Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa
File:                     A75C22CCC6F211ED908FCE6FC4F9AE02.roa (raw, json)
Hash identifier:          wKCmIaPKNy7Fq5cNguTwRDSqDAmNoGslln0v/EBkW1E=
Subject key identifier:   28:A6:5F:A5:13:BE:B2:95:D3:F2:5A:8E:C6:FA:9D:8E:93:43:AD:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E939
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:34:16 +0000
ROA not before:           Sun 31 May 2026 17:34:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150090
IP address blocks:        103.174.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59705 (0xe939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:34:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7118-6986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:5e:86:66:60:4a:c4:6b:2f:0c:3a:6b:74:
                    b7:4e:da:7e:8e:09:89:3b:76:2d:a9:5d:68:97:44:
                    2b:3e:9b:6b:1f:b7:5b:4f:02:7b:ba:ac:09:59:1c:
                    3d:19:2f:33:35:9f:63:69:1e:08:58:54:a1:76:49:
                    27:24:23:66:94:a3:a2:1f:0a:53:1c:ca:de:57:b6:
                    0d:b1:48:6f:1d:5e:0e:e6:8b:c9:ce:fc:a1:0f:9d:
                    ba:34:db:09:69:c9:4e:0a:47:ec:ce:c2:8c:e1:f5:
                    8d:34:05:99:87:62:0b:fa:c8:09:a7:4f:5b:f9:88:
                    06:8d:1a:b7:90:91:b2:6f:a6:5b:ba:43:29:b4:81:
                    3a:5e:63:16:97:99:52:26:0a:b2:d2:c3:13:bd:1c:
                    59:b2:79:61:f2:19:fa:d1:81:db:6c:51:66:f1:bf:
                    5b:12:8a:60:d1:df:e4:30:a2:dc:27:10:5d:7b:7d:
                    1f:f0:e4:6f:76:cf:bc:c6:fa:1a:7f:95:c4:ea:c2:
                    96:6c:50:32:a6:ba:1c:3b:ff:e8:60:43:57:b7:58:
                    5c:85:5e:ec:24:33:96:b3:84:a0:2b:c6:43:e1:55:
                    39:60:d8:cc:05:8b:cb:96:5c:9f:d6:22:18:5f:e5:
                    cd:16:36:25:55:4c:99:bd:ba:7e:02:f2:c4:b5:a7:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:5F:A5:13:BE:B2:95:D3:F2:5A:8E:C6:FA:9D:8E:93:43:AD:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:69:5c:d9:c3:78:2b:68:9f:77:bd:16:9b:99:7a:75:f5:
         0c:ab:9c:66:ff:78:be:b0:68:71:22:e2:da:3f:a5:77:19:b0:
         2d:8b:3d:00:33:71:0b:05:39:7d:74:7c:ef:bb:1b:04:12:41:
         06:46:44:bc:57:0f:aa:21:34:7c:6a:e1:3a:f7:ee:d1:68:ff:
         73:4a:6f:d6:b4:21:89:55:0b:6e:af:2c:b7:85:43:2a:79:cc:
         8d:9c:58:c7:2c:e8:29:f0:af:58:08:09:38:97:12:27:b4:1c:
         1e:67:3b:09:2f:0f:5c:48:ce:22:ac:d0:c7:99:03:d0:30:b3:
         49:78:00:8a:68:c3:ae:6a:81:a4:0d:56:1e:76:68:28:a1:e5:
         8b:ab:09:64:cc:30:7a:a6:95:c6:68:ea:f4:82:4a:71:28:74:
         81:32:24:76:0e:24:36:af:7b:d2:17:13:f8:fc:3e:22:ab:b7:
         6e:f2:6a:b3:05:89:79:4e:55:7c:ad:73:13:71:1f:9c:bb:86:
         2a:4d:ee:f5:27:04:28:d8:2d:ca:ed:2e:22:c0:c5:b4:1a:f4:
         86:ed:75:7f:c7:fc:21:55:9e:7e:bc:02:7e:e7:05:38:62:72:
         cf:4e:42:6d:43:e3:8f:bf:38:2f:04:e3:bf:67:f2:65:39:a0:
         3b:b6:34:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOk5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzQxNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxMTgtNjk4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKi0XoZmYErEay8MOmt0t07afo4JiTt2LaldaJdEKz6bax+3W08Ce7qsCVkc
PRkvMzWfY2keCFhUoXZJJyQjZpSjoh8KUxzK3le2DbFIbx1eDuaLyc78oQ+dujTb
CWnJTgpH7M7CjOH1jTQFmYdiC/rICadPW/mIBo0at5CRsm+mW7pDKbSBOl5jFpeZ
UiYKstLDE70cWbJ5YfIZ+tGB22xRZvG/WxKKYNHf5DCi3CcQXXt9H/Dkb3bPvMb6
Gn+VxOrClmxQMqa6HDv/6GBDV7dYXIVe7CQzlrOEoCvGQ+FVOWDYzAWLy5Zcn9Yi
GF/lzRY2JVVMmb26fgLyxLWnKM8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQopl+l
E76yldPyWo7G+p2Ok0OtDDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3NUMyMkND
QzZGMjExRUQ5MDhGQ0U2RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeu9jANBgkqhkiG9w0BAQsFAAOCAQEArUBpXNnDeCton3e9FpuZ
enX1DKucZv94vrBocSLi2j+ldxmwLYs9ADNxCwU5fXR877sbBBJBBkZEvFcPqiE0
fGrhOvfu0Wj/c0pv1rQhiVULbq8st4VDKnnMjZxYxyzoKfCvWAgJOJcSJ7QcHmc7
CS8PXEjOIqzQx5kD0DCzSXgAimjDrmqBpA1WHnZoKKHli6sJZMwweqaVxmjq9IJK
cSh0gTIkdg4kNq970hcT+Pw+Iqu3bvJqswWJeU5VfK1zE3EfnLuGKk3u9ScEKNgt
yu0uIsDFtBr0hu11f8f8IVWefrwCfucFOGJyz05CbUPjj784LwTjv2fyZTmgO7Y0
0A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:44 2026 by rpki-client