Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B05D557C4F5B11F1BA4FF742C1833773.roa
File:                     B05D557C4F5B11F1BA4FF742C1833773.roa (raw, json)
Hash identifier:          dVJmbwBE6jI4NL9rkAM+Ty9cHX6pvgUqiQnkXU2Bq+I=
Subject key identifier:   A7:0F:B5:DB:29:66:C9:FB:DA:89:26:2F:20:AB:1E:75:DB:C6:CE:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E65E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B05D557C4F5B11F1BA4FF742C1833773.roa
Signing time:             Sun 31 May 2026 17:09:49 +0000
ROA not before:           Sun 31 May 2026 17:09:49 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139565
IP address blocks:        103.147.112.0/23 maxlen: 24
                          2001:df6:f240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58974 (0xe65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:09:49 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b5c-5346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:bc:25:e6:fc:a9:7d:af:44:07:34:c3:18:
                    85:69:0a:2d:cb:b8:12:e7:38:18:d5:43:a2:e0:a1:
                    1c:eb:17:c1:59:4a:00:58:09:cc:32:7c:4d:8c:99:
                    06:d0:83:53:47:0b:a6:9a:a3:06:5e:da:48:62:67:
                    12:10:aa:dc:a7:bb:ba:c8:2a:62:e6:2d:b7:79:38:
                    9b:63:d3:02:41:89:08:1c:5a:32:a6:6a:d4:5e:b0:
                    d4:f9:f4:80:d6:3f:ca:34:af:3d:ea:ae:6b:7e:e8:
                    7f:46:b9:dd:9a:30:b2:aa:78:1c:ef:0b:79:58:ce:
                    10:df:23:90:20:13:50:7e:87:d1:f1:53:e1:e5:c3:
                    1e:67:9a:a8:f6:e1:8c:93:98:a8:1c:cc:13:e3:6e:
                    e2:4b:52:a7:8a:1e:f6:9d:03:07:df:1f:8e:4b:2a:
                    35:06:91:89:0b:3b:27:51:ca:e1:dd:ee:68:22:7d:
                    7f:47:1b:aa:c9:2a:cd:b9:46:b7:d7:67:9d:a2:04:
                    b2:c8:19:41:fb:3c:9e:07:f0:8c:d7:fa:54:86:c3:
                    fd:24:6c:87:97:13:e9:6b:b5:6c:00:92:95:86:c4:
                    ec:69:38:1a:44:90:12:ff:bc:1e:58:fd:d0:6b:b5:
                    64:cf:35:d3:ef:48:67:fc:62:29:46:83:3d:35:40:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:B5:DB:29:66:C9:FB:DA:89:26:2F:20:AB:1E:75:DB:C6:CE:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B05D557C4F5B11F1BA4FF742C1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.112.0/23
                IPv6:
                  2001:df6:f240::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:bd:32:c9:82:f6:e1:c8:44:2e:de:fc:08:5c:22:20:a6:
         ec:27:18:bf:aa:ea:7b:3f:96:33:c5:5d:7b:96:12:d3:30:b3:
         7a:7d:c1:fe:c0:19:b5:a2:cf:09:9a:84:3f:f2:99:f6:bb:a8:
         a2:bf:5f:91:35:c9:94:c6:ff:43:4f:5a:71:61:ef:9f:b3:dd:
         00:21:96:8c:db:13:72:d3:b4:42:e2:d2:cd:6e:57:74:d6:ec:
         06:2f:0a:91:ae:8a:36:3a:f8:33:92:e3:73:18:84:a9:6d:27:
         60:a0:c6:3a:19:fe:9e:f8:f7:36:84:fd:d0:6a:53:cb:11:c5:
         f9:86:5d:ad:b8:64:22:b9:92:60:2b:44:7b:1c:c7:87:6d:75:
         23:b3:7d:a4:2d:86:b0:b3:9c:81:7f:3f:35:cd:00:ef:47:34:
         3d:a3:54:a4:99:e0:d0:cd:98:e7:a4:f8:22:dd:3e:7c:41:49:
         00:e4:ab:13:63:05:fa:98:64:46:0b:46:63:65:1d:f8:5d:e4:
         43:c2:41:08:3c:15:50:6a:46:0b:78:00:3c:56:ff:e3:92:08:
         f2:47:b5:fc:ac:cf:79:d5:a2:b6:0f:bc:70:de:14:69:90:d5:
         8b:59:99:cc:ca:2b:99:bf:70:16:a8:2e:11:6e:72:4a:d6:0e:
         e0:d9:ac:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAOZeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDk0OVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiNWMtNTM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqMvCXm/Kl9r0QHNMMYhWkKLcu4Euc4GNVDouChHOsXwVlKAFgJzDJ8TYyZ
BtCDU0cLppqjBl7aSGJnEhCq3Ke7usgqYuYtt3k4m2PTAkGJCBxaMqZq1F6w1Pn0
gNY/yjSvPequa37of0a53Zowsqp4HO8LeVjOEN8jkCATUH6H0fFT4eXDHmeaqPbh
jJOYqBzME+Nu4ktSp4oe9p0DB98fjksqNQaRiQs7J1HK4d3uaCJ9f0cbqskqzblG
t9dnnaIEssgZQfs8ngfwjNf6VIbD/SRsh5cT6Wu1bACSlYbE7Gk4GkSQEv+8Hlj9
0Gu1ZM810+9IZ/xiKUaDPTVAlMsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSnD7Xb
KWbJ+9qJJi8gqx5128bOkjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IwNUQ1NTdD
NEY1QjExRjFCQTRGRjc0MkMxODMzNzczLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeTcDAPBAIAAjAJAwcAIAEN9vJAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4jr0yyYL24chELt78CFwiIKbsJxi/qup7P5YzxV17lhLTMLN6fcH+wBm1os8J
moQ/8pn2u6iiv1+RNcmUxv9DT1pxYe+fs90AIZaM2xNy07RC4tLNbld01uwGLwqR
roo2OvgzkuNzGISpbSdgoMY6Gf6e+Pc2hP3QalPLEcX5hl2tuGQiuZJgK0R7HMeH
bXUjs32kLYaws5yBfz81zQDvRzQ9o1SkmeDQzZjnpPgi3T58QUkA5KsTYwX6mGRG
C0ZjZR34XeRDwkEIPBVQakYLeAA8Vv/jkgjyR7X8rM951aK2D7xw3hRpkNWLWZnM
yiuZv3AWqC4RbnJK1g7g2azQ
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:02 2026 by rpki-client