Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4E9C6A0F9A11EBBF58BB60C4F9AE02.roa
File:                     AF4E9C6A0F9A11EBBF58BB60C4F9AE02.roa (raw, json)
Hash identifier:          LhuMUqCUDwZH7f0Fgll+P3hGxAI100BVb3K9cONgtiA=
Subject key identifier:   29:58:21:74:A5:C8:69:F0:BD:9E:62:87:EC:F2:47:4F:76:07:D6:43
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E266
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4E9C6A0F9A11EBBF58BB60C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:36:53 +0000
ROA not before:           Sun 31 May 2026 16:36:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133288
IP address blocks:        103.228.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57958 (0xe266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:36:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c63a5-46c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:83:b1:55:59:1b:6b:2b:d5:20:0a:1b:c3:62:
                    d0:b3:ef:a0:a3:49:c3:ac:61:a9:ad:7b:77:e8:b5:
                    6c:3e:9b:25:d5:df:44:0a:87:3d:6e:f1:92:22:29:
                    4c:21:b2:79:d3:92:08:94:39:ca:4b:a6:02:a2:ca:
                    b2:69:da:8c:50:fb:b2:c2:34:b4:c5:93:f9:1d:d5:
                    25:82:76:cc:da:8b:e6:ad:00:d2:4c:45:ce:79:8f:
                    10:63:f0:fe:be:6c:c0:01:95:be:57:fb:15:18:0e:
                    6a:42:78:53:b0:ed:2c:b5:4e:a1:80:f0:83:58:fd:
                    45:d4:83:b4:11:a1:7f:27:ad:57:f4:cf:17:5a:b3:
                    b4:ad:10:9b:bc:2f:41:cf:5f:1e:40:1d:7f:79:1f:
                    5a:9b:3a:a9:24:74:44:0c:05:41:4f:6b:c0:77:ff:
                    6c:22:7b:00:de:0b:28:0e:c3:2c:28:9b:ba:a6:86:
                    c3:98:3a:f5:92:90:fd:1f:83:ae:61:de:15:91:b0:
                    ee:db:e2:b3:29:05:91:78:d6:05:9e:b2:0c:aa:12:
                    60:d8:a3:55:fa:3c:4d:62:0e:64:b2:4b:85:82:c9:
                    2c:2a:5f:01:69:f8:d1:f4:a3:45:47:90:ba:ab:cd:
                    e5:05:9b:74:51:89:4f:0f:a0:22:3a:fb:d7:31:8a:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:21:74:A5:C8:69:F0:BD:9E:62:87:EC:F2:47:4F:76:07:D6:43
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4E9C6A0F9A11EBBF58BB60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:68:ab:41:c0:83:4c:a1:1c:42:e2:5f:e1:e6:48:cd:b7:6f:
         a9:bf:48:91:25:86:ce:45:17:e3:26:12:66:68:c1:84:a3:db:
         0b:dc:ca:fe:f1:80:80:72:15:83:9d:48:8f:30:4f:a4:a7:fd:
         41:74:ae:63:8a:bc:85:a2:28:43:42:18:31:9f:ed:aa:bb:d4:
         22:01:63:0e:61:0a:4a:9d:10:82:de:79:1b:9f:b0:c1:9b:57:
         ee:39:97:6e:99:b9:19:9e:63:3e:cc:42:bd:ec:a5:0b:95:2b:
         2f:2a:7a:88:d5:90:ae:70:96:3f:bf:70:7c:31:f9:cd:9e:e3:
         ac:95:d4:c4:7c:24:d8:90:aa:fa:03:16:9d:5e:fb:42:27:3b:
         d1:7c:5a:b4:1f:da:42:15:a9:58:4c:17:53:70:c8:1d:c3:9f:
         66:2f:ac:81:0c:33:c7:9f:ae:c8:94:31:99:20:99:2a:e5:0e:
         58:3e:f7:9e:e0:de:97:84:77:82:72:a6:fb:43:d6:20:82:b8:
         0d:17:57:d4:a8:4c:da:23:f7:12:92:6f:c4:e7:4b:6a:93:c3:
         ce:30:86:34:aa:aa:6c:02:cb:e6:e2:f5:98:3a:dd:e7:11:8d:
         34:8a:82:40:86:08:6d:32:a4:c2:d4:62:15:7e:5f:78:40:e8:
         3d:ee:42:5e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOJmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzY1M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzYTUtNDZjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPKDsVVZG2sr1SAKG8Ni0LPvoKNJw6xhqa17d+i1bD6bJdXfRAqHPW7xkiIp
TCGyedOSCJQ5ykumAqLKsmnajFD7ssI0tMWT+R3VJYJ2zNqL5q0A0kxFznmPEGPw
/r5swAGVvlf7FRgOakJ4U7DtLLVOoYDwg1j9RdSDtBGhfyetV/TPF1qztK0Qm7wv
Qc9fHkAdf3kfWps6qSR0RAwFQU9rwHf/bCJ7AN4LKA7DLCibuqaGw5g69ZKQ/R+D
rmHeFZGw7tvisykFkXjWBZ6yDKoSYNijVfo8TWIOZLJLhYLJLCpfAWn40fSjRUeQ
uqvN5QWbdFGJTw+gIjr71zGKzzcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQpWCF0
pchp8L2eYofs8kdPdgfWQzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FGNEU5QzZB
MEY5QTExRUJCRjU4QkI2MEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfkMjANBgkqhkiG9w0BAQsFAAOCAQEALmirQcCDTKEcQuJf4eZI
zbdvqb9IkSWGzkUX4yYSZmjBhKPbC9zK/vGAgHIVg51IjzBPpKf9QXSuY4q8haIo
Q0IYMZ/tqrvUIgFjDmEKSp0Qgt55G5+wwZtX7jmXbpm5GZ5jPsxCveylC5UrLyp6
iNWQrnCWP79wfDH5zZ7jrJXUxHwk2JCq+gMWnV77Qic70XxatB/aQhWpWEwXU3DI
HcOfZi+sgQwzx5+uyJQxmSCZKuUOWD73nuDel4R3gnKm+0PWIIK4DRdX1KhM2iP3
EpJvxOdLapPDzjCGNKqqbALL5uL1mDrd5xGNNIqCQIYIbTKkwtRiFX5feEDoPe5C
Xg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:10 2026 by rpki-client