Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982B4B1EF92711ECB3FAB65FC4F9AE02.roa
File:                     982B4B1EF92711ECB3FAB65FC4F9AE02.roa (raw, json)
Hash identifier:          ldKur3bg5jMGiQHRQy6k563N8VTy33gVG6tBzKq0nJ8=
Subject key identifier:   BF:63:10:E5:0E:4B:44:A4:A7:44:CB:AD:70:B2:C4:2D:7D:61:D9:EE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF0C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982B4B1EF92711ECB3FAB65FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:39:36 +0000
ROA not before:           Mon 06 Jul 2026 16:39:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134044
IP address blocks:        103.59.180.0/23 maxlen: 24
                          103.65.20.0/23 maxlen: 24
                          103.175.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61196 (0xef0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:39:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bda47-28a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:89:3c:f6:a9:59:fd:a3:70:00:f7:bb:2a:
                    0b:92:20:f5:09:90:6a:e2:ee:cb:58:df:29:ce:81:
                    30:22:47:fb:58:1b:5a:ca:0c:87:8a:35:06:1b:23:
                    4f:ac:d7:36:5f:37:66:4c:65:14:4c:92:44:e5:c7:
                    a2:e9:81:4f:46:b1:11:3e:44:5d:7a:06:4d:9c:47:
                    0d:ac:3a:71:1e:ab:10:c2:02:e4:e3:1f:f1:9f:ed:
                    76:40:41:97:35:cd:03:1d:97:bd:0a:38:ad:ec:57:
                    72:46:1d:ad:44:50:da:d1:92:0b:52:d7:39:38:60:
                    c6:2f:04:f6:46:60:93:ab:52:ec:98:c1:84:6b:a0:
                    91:cc:e2:b5:b5:06:c3:16:9c:e0:5f:cc:85:ad:44:
                    ca:05:00:9e:ce:19:a3:72:df:18:51:d1:2a:c5:01:
                    5d:40:56:c8:57:dc:21:d9:52:54:6a:0f:61:45:a6:
                    e1:58:a8:de:23:3d:55:d5:f1:03:e4:e0:04:f5:58:
                    5a:ab:31:7b:41:4d:82:e1:6f:37:90:bb:f8:2f:f7:
                    85:47:3b:b2:ca:e2:a2:97:9c:78:d2:1f:29:15:94:
                    db:f7:c4:6b:e1:c0:b4:3a:fc:82:05:3a:6a:b4:f7:
                    81:5e:1f:17:d5:be:69:12:30:06:3a:f7:e5:d1:5a:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:10:E5:0E:4B:44:A4:A7:44:CB:AD:70:B2:C4:2D:7D:61:D9:EE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982B4B1EF92711ECB3FAB65FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.180.0/23
                  103.65.20.0/23
                  103.175.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:1c:fd:e0:2c:f9:45:e1:03:52:81:04:70:ad:df:39:e1:
         28:87:7d:41:37:5c:31:bc:6e:f8:5f:14:cc:07:47:d8:8c:65:
         c0:24:40:95:b9:90:60:0d:76:89:6c:99:6f:6b:ae:67:6a:b6:
         ee:b2:e6:df:b2:33:d7:0b:c3:03:1b:2c:89:47:a3:4b:85:25:
         1e:24:33:f9:4f:5c:b4:69:97:a0:da:19:93:90:ba:20:1a:07:
         ef:47:16:64:6b:c6:f5:e0:24:95:8f:5f:ff:d9:a4:b3:46:30:
         ad:67:8a:a2:da:dc:e8:b1:eb:97:7e:04:6c:7b:21:ef:fe:ac:
         6f:1f:24:d8:70:01:b1:0d:65:dc:52:60:f0:78:61:32:aa:47:
         b8:eb:e9:af:fc:b2:5d:24:3f:44:48:e8:72:e5:29:c2:53:a2:
         fc:24:76:62:d0:f1:30:49:d1:4d:89:90:29:9c:86:83:4f:11:
         a7:3d:75:98:dd:42:f9:2e:9a:34:cc:38:04:5c:fa:92:92:da:
         0d:b4:87:6d:9b:d4:7c:a1:7a:11:c5:37:ac:f8:69:a9:f1:1d:
         d9:42:be:84:90:5d:f7:4c:bc:b0:da:4b:d1:89:38:a7:3e:51:
         e2:22:94:71:e6:2a:5d:4a:a2:36:bb:71:d5:b0:89:4b:70:7c:
         2f:f1:f3:da
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIDAO8MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzkzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRhNDctMjhhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5ciTz2qVn9o3AA97sqC5Ig9QmQauLuy1jfKc6BMCJH+1gbWsoMh4o1Bhsj
T6zXNl83ZkxlFEySROXHoumBT0axET5EXXoGTZxHDaw6cR6rEMIC5OMf8Z/tdkBB
lzXNAx2XvQo4rexXckYdrURQ2tGSC1LXOThgxi8E9kZgk6tS7JjBhGugkczitbUG
wxac4F/Mha1EygUAns4Zo3LfGFHRKsUBXUBWyFfcIdlSVGoPYUWm4Vio3iM9VdXx
A+TgBPVYWqsxe0FNguFvN5C7+C/3hUc7ssriopeceNIfKRWU2/fEa+HAtDr8ggU6
arT3gV4fF9W+aRIwBjr35dFaCEkCAwEAAaOCAmwwggJoMB0GA1UdDgQWBBS/YxDl
DktEpKdEy61wssQtfWHZ7jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4MkI0QjFF
RjkyNzExRUNCM0ZBQjY1RkM0RjlBRTAyLnJvYTArBggrBgEFBQcBBwEB/wQcMBow
GAQCAAEwEgMEAWc7tAMEAWdBFAMEAWevFjANBgkqhkiG9w0BAQsFAAOCAQEADoYc
/eAs+UXhA1KBBHCt3znhKId9QTdcMbxu+F8UzAdH2IxlwCRAlbmQYA12iWyZb2uu
Z2q27rLm37Iz1wvDAxssiUejS4UlHiQz+U9ctGmXoNoZk5C6IBoH70cWZGvG9eAk
lY9f/9mks0YwrWeKotrc6LHrl34EbHsh7/6sbx8k2HABsQ1l3FJg8HhhMqpHuOvp
r/yyXSQ/REjocuUpwlOi/CR2YtDxMEnRTYmQKZyGg08Rpz11mN1C+S6aNMw4BFz6
kpLaDbSHbZvUfKF6EcU3rPhpqfEd2UK+hJBd90y8sNpL0Yk4pz5R4iKUceYqXUqi
Nrtx1bCJS3B8L/Hz2g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:14 2026 by rpki-client