Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BAE80DC2B2B11EC85446C6CC4F9AE02.roa
File:                     9BAE80DC2B2B11EC85446C6CC4F9AE02.roa (raw, json)
Hash identifier:          oHz1PDtce6Z38yZaHnjJV6DAgCFl6/NnF3U2kbAuWqw=
Subject key identifier:   DA:F8:D6:81:E7:09:11:85:C4:F4:B6:A3:FF:AE:21:0A:BD:A9:D8:D7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F2AF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BAE80DC2B2B11EC85446C6CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:10:06 +0000
ROA not before:           Mon 06 Jul 2026 17:10:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140175
IP address blocks:        103.158.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62127 (0xf2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:10:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be16e-4423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:ea:4d:63:6d:5e:5f:62:2d:ea:e3:83:32:
                    90:27:b7:6c:5a:19:5b:75:1e:a4:83:8e:ff:4c:06:
                    b0:f3:f7:4b:48:92:8a:aa:d5:69:f5:d0:d1:5c:96:
                    19:e9:5a:90:0b:83:98:74:f2:06:67:02:da:c2:34:
                    0e:19:66:90:cb:a1:f5:b2:e4:e2:57:52:36:f4:c4:
                    2c:20:51:3b:92:c7:04:19:96:41:98:3d:ab:a0:2a:
                    65:ae:b7:96:00:7b:41:fe:2f:09:33:68:af:4a:a6:
                    b7:4d:3f:f4:51:5a:ae:b0:47:61:fa:1b:13:8f:6a:
                    cf:6c:4e:7e:b4:6c:82:54:38:36:e9:79:19:6f:9b:
                    a2:65:ff:c7:fd:4e:38:c9:bd:9e:38:28:c3:94:75:
                    26:02:6f:3f:f4:29:c0:0c:65:7a:25:27:73:1b:a0:
                    8f:52:0a:7b:19:3f:2a:99:fb:62:75:6d:04:52:77:
                    0c:95:d8:a2:83:23:c7:eb:19:22:06:10:c7:6d:76:
                    ce:c6:01:93:91:26:3e:f0:22:df:a3:cf:3e:b2:62:
                    3f:55:a8:b5:bd:28:8b:7b:68:38:dc:67:52:35:89:
                    21:de:fb:37:5c:74:6f:08:2e:9b:f4:08:b3:c1:d3:
                    76:b2:e7:61:71:e7:72:0e:50:50:70:1b:18:93:65:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F8:D6:81:E7:09:11:85:C4:F4:B6:A3:FF:AE:21:0A:BD:A9:D8:D7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BAE80DC2B2B11EC85446C6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:ad:63:26:7a:6d:31:72:c9:93:89:d2:e4:21:7a:52:32:
         b9:1a:0d:b6:3f:3e:0e:33:a3:46:c3:16:ce:05:d2:40:6e:01:
         bb:59:51:5a:90:1b:60:6e:5b:81:ac:66:ad:63:e3:3e:4f:22:
         da:28:1e:13:d9:6a:91:e8:5d:09:f3:4b:c7:88:b2:98:a7:9d:
         0f:d8:93:d5:d8:b6:2f:ef:a4:8b:be:97:16:ab:8d:3c:73:5c:
         a1:eb:44:0c:fa:df:0c:76:d7:1d:18:bc:45:44:88:47:41:d1:
         a8:b6:6a:74:4d:47:90:12:2e:91:da:d0:3b:c8:61:f3:aa:39:
         18:1d:a1:00:cb:eb:70:0f:fa:11:f4:cd:78:10:39:79:33:05:
         0e:1f:82:39:f5:1a:16:ab:86:e4:bc:42:b9:33:d3:e8:64:e1:
         66:09:14:81:a9:5d:68:1f:fb:84:79:fc:7e:0d:9f:aa:2b:f0:
         3c:e3:12:6a:33:2b:eb:aa:34:16:a8:73:81:dc:c6:60:11:78:
         fe:65:ea:fd:39:f3:2b:65:93:cf:d6:48:e1:5d:1b:fa:a1:80:
         6d:6f:91:5d:23:e9:be:17:b0:06:87:f5:eb:67:18:7d:3f:f8:
         59:e1:b3:2e:18:d9:6f:f1:4c:3c:09:7f:37:d5:8e:9c:7f:4b:
         5c:47:72:15
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPKvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MTAwNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUxNmUtNDQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMw66k1jbV5fYi3q44MykCe3bFoZW3UepIOO/0wGsPP3S0iSiqrVafXQ0VyW
GelakAuDmHTyBmcC2sI0DhlmkMuh9bLk4ldSNvTELCBRO5LHBBmWQZg9q6AqZa63
lgB7Qf4vCTNor0qmt00/9FFarrBHYfobE49qz2xOfrRsglQ4Nul5GW+bomX/x/1O
OMm9njgow5R1JgJvP/QpwAxleiUncxugj1IKexk/Kpn7YnVtBFJ3DJXYooMjx+sZ
IgYQx212zsYBk5EmPvAi36PPPrJiP1Wotb0oi3toONxnUjWJId77N1x0bwgum/QI
s8HTdrLnYXHncg5QUHAbGJNlgFMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTa+NaB
5wkRhcT0tqP/riEKvanY1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCQUU4MERD
MkIyQjExRUM4NTQ0NkM2Q0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeeajANBgkqhkiG9w0BAQsFAAOCAQEAmPatYyZ6bTFyyZOJ0uQh
elIyuRoNtj8+DjOjRsMWzgXSQG4Bu1lRWpAbYG5bgaxmrWPjPk8i2igeE9lqkehd
CfNLx4iymKedD9iT1di2L++ki76XFquNPHNcoetEDPrfDHbXHRi8RUSIR0HRqLZq
dE1HkBIukdrQO8hh86o5GB2hAMvrcA/6EfTNeBA5eTMFDh+COfUaFquG5LxCuTPT
6GThZgkUgaldaB/7hHn8fg2fqivwPOMSajMr66o0FqhzgdzGYBF4/mXq/TnzK2WT
z9ZI4V0b+qGAbW+RXSPpvhewBof162cYfT/4WeGzLhjZb/FMPAl/N9WOnH9LXEdy
FQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:41 2026 by rpki-client