Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa
File:                     A6BDE1C6412D11EC948F6B60C4F9AE02.roa (raw, json)
Hash identifier:          xEy+0v9RMLObRjeALIq7hWl0CqHN1GpoEFbkNPm9jCs=
Subject key identifier:   4F:39:75:86:41:57:7A:3A:AA:D9:CA:7A:00:CE:88:95:BA:2E:12:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:20:41 +0000
ROA not before:           Sun 31 May 2026 17:20:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142477
IP address blocks:        103.163.64.0/23 maxlen: 24
                          103.171.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59304 (0xe7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:20:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6de8-564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:7e:e4:7e:16:57:74:54:d8:52:20:7d:96:
                    3d:55:3b:ef:47:14:26:2c:f8:ce:78:52:72:e5:f1:
                    92:b4:b7:22:f9:88:46:aa:4d:cc:12:bd:dd:4a:e4:
                    61:19:af:08:58:ee:c7:9b:5d:6d:37:b9:c5:d5:83:
                    0d:40:eb:56:57:10:20:54:78:35:cc:c7:17:e3:f7:
                    a4:fa:53:5c:29:d8:a8:39:7b:a9:7b:8b:c8:76:65:
                    f4:cf:6c:92:4b:35:ac:da:bd:bf:1c:4d:b1:52:4c:
                    ec:76:48:2c:01:ca:96:33:fc:4d:b0:fa:bd:2a:81:
                    8e:92:a8:11:b3:cb:9c:ef:90:3e:62:d8:c0:2e:cf:
                    dd:46:73:d6:61:f4:e0:8e:0f:19:09:e1:e5:af:e4:
                    9e:78:e0:98:e0:a5:9a:b1:b7:c3:21:c2:88:44:51:
                    18:8b:4f:ed:2e:3a:9b:5f:56:9e:dc:ac:3b:10:07:
                    24:7b:fb:56:d4:b1:f6:68:37:40:d6:f4:9f:f4:1a:
                    ed:e3:d7:b7:98:72:05:22:05:dc:68:a7:dc:5e:8a:
                    2b:fa:4f:49:07:88:e5:eb:2f:e2:02:c7:3b:db:a5:
                    37:9f:94:fe:7b:c0:c8:82:f2:b6:32:37:ea:90:16:
                    57:cb:e1:44:e3:31:80:9b:2d:21:f5:2a:04:b2:8b:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:75:86:41:57:7A:3A:AA:D9:CA:7A:00:CE:88:95:BA:2E:12:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6BDE1C6412D11EC948F6B60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.64.0/23
                  103.171.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:89:6f:ed:b2:9a:69:f1:f0:b1:b4:9d:5a:26:bb:b8:97:
         b9:8a:1f:a5:53:dc:d1:07:e2:96:ac:3e:96:57:c8:fb:39:6a:
         0f:a2:79:ee:37:98:93:5d:02:c8:77:60:42:35:22:b6:bb:1e:
         ea:7c:4e:3d:7b:6d:43:17:0c:ce:40:b3:72:35:a9:35:e5:e2:
         e4:e2:bb:91:5e:b0:f5:34:b9:bf:ad:be:a8:4a:62:f0:93:b7:
         37:d5:a9:90:41:d3:d8:ae:57:be:fb:e9:14:9f:96:1b:21:f9:
         32:7c:f6:83:68:a1:77:36:12:56:fa:1c:c8:6a:29:02:d1:9e:
         7d:ca:e1:0a:ce:d2:d1:40:96:9d:64:18:7f:f7:7c:74:af:c2:
         dd:b4:99:21:ac:c6:b6:2f:50:0e:50:6d:53:f3:18:bc:d5:d2:
         f2:b7:e8:ff:71:16:22:1c:e3:1c:9f:fc:34:ab:40:50:67:80:
         b4:2f:19:46:45:b5:b8:95:42:fd:e7:75:48:6f:a2:4f:71:81:
         ba:92:83:38:f9:18:12:1a:80:95:aa:58:b3:51:4f:96:4e:c4:
         c6:47:0f:9d:65:f5:2a:c9:54:26:c6:a4:05:8e:a4:64:e3:58:
         34:e4:63:96:51:bc:d9:d6:5f:06:a9:de:28:b2:b5:7f:1e:4a:
         4d:69:a1:d0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAOeoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjA0MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZkZTgtNTY0YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIRafuR+Fld0VNhSIH2WPVU770cUJiz4znhScuXxkrS3IvmIRqpNzBK93Urk
YRmvCFjux5tdbTe5xdWDDUDrVlcQIFR4NczHF+P3pPpTXCnYqDl7qXuLyHZl9M9s
kks1rNq9vxxNsVJM7HZILAHKljP8TbD6vSqBjpKoEbPLnO+QPmLYwC7P3UZz1mH0
4I4PGQnh5a/knnjgmOClmrG3wyHCiERRGItP7S46m19WntysOxAHJHv7VtSx9mg3
QNb0n/Qa7ePXt5hyBSIF3Gin3F6KK/pPSQeI5esv4gLHO9ulN5+U/nvAyILytjI3
6pAWV8vhROMxgJstIfUqBLKLC6sCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRPOXWG
QVd6OqrZynoAzoiVui4S+TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2QkRFMUM2
NDEyRDExRUM5NDhGNkI2MEM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAWejQAMEAWerYjANBgkqhkiG9w0BAQsFAAOCAQEAAKSJb+2ymmnx
8LG0nVomu7iXuYofpVPc0Qfilqw+llfI+zlqD6J57jeYk10CyHdgQjUitrse6nxO
PXttQxcMzkCzcjWpNeXi5OK7kV6w9TS5v62+qEpi8JO3N9WpkEHT2K5XvvvpFJ+W
GyH5Mnz2g2ihdzYSVvocyGopAtGefcrhCs7S0UCWnWQYf/d8dK/C3bSZIazGti9Q
DlBtU/MYvNXS8rfo/3EWIhzjHJ/8NKtAUGeAtC8ZRkW1uJVC/ed1SG+iT3GBupKD
OPkYEhqAlapYs1FPlk7ExkcPnWX1KslUJsakBY6kZONYNORjllG82dZfBqneKLK1
fx5KTWmh0A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:46 2026 by rpki-client