Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAB111DCD89011EF92027B1FC4F9AE02.roa
File:                     BAB111DCD89011EF92027B1FC4F9AE02.roa (raw, json)
Hash identifier:          iBK0yzQMCjjOa8LTdFu4AI7X4Wmds68kfTfz4JEqeYM=
Subject key identifier:   EF:B2:AC:D0:4D:55:68:F8:16:2A:C4:B8:C2:FF:74:24:A2:FD:C5:29
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E65F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAB111DCD89011EF92027B1FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:09:50 +0000
ROA not before:           Sun 31 May 2026 17:09:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139566
IP address blocks:        103.124.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58975 (0xe65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:09:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6b5e-9eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:7b:23:d2:1e:54:02:f8:9e:dd:5a:68:a7:
                    74:6c:4d:c1:d6:63:2a:20:63:f0:29:af:e5:fb:f9:
                    74:fc:90:75:b1:c5:91:84:05:6c:9f:c3:fa:94:5a:
                    e0:f7:4b:af:68:4b:d2:1b:68:4b:0b:36:5b:16:6a:
                    72:cc:61:33:46:b8:d8:22:30:ae:70:dc:b8:87:06:
                    f5:49:e1:4e:a1:cd:83:ee:f4:82:27:13:83:18:38:
                    96:df:37:3e:5a:e9:a4:aa:04:5a:0e:11:2e:a6:1f:
                    18:bc:dc:2f:97:fd:8a:47:ff:66:ae:08:f5:98:b3:
                    2a:60:e1:a2:b1:e9:9e:64:22:00:b9:0c:4a:c9:3e:
                    51:e5:a1:5c:3f:f5:48:86:23:2c:2a:8b:44:97:40:
                    e2:6f:65:1e:ca:7b:22:c9:b4:fa:99:5d:1f:f9:52:
                    52:04:12:38:51:1a:80:3b:21:df:25:6a:54:d1:ec:
                    8d:a8:d8:65:5f:75:54:79:aa:cb:b9:1c:4c:4a:d9:
                    b4:90:5c:42:b6:66:bd:ff:b3:5c:09:77:d9:20:7b:
                    16:71:49:79:5c:96:95:e2:7e:a0:18:80:4c:6f:88:
                    41:e5:08:3a:30:51:da:7c:81:0c:84:0b:5f:a9:c3:
                    24:86:20:1b:bf:30:1b:dc:6d:be:c3:2c:cb:2f:9e:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:AC:D0:4D:55:68:F8:16:2A:C4:B8:C2:FF:74:24:A2:FD:C5:29
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAB111DCD89011EF92027B1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:ce:13:76:b7:75:38:58:3c:a2:a0:48:a9:d0:08:29:94:
         2c:b5:d6:3c:19:b1:8f:0c:60:ac:27:99:61:b7:3a:db:24:6e:
         dd:f1:79:8e:28:42:e2:c7:6f:dc:e4:61:52:3f:fd:9c:ad:9e:
         51:1c:99:bf:21:6f:11:42:c3:37:a8:a6:02:9c:80:68:8a:52:
         1d:46:4a:a0:b6:a4:6c:2c:09:36:42:f6:9f:d4:43:b0:9b:eb:
         f3:dc:bd:b5:1e:20:3f:5f:07:8e:c3:00:0a:20:0b:2b:29:4d:
         88:2b:30:14:d6:0b:58:56:5c:83:9b:ce:c7:23:be:81:ec:dc:
         2c:45:b5:68:d1:f1:f8:9d:9e:82:93:25:20:15:c9:f3:de:9e:
         dd:1b:a9:33:38:13:12:56:5b:be:e7:74:fb:77:e9:db:67:d7:
         77:5a:18:c8:57:ce:95:e9:6c:f0:28:19:d5:e6:db:6c:bc:84:
         6d:7e:66:7a:b8:f5:b6:ff:fc:b6:46:c6:ba:57:3c:18:1f:8e:
         77:d0:4b:b0:7b:e9:37:45:6f:0c:ea:3b:36:d6:61:9d:dd:37:
         74:ca:97:de:63:7a:01:d9:78:76:38:e9:93:dc:4e:a9:98:b9:
         6d:03:7e:d5:3f:e0:20:5d:19:89:87:c5:77:3e:33:99:60:e8:
         25:5a:20:6d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOZfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDk1MFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiNWUtOWViOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3geyPSHlQC+J7dWmindGxNwdZjKiBj8Cmv5fv5dPyQdbHFkYQFbJ/D+pRa
4PdLr2hL0htoSws2WxZqcsxhM0a42CIwrnDcuIcG9UnhTqHNg+70gicTgxg4lt83
PlrppKoEWg4RLqYfGLzcL5f9ikf/Zq4I9ZizKmDhorHpnmQiALkMSsk+UeWhXD/1
SIYjLCqLRJdA4m9lHsp7Ism0+pldH/lSUgQSOFEagDsh3yVqVNHsjajYZV91VHmq
y7kcTErZtJBcQrZmvf+zXAl32SB7FnFJeVyWleJ+oBiATG+IQeUIOjBR2nyBDIQL
X6nDJIYgG78wG9xtvsMsyy+ePJsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTvsqzQ
TVVo+BYqxLjC/3Qkov3FKTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBQjExMURD
RDg5MDExRUY5MjAyN0IxRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd8JzANBgkqhkiG9w0BAQsFAAOCAQEAT8bOE3a3dThYPKKgSKnQ
CCmULLXWPBmxjwxgrCeZYbc62yRu3fF5jihC4sdv3ORhUj/9nK2eURyZvyFvEULD
N6imApyAaIpSHUZKoLakbCwJNkL2n9RDsJvr89y9tR4gP18HjsMACiALKylNiCsw
FNYLWFZcg5vOxyO+gezcLEW1aNHx+J2egpMlIBXJ896e3RupMzgTElZbvud0+3fp
22fXd1oYyFfOlels8CgZ1ebbbLyEbX5merj1tv/8tkbGulc8GB+Od9BLsHvpN0Vv
DOo7NtZhnd03dMqX3mN6Adl4djjpk9xOqZi5bQN+1T/gIF0ZiYfFdz4zmWDoJVog
bQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:24 2026 by rpki-client