Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6D13AF029E911ED9139564FC4F9AE02.roa
File:                     A6D13AF029E911ED9139564FC4F9AE02.roa (raw, json)
Hash identifier:          CNWj2qtAQxEz8Wb42EaKwmIOjAB008CK60Xv7ccnlAA=
Subject key identifier:   51:8F:36:69:C7:35:3E:43:B6:2B:86:D9:2C:1E:CB:BC:BD:97:EA:4E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E55B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6D13AF029E911ED9139564FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:01:24 +0000
ROA not before:           Sun 31 May 2026 17:01:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137595
IP address blocks:        103.119.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58715 (0xe55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:01:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6963-e55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:92:49:fd:b1:a6:b5:af:da:b5:17:2e:b5:
                    e8:10:d7:48:b5:7e:06:33:12:0b:83:26:db:a9:d1:
                    32:ac:fb:77:28:fd:5a:15:29:55:98:8c:33:1c:5c:
                    df:4c:2b:45:06:8b:34:ed:d3:b0:48:8a:c9:39:51:
                    8e:bd:30:5b:8e:a9:6a:78:f3:25:a4:76:2e:77:d2:
                    36:84:60:10:18:40:5a:f4:79:68:53:e2:bb:6e:a4:
                    98:68:51:a5:b1:ef:0a:01:cb:2f:11:d5:62:89:c4:
                    ec:33:e5:4e:23:e3:35:8f:3b:83:e7:75:8a:62:1e:
                    d6:e4:fd:84:fb:09:8c:71:1d:5b:57:b6:97:cc:8d:
                    06:64:b1:df:48:40:39:cd:e3:a0:10:62:7f:dd:b6:
                    15:87:18:b0:59:7c:9d:ea:49:12:75:b8:12:5b:7d:
                    87:bf:94:d9:73:89:a4:ce:60:68:4d:b4:42:41:42:
                    7c:29:04:73:97:f4:82:b8:64:5d:2b:ba:57:04:9d:
                    18:4a:bc:9b:02:0f:1d:b2:f9:e9:22:be:dc:86:05:
                    61:e3:9d:c8:cf:af:30:01:48:5f:45:f2:2f:45:6a:
                    3b:63:58:f1:f8:72:9f:9e:5b:9d:95:4e:c4:11:b9:
                    6d:ae:02:8f:82:8a:fd:ad:26:fd:d4:1a:e0:6b:20:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:36:69:C7:35:3E:43:B6:2B:86:D9:2C:1E:CB:BC:BD:97:EA:4E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A6D13AF029E911ED9139564FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:ac:78:60:38:26:31:22:d1:60:06:bf:fb:8c:87:b1:a1:
         86:0c:32:0e:c5:0d:22:dc:09:b3:97:8e:72:35:ec:cf:b7:8f:
         b9:c0:c1:eb:fb:d6:6e:a8:27:b0:2c:6e:15:ad:37:8c:ca:c2:
         93:8b:30:eb:5b:a6:30:d7:65:db:ff:29:28:74:bf:05:14:54:
         da:bb:0b:58:26:cf:17:b3:7e:d5:7a:3c:e9:67:53:79:19:ba:
         69:98:64:cb:0b:f0:73:ef:5d:ee:8f:3e:dd:81:f0:ce:c6:61:
         76:33:90:8f:b9:63:47:09:c6:8e:27:74:67:bb:55:d3:35:ed:
         26:6f:c0:e9:7a:a3:46:1b:10:28:b2:f0:5a:0a:6a:cb:df:69:
         0d:2e:41:81:ea:69:a3:98:d5:a8:25:ca:b6:21:56:75:60:b1:
         83:ee:50:0d:d2:bc:31:aa:59:93:d4:f7:ee:c2:a2:10:14:e6:
         4d:26:c4:4d:f0:21:5c:2f:b8:b9:d7:d6:a7:02:58:13:74:0b:
         ef:6f:16:4a:4b:62:68:d7:c7:75:34:f1:31:11:eb:81:b0:52:
         25:82:cd:5e:8c:ef:33:dd:1a:e8:5f:c6:53:64:01:a6:d3:17:
         e7:6a:a1:6b:c8:ce:07:94:d9:42:37:a4:5b:00:d3:0b:0e:d6:
         5c:13:c8:b1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOVbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDEyNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY5NjMtZTU1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKNvkkn9saa1r9q1Fy616BDXSLV+BjMSC4Mm26nRMqz7dyj9WhUpVZiMMxxc
30wrRQaLNO3TsEiKyTlRjr0wW46panjzJaR2LnfSNoRgEBhAWvR5aFPiu26kmGhR
pbHvCgHLLxHVYonE7DPlTiPjNY87g+d1imIe1uT9hPsJjHEdW1e2l8yNBmSx30hA
Oc3joBBif922FYcYsFl8nepJEnW4Elt9h7+U2XOJpM5gaE20QkFCfCkEc5f0grhk
XSu6VwSdGEq8mwIPHbL56SK+3IYFYeOdyM+vMAFIX0XyL0VqO2NY8fhyn55bnZVO
xBG5ba4Cj4KK/a0m/dQa4GsgJCUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRRjzZp
xzU+Q7YrhtksHsu8vZfqTjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2RDEzQUYw
MjlFOTExRUQ5MTM5NTY0RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmd3eDANBgkqhkiG9w0BAQsFAAOCAQEAAOaseGA4JjEi0WAGv/uM
h7GhhgwyDsUNItwJs5eOcjXsz7ePucDB6/vWbqgnsCxuFa03jMrCk4sw61umMNdl
2/8pKHS/BRRU2rsLWCbPF7N+1Xo86WdTeRm6aZhkywvwc+9d7o8+3YHwzsZhdjOQ
j7ljRwnGjid0Z7tV0zXtJm/A6XqjRhsQKLLwWgpqy99pDS5Bgeppo5jVqCXKtiFW
dWCxg+5QDdK8MapZk9T37sKiEBTmTSbETfAhXC+4udfWpwJYE3QL728WSktiaNfH
dTTxMRHrgbBSJYLNXozvM90a6F/GU2QBptMX52qha8jOB5TZQjekWwDTCw7WXBPI
sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:03 2026 by rpki-client