Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa
File:                     A549057E0D3911EB8AD0FD2AC4F9AE02.roa (raw, json)
Hash identifier:          Jkm8dYmg0+zdmOZWA1qLHzNzNpr2G73hP5aCgElDdaU=
Subject key identifier:   96:74:DE:23:63:A1:42:25:7B:50:38:72:5B:80:A5:2C:C7:E9:67:D2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F001
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:47:29 +0000
ROA not before:           Mon 06 Jul 2026 16:47:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135693
IP address blocks:        103.74.244.0/22 maxlen: 22
                          103.74.244.0/24 maxlen: 24
                          103.74.245.0/24 maxlen: 24
                          103.74.246.0/24 maxlen: 24
                          103.74.247.0/24 maxlen: 24
                          103.141.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61441 (0xf001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:47:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdc21-cdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:f7:5a:cc:3b:06:55:2a:51:08:2c:17:3d:
                    1d:4a:d8:cf:7e:25:70:50:6f:f7:53:98:5a:90:f0:
                    46:98:04:66:cc:7a:b7:28:90:fc:8a:60:90:f7:9f:
                    4a:be:0d:71:8d:9f:cc:96:87:34:2f:95:ff:29:67:
                    34:55:d0:d3:60:7f:77:20:94:02:d0:8a:0f:55:c4:
                    f9:d3:59:d3:6e:b5:d8:72:1c:35:5b:36:51:95:84:
                    dc:a5:19:c1:ec:c3:4b:7d:69:4c:7a:ca:f3:16:a0:
                    09:b2:42:d1:02:5b:ea:37:99:6c:ab:91:6c:f9:9e:
                    9d:d9:c9:82:b9:35:0a:c1:54:73:1b:3d:8f:dd:8a:
                    89:c1:bd:6b:30:6a:76:31:70:53:19:31:17:88:e4:
                    e2:34:f3:df:14:5b:d8:e1:d4:1f:5d:a5:78:0e:ba:
                    ec:73:0b:13:c2:6c:60:de:c2:64:ee:d6:5c:a1:57:
                    30:2a:87:75:04:d0:48:7d:24:4e:d9:fc:86:5c:70:
                    9f:e1:0b:e9:1b:bc:6c:b8:72:c7:24:89:15:63:4f:
                    46:16:ca:78:33:22:0e:4b:3f:2d:e5:14:0d:74:c7:
                    fc:72:bb:1a:cf:97:10:00:46:ab:53:e1:19:07:7f:
                    fd:72:69:98:46:4a:5f:41:a7:bf:cd:f2:e3:f1:5c:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:DE:23:63:A1:42:25:7B:50:38:72:5B:80:A5:2C:C7:E9:67:D2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A549057E0D3911EB8AD0FD2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.244.0/22
                  103.141.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:88:a3:1e:a9:c1:4e:88:12:0b:38:a9:8c:11:99:7d:e0:9e:
         81:1d:1f:0d:d4:ce:35:7a:5d:85:81:e6:e3:ef:5c:34:33:af:
         4a:8e:10:e0:aa:53:ab:48:1c:c7:38:af:8b:c1:00:46:ab:7f:
         e4:f9:e0:09:ac:5c:90:22:dd:2d:b8:6b:dc:fa:b4:fb:f9:f9:
         69:fc:94:b5:69:6c:48:e6:2f:8d:b8:f1:45:e5:c6:0c:ae:fa:
         b1:e0:f6:d6:76:ba:01:f0:b2:a6:58:12:be:22:e5:7b:61:96:
         01:cb:98:ed:f8:88:83:b7:ee:21:13:72:2b:87:d8:d8:46:82:
         f6:dd:ca:69:e6:b1:27:84:3b:3e:f3:ba:e8:3d:2e:45:72:c4:
         8e:dc:6a:d1:f7:f2:8b:25:50:7b:53:55:d9:aa:4b:93:e9:6d:
         6e:1c:3f:6b:b0:6d:41:0f:37:2d:8a:ea:ab:32:52:31:cd:d7:
         eb:f8:b8:35:9e:ea:b8:b0:c2:06:0d:b5:1a:7e:1f:54:e6:3c:
         2c:29:4d:6c:2c:08:95:b0:bb:1a:ff:f6:21:51:b1:a7:85:e0:
         c8:91:da:28:f1:57:df:ab:3d:53:40:4f:ad:5f:04:08:d9:24:
         48:b4:78:e5:ad:99:f6:f8:0a:2b:7d:41:d5:b7:39:c4:66:69:
         cb:6b:81:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPABMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDcyOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRjMjEtY2RmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKlR91rMOwZVKlEILBc9HUrYz34lcFBv91OYWpDwRpgEZsx6tyiQ/IpgkPef
Sr4NcY2fzJaHNC+V/ylnNFXQ02B/dyCUAtCKD1XE+dNZ02612HIcNVs2UZWE3KUZ
wezDS31pTHrK8xagCbJC0QJb6jeZbKuRbPmendnJgrk1CsFUcxs9j92KicG9azBq
djFwUxkxF4jk4jTz3xRb2OHUH12leA667HMLE8JsYN7CZO7WXKFXMCqHdQTQSH0k
Ttn8hlxwn+EL6Ru8bLhyxySJFWNPRhbKeDMiDks/LeUUDXTH/HK7Gs+XEABGq1Ph
GQd//XJpmEZKX0Gnv83y4/FcbOMCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSWdN4j
Y6FCJXtQOHJbgKUsx+ln0jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1NDkwNTdF
MEQzOTExRUI4QUQwRkQyQUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAmdK9AMEAGeNYzANBgkqhkiG9w0BAQsFAAOCAQEAV4ijHqnBTogS
CzipjBGZfeCegR0fDdTONXpdhYHm4+9cNDOvSo4Q4KpTq0gcxzivi8EARqt/5Png
CaxckCLdLbhr3Pq0+/n5afyUtWlsSOYvjbjxReXGDK76seD21na6AfCyplgSviLl
e2GWAcuY7fiIg7fuIRNyK4fY2EaC9t3KaeaxJ4Q7PvO66D0uRXLEjtxq0ffyiyVQ
e1NV2apLk+ltbhw/a7BtQQ83LYrqqzJSMc3X6/i4NZ7quLDCBg21Gn4fVOY8LClN
bCwIlbC7Gv/2IVGxp4XgyJHaKPFX36s9U0BPrV8ECNkkSLR45a2Z9vgKK31B1bc5
xGZpy2uBKA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:41 2026 by rpki-client