Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1C0A46BEAF11EBB679183CC4F9AE02.roa
File:                     9C1C0A46BEAF11EBB679183CC4F9AE02.roa (raw, json)
Hash identifier:          oIdLOXIyAAIq5hSi6ah3c7ispT/fG1PMFhOe4t+qHQ4=
Subject key identifier:   99:5E:92:19:1B:8C:51:5E:DB:F1:EB:A0:B3:CA:4A:E5:8D:27:CA:AD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E546
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1C0A46BEAF11EBB679183CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:00:41 +0000
ROA not before:           Sun 31 May 2026 17:00:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137169
IP address blocks:        103.112.8.0/24 maxlen: 24
                          103.112.9.0/24 maxlen: 24
                          103.112.10.0/24 maxlen: 24
                          103.112.11.0/24 maxlen: 24
                          2407:6fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58694 (0xe546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:00:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6939-3fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:82:c0:7b:50:f6:2e:2f:e8:4a:98:8b:4f:
                    e5:93:03:10:ab:33:98:d4:41:e1:f4:f4:f3:84:6d:
                    45:10:e5:51:05:4c:38:38:26:39:95:cb:97:eb:29:
                    d8:65:47:bc:28:0b:82:ed:94:e4:57:a0:96:b1:da:
                    d8:41:97:ed:34:16:10:87:e2:51:08:25:1c:c5:70:
                    e8:92:2a:be:c3:c7:74:1b:4b:fd:a8:62:7c:30:37:
                    c1:d8:d2:c1:01:44:59:07:32:85:2b:68:85:84:0c:
                    83:46:17:cf:c8:96:39:2f:c0:d6:5f:5d:ce:69:ed:
                    48:8c:95:63:be:37:d1:d1:fa:26:70:c6:36:03:53:
                    7a:f9:ce:bd:84:2d:93:8a:1f:8d:6c:b3:a1:05:5e:
                    55:c2:d6:26:75:d6:66:2d:1d:11:69:8b:b4:5a:72:
                    21:c8:1b:0a:a1:9d:83:06:a6:86:62:ff:e4:48:f1:
                    99:5d:7a:4e:6b:f7:27:2e:8b:57:b3:6f:d0:9b:7e:
                    82:04:8e:eb:df:9b:7c:07:bb:43:98:ed:a5:2f:9d:
                    07:4e:09:28:06:f2:27:23:f3:8e:c9:3e:ab:9f:50:
                    28:2e:f4:43:b5:dc:81:2c:ef:d1:b5:5e:80:80:62:
                    98:db:f4:a2:6b:e5:c7:1b:df:9f:db:fc:d4:bb:9d:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:92:19:1B:8C:51:5E:DB:F1:EB:A0:B3:CA:4A:E5:8D:27:CA:AD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C1C0A46BEAF11EBB679183CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.8.0/22
                IPv6:
                  2407:6fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:33:7a:0e:3e:33:68:f4:d5:10:91:de:20:1a:ab:2f:44:ff:
         53:78:77:7a:cb:f2:3c:0c:6f:c4:53:86:c7:e7:0d:78:83:cd:
         ce:7f:29:9a:fe:5a:66:21:37:e6:ef:44:66:60:40:0a:b6:86:
         82:af:93:ae:27:94:8a:25:e8:8d:ad:49:17:93:94:0e:60:33:
         72:53:c0:ff:53:c8:7e:0d:16:18:3c:dc:fb:6a:be:76:f5:74:
         86:55:fa:2e:3a:b6:f6:cf:70:2a:3e:68:6c:18:3d:00:c3:5f:
         ae:e1:6d:fe:08:e2:df:1c:b1:8a:40:02:24:9b:78:3f:5a:c4:
         a1:62:3a:3f:6e:74:40:3f:9b:c8:8a:82:0a:bf:f3:6b:de:38:
         36:2d:d0:dc:53:3a:0e:56:19:d5:51:4c:47:b5:3e:59:cc:c3:
         82:1c:d6:38:53:8b:69:cc:cc:97:d0:41:ec:33:a5:bd:49:06:
         10:37:61:0e:02:37:b7:82:6a:60:80:48:55:be:1a:81:02:2f:
         4b:ce:5b:1b:eb:34:7c:87:28:b7:a4:d0:76:60:2c:15:e9:3d:
         16:84:43:6d:dc:18:27:60:ea:10:f4:9f:1c:3f:ae:e1:62:b5:
         ae:0f:5d:c9:f7:5f:38:cc:5f:b8:af:d4:5c:c8:4c:d3:56:13:
         a7:46:9d:f8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOVGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDA0MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY5MzktM2ZmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK6ngsB7UPYuL+hKmItP5ZMDEKszmNRB4fT084RtRRDlUQVMODgmOZXLl+sp
2GVHvCgLgu2U5FeglrHa2EGX7TQWEIfiUQglHMVw6JIqvsPHdBtL/ahifDA3wdjS
wQFEWQcyhStohYQMg0YXz8iWOS/A1l9dzmntSIyVY7430dH6JnDGNgNTevnOvYQt
k4ofjWyzoQVeVcLWJnXWZi0dEWmLtFpyIcgbCqGdgwamhmL/5EjxmV16Tmv3Jy6L
V7Nv0Jt+ggSO69+bfAe7Q5jtpS+dB04JKAbyJyPzjsk+q59QKC70Q7XcgSzv0bVe
gIBimNv0omvlxxvfn9v81Lud3OUCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSZXpIZ
G4xRXtvx66CzykrljSfKrTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlDMUMwQTQ2
QkVBRjExRUJCNjc5MTgzQ0M0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAmdwCDANBAIAAjAHAwUAJAdvwDANBgkqhkiG9w0BAQsFAAOCAQEA
MTN6Dj4zaPTVEJHeIBqrL0T/U3h3esvyPAxvxFOGx+cNeIPNzn8pmv5aZiE35u9E
ZmBACraGgq+TrieUiiXoja1JF5OUDmAzclPA/1PIfg0WGDzc+2q+dvV0hlX6Ljq2
9s9wKj5obBg9AMNfruFt/gji3xyxikACJJt4P1rEoWI6P250QD+byIqCCr/za944
Ni3Q3FM6DlYZ1VFMR7U+WczDghzWOFOLaczMl9BB7DOlvUkGEDdhDgI3t4JqYIBI
Vb4agQIvS85bG+s0fIcot6TQdmAsFek9FoRDbdwYJ2DqEPSfHD+u4WK1rg9dyfdf
OMxfuK/UXMhM01YTp0ad+A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:48 2026 by rpki-client