:64:9E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFEB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:46:48 +0000
ROA not before:           Mon 06 Jul 2026 16:46:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135258
IP address blocks:        103.70.40.0/22 maxlen: 24
                          2001:df2:47c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61419 (0xefeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:46:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdbf8-4640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:f7:1a:f3:2d:4d:87:80:1a:d4:87:d5:49:
                    13:69:8e:ef:59:ab:fe:cd:f2:c6:0f:f8:c0:ce:02:
                    d4:e9:38:66:e2:c1:ff:22:47:d3:52:4c:39:d1:ff:
                    ee:c8:1e:81:30:d1:4d:63:71:ca:ce:0a:f1:e3:50:
                    b7:ac:7b:02:60:18:cb:1d:87:27:bc:6f:35:59:39:
                    18:93:bd:b4:f8:8d:a6:55:c9:9f:7f:96:69:09:c6:
                    da:1f:b1:f7:76:dc:c0:b9:83:66:99:e9:e6:6b:fc:
                    d4:51:a1:0d:be:f3:ec:bc:b7:c4:9b:fa:90:f8:d7:
                    92:f5:75:39:97:f6:7e:7a:8a:d1:46:c9:c2:4d:ec:
                    bd:fd:13:72:b6:97:c7:61:8d:6b:c3:48:a7:37:06:
                    73:2c:ef:80:ed:d9:51:d9:42:80:07:54:fa:02:3b:
                    24:d8:10:7c:23:25:09:08:39:62:7a:da:de:6c:a4:
                    48:58:6d:32:95:c9:99:fc:cb:6b:89:d9:f4:50:fe:
                    e6:ed:b2:91:03:cd:8d:c9:41:b2:bd:b6:9d:ed:98:
                    28:81:59:fe:90:d7:ac:2a:5a:24:6d:6a:ba:54:a5:
                    5b:df:04:96:63:00:32:0b:b0:f1:b8:7a:f4:75:b4:
                    fe:78:84:97:7e:a1:7f:14:4f:7b:5b:49:d8:e1:f0:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:D9:77:3A:6C:C8:C1:04:C2:57:03:4D:8B:7A:A6:F5:57:64:9E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.40.0/22
                IPv6:
                  2001:df2:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:cc:b8:37:a6:f8:3a:14:e6:7b:6a:c4:08:35:c6:d0:7f:
         bb:41:9a:d1:5a:46:65:ed:87:0c:7b:cb:d9:9a:28:84:d5:ae:
         e7:c9:e6:b2:fb:2f:e9:03:3d:f9:e1:a4:79:6f:c3:fc:48:c5:
         8b:1d:5d:2f:8b:65:b4:54:91:27:f2:fe:07:c4:39:1d:94:70:
         cd:ad:69:d0:0f:fd:8e:f5:d5:4f:9e:4a:80:1e:a2:b6:66:c5:
         63:b6:f8:87:c5:be:5c:75:a4:80:ab:e3:3d:64:e6:fe:28:d0:
         32:3c:d9:95:33:84:a0:20:ba:68:ea:6b:2b:dd:d3:57:6c:6e:
         c9:41:63:ca:d3:37:42:40:de:02:53:85:b4:12:ed:f2:55:eb:
         3c:81:1c:b9:b8:79:b2:24:b6:79:eb:39:58:30:84:2f:2b:5d:
         8a:25:b4:cb:92:81:65:ab:d8:b7:c8:e7:73:b7:2f:10:72:07:
         56:57:16:85:bd:08:16:6e:d6:d9:82:43:58:70:5c:af:7d:17:
         00:af:86:74:d3:97:05:ee:4c:2b:f8:cc:7b:98:38:96:a3:e6:
         6e:00:2b:f6:5d:c8:c2:a3:0a:51:5a:80:86:36:aa:5c:cc:8a:
         7b:3f:8e:b9:83:3e:ba:e0:ed:86:0c:17:89:48:1a:26:14:dd:
         81:b1:5c:45
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAO/rMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDY0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiZjgtNDY0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI5z9xrzLU2HgBrUh9VJE2mO71mr/s3yxg/4wM4C1Ok4ZuLB/yJH01JMOdH/
7sgegTDRTWNxys4K8eNQt6x7AmAYyx2HJ7xvNVk5GJO9tPiNplXJn3+WaQnG2h+x
93bcwLmDZpnp5mv81FGhDb7z7Ly3xJv6kPjXkvV1OZf2fnqK0UbJwk3svf0TcraX
x2GNa8NIpzcGcyzvgO3ZUdlCgAdU+gI7JNgQfCMlCQg5Ynra3mykSFhtMpXJmfzL
a4nZ9FD+5u2ykQPNjclBsr22ne2YKIFZ/pDXrCpaJG1qulSlW98ElmMAMguw8bh6
9HW0/niEl36hfxRPe1tJ2OHw7BUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQRgNl3
OmzIwQTCVwNNi3qm9VdknjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3MzUwNDlD
MDJGODExRjA5RUNFNjM3OUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAmdGKDAPBAIAAjAJAwcAIAEN8kfAMA0GCSqGSIb3DQEBCwUAA4IB
AQBOD8y4N6b4OhTme2rECDXG0H+7QZrRWkZl7YcMe8vZmiiE1a7nyeay+y/pAz35
4aR5b8P8SMWLHV0vi2W0VJEn8v4HxDkdlHDNrWnQD/2O9dVPnkqAHqK2ZsVjtviH
xb5cdaSAq+M9ZOb+KNAyPNmVM4SgILpo6msr3dNXbG7JQWPK0zdCQN4CU4W0Eu3y
Ves8gRy5uHmyJLZ56zlYMIQvK12KJbTLkoFlq9i3yOdzty8QcgdWVxaFvQgWbtbZ
gkNYcFyvfRcAr4Z005cF7kwr+Mx7mDiWo+ZuACv2XcjCowpRWoCGNqpczIp7P465
gz664O2GDBeJSBomFN2BsVxF
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:22 2026 by rpki-client