Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa
File:                     9F58F84A6B9E11EB87785D16C4F9AE02.roa (raw, json)
Hash identifier:          7EtmNS4IAE/byxxtQXIDk1cTw7HG3kNNp8lKF+9KmCo=
Subject key identifier:   E6:25:8A:48:0B:C1:3F:53:65:DF:22:55:6E:8E:1E:68:02:8A:78:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFB4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:45:02 +0000
ROA not before:           Mon 06 Jul 2026 16:45:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135179
IP address blocks:        103.119.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61364 (0xefb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:45:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb8e-3a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:b6:01:79:14:c0:ea:2e:24:35:c4:58:d0:
                    ba:25:23:28:99:79:fb:1e:5c:c0:3b:ec:0f:f6:69:
                    6d:c9:bd:c8:d1:f3:23:41:75:56:8d:57:99:de:dc:
                    51:6f:79:3b:01:ac:65:82:9e:69:cd:66:cd:e0:ae:
                    0e:10:33:88:c6:8f:43:87:1b:70:10:8b:b5:c3:f1:
                    08:37:e8:9f:0c:04:3b:d7:99:4b:f8:6d:34:c7:25:
                    79:44:3e:3a:c3:31:96:c7:07:0d:87:72:d3:03:a4:
                    35:5d:86:e0:ee:60:a4:47:f9:9d:5c:8f:3a:83:60:
                    64:34:d4:46:d2:ea:0e:42:08:25:78:97:b2:3b:9f:
                    86:e8:6b:82:14:c3:3b:02:eb:c8:bb:7e:0b:71:e9:
                    b6:cf:e5:62:2b:8b:cc:e1:ba:a2:d2:fc:b7:05:c5:
                    da:cf:c3:66:99:6f:74:96:cd:b2:0c:0d:1f:e8:9b:
                    56:6e:fc:d3:05:42:17:ac:bd:d5:7d:69:76:4b:4e:
                    0b:72:c7:fb:df:13:59:1c:f6:c8:d4:d6:76:9b:9a:
                    9a:2d:0a:86:23:43:4b:b0:76:cc:d4:c5:88:05:b3:
                    6f:75:f3:39:b0:19:58:c1:c0:14:57:43:c8:3a:22:
                    f7:fc:0a:c3:36:45:59:3d:05:09:7b:ae:2d:8e:4f:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:8A:48:0B:C1:3F:53:65:DF:22:55:6E:8E:1E:68:02:8A:78:EB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F58F84A6B9E11EB87785D16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:3d:d8:45:b2:9e:94:f2:b7:8c:86:f8:52:65:e7:ea:a4:
         0f:5a:12:50:0c:8f:7e:fe:7b:9d:54:ba:1f:0d:ca:e2:b6:ff:
         f0:87:f1:b2:a1:4c:8d:ed:20:55:b7:79:d5:e9:72:7e:32:a8:
         5a:12:ab:b2:b0:09:65:87:c4:56:a7:b3:b3:00:78:4a:e3:4c:
         89:9b:0b:80:09:b7:0e:bc:91:e8:90:29:fd:9c:48:ae:b1:ec:
         3a:a3:96:50:f6:51:77:43:14:87:7a:9e:3c:ea:c9:40:98:df:
         7f:85:85:42:4f:88:1f:1c:7d:b4:93:45:4b:27:bf:93:df:a4:
         18:a3:93:f9:41:b0:a6:17:6a:dc:95:8a:ff:eb:bd:c4:95:ce:
         41:f5:85:22:50:37:70:ed:2b:82:34:b9:44:b9:01:b6:b0:c0:
         cc:4c:0d:1d:90:60:5f:56:e0:22:9c:ba:14:d6:c3:67:bb:da:
         3f:e0:4f:e7:23:a0:5c:54:c3:94:a5:c9:ed:c6:00:24:a5:f7:
         8e:7a:6e:bd:40:f7:e1:69:87:b2:b9:ef:b2:a2:be:b2:29:f3:
         94:1f:95:5a:81:96:4f:82:aa:dd:bc:d8:d6:09:ff:7a:ad:09:
         00:04:01:e6:ee:2c:36:28:32:0d:d3:b8:a0:36:38:46:4e:3d:
         15:6a:a6:02
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO+0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDUwMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiOGUtM2E1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+OtgF5FMDqLiQ1xFjQuiUjKJl5+x5cwDvsD/Zpbcm9yNHzI0F1Vo1Xmd7c
UW95OwGsZYKeac1mzeCuDhAziMaPQ4cbcBCLtcPxCDfonwwEO9eZS/htNMcleUQ+
OsMxlscHDYdy0wOkNV2G4O5gpEf5nVyPOoNgZDTURtLqDkIIJXiXsjufhuhrghTD
OwLryLt+C3Hpts/lYiuLzOG6otL8twXF2s/DZplvdJbNsgwNH+ibVm780wVCF6y9
1X1pdktOC3LH+98TWRz2yNTWdpuami0KhiNDS7B2zNTFiAWzb3XzObAZWMHAFFdD
yDoi9/wKwzZFWT0FCXuuLY5PUy0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTmJYpI
C8E/U2XfIlVujh5oAop46zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGNThGODRB
NkI5RTExRUI4Nzc4NUQxNkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd33zANBgkqhkiG9w0BAQsFAAOCAQEAOG492EWynpTyt4yG+FJl
5+qkD1oSUAyPfv57nVS6Hw3K4rb/8IfxsqFMje0gVbd51elyfjKoWhKrsrAJZYfE
VqezswB4SuNMiZsLgAm3DryR6JAp/ZxIrrHsOqOWUPZRd0MUh3qePOrJQJjff4WF
Qk+IHxx9tJNFSye/k9+kGKOT+UGwphdq3JWK/+u9xJXOQfWFIlA3cO0rgjS5RLkB
trDAzEwNHZBgX1bgIpy6FNbDZ7vaP+BP5yOgXFTDlKXJ7cYAJKX3jnpuvUD34WmH
srnvsqK+sinzlB+VWoGWT4Kq3bzY1gn/eq0JAAQB5u4sNigyDdO4oDY4Rk49FWqm
Ag==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:35 2026 by rpki-client