Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa
File:                     9BCA4A640D8111F1B51EF542243D8C67.roa (raw, json)
Hash identifier:          KFiS8ruMwIPuqoXyN4WCIATso3rJ2vK/y60Vql5A7Ik=
Subject key identifier:   6F:A7:9E:48:56:02:79:84:83:E1:14:94:9A:6A:77:AD:91:85:A1:96
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E96B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa
Signing time:             Sun 31 May 2026 17:35:54 +0000
ROA not before:           Sun 31 May 2026 17:35:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150606
IP address blocks:        103.61.242.0/23 maxlen: 24
                          2001:df3:b6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59755 (0xe96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:35:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c717a-faa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:30:c1:59:ce:aa:80:fe:3d:96:d2:39:f3:
                    86:d9:ed:52:5c:34:b9:b5:26:d8:c8:79:94:22:de:
                    a8:61:eb:2f:ec:cb:30:b7:74:65:36:fa:7a:1e:05:
                    7f:d5:42:4b:46:5e:5c:2e:55:69:a3:c1:e5:47:ba:
                    76:d6:5d:50:66:48:e3:8c:03:6e:87:19:39:ad:ea:
                    18:1a:0b:64:d3:e7:db:a3:86:f5:39:b7:92:aa:02:
                    d3:ff:de:ff:26:d4:fe:6a:2a:f3:d9:c8:b5:92:c8:
                    c2:1c:1c:38:74:6e:bc:ca:8e:67:60:45:a3:73:2d:
                    95:0d:88:7e:c6:db:04:6e:3a:bb:96:3f:09:fd:50:
                    f1:ae:02:4a:dd:dd:a2:04:b4:40:9b:2b:04:52:d5:
                    fa:1f:18:54:6c:23:bd:36:bc:90:54:1f:1a:e1:13:
                    5c:35:c7:d5:e3:87:8a:ab:0a:5c:52:b5:57:30:c6:
                    5b:fc:fa:69:bb:ad:bc:ef:10:1e:f3:eb:48:79:97:
                    4a:d9:d0:41:a4:cc:a4:68:e3:47:11:92:22:3c:8c:
                    06:59:2b:d9:48:42:18:9d:b7:cd:fc:12:0a:b2:62:
                    bd:5c:bb:d1:21:18:54:55:ac:09:a0:18:68:fd:76:
                    c2:d4:dd:fa:f4:73:3a:5c:59:70:66:6f:7b:1b:6e:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:9E:48:56:02:79:84:83:E1:14:94:9A:6A:77:AD:91:85:A1:96
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BCA4A640D8111F1B51EF542243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.242.0/23
                IPv6:
                  2001:df3:b6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:38:02:2a:0c:01:9b:2b:a0:31:55:40:ca:87:27:85:37:
         3c:27:2c:47:76:de:57:b0:2b:b6:2e:e9:5b:02:5c:c8:ca:74:
         91:5b:1a:7b:8e:5b:8a:b0:87:ec:66:d0:ea:7c:0e:47:2b:4d:
         fc:74:12:d8:00:d1:1d:03:40:15:c8:b3:da:5b:db:a0:c4:b5:
         71:cd:68:62:97:7c:f8:3b:7e:99:f4:f0:9d:f2:a5:ce:d7:42:
         02:c2:b6:b3:60:16:5e:5f:f4:66:b6:9b:a6:92:1f:93:01:5e:
         f6:c4:94:af:34:11:75:10:81:45:ac:64:b9:b2:50:59:42:8f:
         af:08:e3:05:69:ac:12:03:d0:6a:8e:27:93:33:1f:ac:b1:60:
         87:e1:1f:62:33:14:25:c2:9b:b7:4b:c9:10:ae:64:af:bb:2e:
         48:0a:e8:f2:da:55:13:07:36:a9:54:ed:02:d8:33:d4:5c:bb:
         76:ea:0a:05:8c:dd:89:b7:be:9d:90:51:fe:44:f1:0e:99:a7:
         d1:95:62:99:26:5f:a8:86:07:5c:d3:5f:9e:48:83:84:a2:27:
         c1:d1:78:5b:94:0c:c2:54:30:8a:d3:7f:b1:41:da:0d:6b:64:
         96:71:11:74:b4:3a:73:c0:64:38:7e:4d:a6:f5:32:f7:5f:ec:
         67:1d:05:0a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOlrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzU1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxN2EtZmFhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALfGMMFZzqqA/j2W0jnzhtntUlw0ubUm2Mh5lCLeqGHrL+zLMLd0ZTb6eh4F
f9VCS0ZeXC5VaaPB5Ue6dtZdUGZI44wDbocZOa3qGBoLZNPn26OG9Tm3kqoC0//e
/ybU/moq89nItZLIwhwcOHRuvMqOZ2BFo3MtlQ2IfsbbBG46u5Y/Cf1Q8a4CSt3d
ogS0QJsrBFLV+h8YVGwjvTa8kFQfGuETXDXH1eOHiqsKXFK1VzDGW/z6abutvO8Q
HvPrSHmXStnQQaTMpGjjRxGSIjyMBlkr2UhCGJ23zfwSCrJivVy70SEYVFWsCaAY
aP12wtTd+vRzOlxZcGZvextuUXECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRvp55I
VgJ5hIPhFJSaanetkYWhljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCQ0E0QTY0
MEQ4MTExRjFCNTFFRjU0MjI0M0Q4QzY3LnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWc98jAPBAIAAjAJAwcAIAEN87bAMA0GCSqGSIb3DQEBCwUAA4IB
AQAGHzgCKgwBmyugMVVAyocnhTc8JyxHdt5XsCu2LulbAlzIynSRWxp7jluKsIfs
ZtDqfA5HK038dBLYANEdA0AVyLPaW9ugxLVxzWhil3z4O36Z9PCd8qXO10ICwraz
YBZeX/Rmtpumkh+TAV72xJSvNBF1EIFFrGS5slBZQo+vCOMFaawSA9BqjieTMx+s
sWCH4R9iMxQlwpu3S8kQrmSvuy5ICujy2lUTBzapVO0C2DPUXLt26goFjN2Jt76d
kFH+RPEOmafRlWKZJl+ohgdc01+eSIOEoifB0XhblAzCVDCK03+xQdoNa2SWcRF0
tDpzwGQ4fk2m9TL3X+xnHQUK
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:20 2026 by rpki-client