Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B41EED24194611F1AF3D49D13B3D8C67.roa
File:                     B41EED24194611F1AF3D49D13B3D8C67.roa (raw, json)
Hash identifier:          fyLWQq5Smg/s88pmkb1H8KtLxFJgTAUABx3RFfizkIQ=
Subject key identifier:   BE:46:FD:EE:3E:F2:B2:4E:2C:4B:8D:1E:CA:9B:92:8D:F5:F1:58:9B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F0DB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B41EED24194611F1AF3D49D13B3D8C67.roa
Signing time:             Mon 06 Jul 2026 16:54:33 +0000
ROA not before:           Mon 06 Jul 2026 16:54:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136644
IP address blocks:        103.141.192.0/23 maxlen: 24
                          2001:df1:780::/48 maxlen: 48
                          2401:a260:1000::/36 maxlen: 36
                          2401:a260:2000::/36 maxlen: 36
                          2401:a260:3000::/36 maxlen: 36
                          2401:a260:4000::/36 maxlen: 36
                          2401:a260:5000::/36 maxlen: 36
                          2401:a260:6000::/36 maxlen: 36
                          2401:a260:7000::/36 maxlen: 36
                          2401:a260:8000::/36 maxlen: 36
                          2401:a260:9000::/36 maxlen: 36
                          2401:a260:a000::/36 maxlen: 36
                          2401:a260:b000::/36 maxlen: 36
                          2401:a260:c000::/36 maxlen: 36
                          2401:a260:d000::/36 maxlen: 36
                          2401:a260:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61659 (0xf0db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:54:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bddc8-ec22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:9a:72:9d:5b:c2:74:f6:ba:31:dc:6d:b9:
                    71:78:f2:04:81:7c:c6:32:4c:ac:ab:49:e5:d7:fa:
                    a9:6e:bc:46:e7:11:f4:6a:1e:ec:db:04:67:a4:65:
                    70:29:d1:1f:e5:80:54:53:2a:83:bd:b3:61:2b:5d:
                    ce:c9:b7:aa:e5:e2:52:cf:34:58:8d:00:0b:aa:9c:
                    12:81:d5:93:9d:66:42:8b:6e:2a:45:c3:ab:5a:82:
                    6f:66:e4:d2:1f:05:6d:7a:cd:4d:3c:1d:78:1f:20:
                    52:62:88:35:cc:32:99:ac:3a:a8:fb:a0:6f:d4:cd:
                    0e:69:14:62:e2:f1:c0:14:46:1e:da:30:81:4e:6a:
                    3f:42:bf:ad:45:10:fd:89:66:2f:da:a8:d3:28:04:
                    1f:59:3a:6e:bc:36:d2:11:ea:58:bb:ae:7b:be:58:
                    c8:a8:c7:5b:e7:c9:f1:ba:90:3e:eb:66:68:76:5c:
                    b6:19:fa:1d:2e:1f:b0:ab:60:e8:6d:8f:2f:b1:7f:
                    67:40:4d:be:22:a9:7c:46:98:ab:00:f4:72:c2:57:
                    61:79:fd:c5:4e:23:e8:1e:33:83:c3:3d:11:a7:f3:
                    28:3f:53:6f:19:8d:f9:41:d0:8a:dc:c6:41:83:7e:
                    58:97:13:59:dc:b2:d6:e5:1c:92:94:ee:12:12:ed:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:46:FD:EE:3E:F2:B2:4E:2C:4B:8D:1E:CA:9B:92:8D:F5:F1:58:9B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B41EED24194611F1AF3D49D13B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.192.0/23
                IPv6:
                  2001:df1:780::/48
                  2401:a260:1000::-2401:a260:efff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:43:e0:21:3d:7b:cd:6c:b3:13:ff:23:7d:6d:83:38:98:
         d2:a0:98:6a:98:80:25:1b:18:d4:9b:20:2c:88:b2:2c:ed:37:
         af:95:53:8e:b8:a9:30:ca:97:70:30:93:25:f3:20:6c:be:e2:
         f3:23:7e:bd:1d:c4:db:46:f4:d2:89:56:b6:7e:0f:48:18:f7:
         ae:ec:94:0a:df:27:8a:5d:56:63:76:bb:a7:ff:7d:d8:bd:12:
         47:2c:18:70:d0:12:ee:0c:15:e0:a0:ff:71:63:45:bd:8b:91:
         13:3f:7a:5b:36:52:f0:f3:b1:77:84:40:66:c4:dc:32:a9:ef:
         41:a6:2a:e8:55:fd:82:bc:34:b7:c1:74:32:65:f8:d3:ef:e8:
         43:40:ea:38:d8:2d:7b:52:6d:53:e2:34:57:f8:75:c8:fc:5e:
         5f:2b:bb:39:1b:0c:b4:5f:70:92:c9:8d:92:cd:71:1b:4f:5a:
         07:88:b0:af:53:21:ba:19:2b:50:18:3e:d8:aa:a9:30:61:bf:
         0a:88:87:dd:53:eb:5d:fe:5b:91:df:ab:94:0e:ac:99:08:ed:
         66:8c:29:d4:ca:fd:be:cc:11:13:8c:37:5a:58:52:fc:3e:c3:
         44:18:99:6f:3f:1b:9b:c6:42:ba:fb:09:a6:c3:b0:58:80:59:
         3a:e6:24:8b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDAPDbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTQzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRkYzgtZWMyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdNmnKdW8J09rox3G25cXjyBIF8xjJMrKtJ5df6qW68RucR9Goe7NsEZ6Rl
cCnRH+WAVFMqg72zYStdzsm3quXiUs80WI0AC6qcEoHVk51mQotuKkXDq1qCb2bk
0h8FbXrNTTwdeB8gUmKINcwymaw6qPugb9TNDmkUYuLxwBRGHtowgU5qP0K/rUUQ
/YlmL9qo0ygEH1k6brw20hHqWLuue75YyKjHW+fJ8bqQPutmaHZcthn6HS4fsKtg
6G2PL7F/Z0BNviKpfEaYqwD0csJXYXn9xU4j6B4zg8M9EafzKD9TbxmN+UHQitzG
QYN+WJcTWdyy1uUckpTuEhLt2kUCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBS+Rv3u
PvKyTixLjR7Km5KN9fFYmzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I0MUVFRDI0
MTk0NjExRjFBRjNENDlEMTNCM0Q4QzY3LnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw
DAQCAAEwBgMEAWeNwDAhBAIAAjAbAwcAIAEN8QeAMBADBgQkAaJgEAMGBCQBomDg
MA0GCSqGSIb3DQEBCwUAA4IBAQAMB0PgIT17zWyzE/8jfW2DOJjSoJhqmIAlGxjU
myAsiLIs7TevlVOOuKkwypdwMJMl8yBsvuLzI369HcTbRvTSiVa2fg9IGPeu7JQK
3yeKXVZjdrun/33YvRJHLBhw0BLuDBXgoP9xY0W9i5ETP3pbNlLw87F3hEBmxNwy
qe9BpiroVf2CvDS3wXQyZfjT7+hDQOo42C17Um1T4jRX+HXI/F5fK7s5Gwy0X3CS
yY2SzXEbT1oHiLCvUyG6GStQGD7YqqkwYb8KiIfdU+td/luR36uUDqyZCO1mjCnU
yv2+zBETjDdaWFL8PsNEGJlvPxubxkK6+wmmw7BYgFk65iSL
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:02 2026 by rpki-client