Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa
File:                     BB92CAB6120911EB9B02DB3AC4F9AE02.roa (raw, json)
Hash identifier:          JxNzx2lGjAWwGvkBA+R4bgOt5tlI4ktVS6Neqp1y1gA=
Subject key identifier:   38:39:DF:28:8A:F0:8C:BD:CE:A4:63:63:25:D7:A7:8B:F2:5E:DE:0B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E69D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:12:06 +0000
ROA not before:           Sun 31 May 2026 17:12:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140195
IP address blocks:        103.156.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59037 (0xe69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:12:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6be6-9651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:0b:a3:8f:b2:0e:69:77:59:58:cb:be:ef:
                    a0:09:57:c2:bc:b3:7a:3b:07:02:af:9f:05:64:54:
                    28:46:f6:8b:a9:67:5a:b0:10:a0:57:a5:6a:f4:28:
                    52:19:e5:c1:2d:5f:87:07:b0:e8:80:16:b1:52:f5:
                    d8:e1:2f:c0:2b:7e:cc:d8:2e:ab:d8:cb:85:c5:68:
                    78:7b:9e:0a:a3:56:5b:c2:5a:20:14:18:9b:d9:95:
                    d1:12:f7:de:40:93:73:97:96:64:97:17:35:c5:30:
                    25:7f:be:3a:6b:d5:df:ae:29:49:ba:d5:f4:9a:0f:
                    8c:aa:48:1d:ea:0f:36:99:74:74:77:e2:3a:12:60:
                    79:df:0a:a4:28:8c:96:03:81:b1:20:15:90:a2:90:
                    97:5c:db:4c:aa:5f:0a:8a:4b:05:c2:94:b5:3d:5c:
                    a1:d6:87:07:30:37:7e:63:2f:6b:d3:7e:eb:1d:de:
                    31:f9:04:b4:1b:86:da:f8:c3:a3:ff:c9:cf:1e:44:
                    34:4d:95:bf:34:d7:9f:28:e0:d7:92:06:bb:7b:9f:
                    39:7f:27:bb:c1:15:7c:72:f3:f2:ad:61:e2:f8:7a:
                    16:90:32:d7:5a:d9:2b:d7:cd:ba:73:dd:66:b9:e0:
                    d2:9e:d7:dc:98:38:33:14:c0:92:bf:2a:6c:9f:0d:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:DF:28:8A:F0:8C:BD:CE:A4:63:63:25:D7:A7:8B:F2:5E:DE:0B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:e8:6e:3b:c5:81:e4:c7:7a:d9:ef:d0:90:cb:4f:c4:34:
         b3:d6:e6:a7:07:62:bb:00:c9:8e:9a:7c:0c:0a:5d:f7:09:09:
         7a:0a:72:b7:93:9c:61:d6:fc:f1:ba:73:6b:ea:a1:b8:6d:66:
         81:29:6b:65:94:ad:f6:4c:e4:f4:36:40:7a:e0:57:34:2d:ad:
         37:bf:55:b0:54:2e:c8:33:3c:5e:3a:42:f4:5e:c0:65:0b:8e:
         49:42:8b:45:58:c8:c9:68:fe:79:34:d6:23:54:f6:75:b7:69:
         27:1c:ad:0c:b7:fd:c5:b5:48:eb:61:79:12:e1:36:8d:ba:b7:
         c1:b4:bd:b8:db:72:30:cc:c7:dc:60:83:98:d9:89:89:ad:82:
         0b:cd:23:be:eb:99:3a:45:56:4c:42:85:49:b5:4a:32:f1:bb:
         fb:86:da:b7:81:aa:05:5e:87:0d:0b:82:5e:62:42:7b:5f:73:
         fb:84:24:78:c2:f8:1e:96:be:4d:ef:c6:83:7b:62:5a:67:6a:
         66:47:5f:64:16:bf:e3:b2:c6:3d:1c:81:08:89:2b:77:7a:b2:
         38:0a:e0:9d:bc:c5:63:de:40:2d:05:1b:51:b8:76:c2:7e:91:
         fe:d4:79:07:a9:c2:cd:4b:3e:59:57:d5:bf:4f:a0:c0:1a:8f:
         54:a5:f3:cb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOadMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTIwNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiZTYtOTY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQUC6OPsg5pd1lYy77voAlXwryzejsHAq+fBWRUKEb2i6lnWrAQoFelavQo
UhnlwS1fhwew6IAWsVL12OEvwCt+zNguq9jLhcVoeHueCqNWW8JaIBQYm9mV0RL3
3kCTc5eWZJcXNcUwJX++OmvV364pSbrV9JoPjKpIHeoPNpl0dHfiOhJged8KpCiM
lgOBsSAVkKKQl1zbTKpfCopLBcKUtT1codaHBzA3fmMva9N+6x3eMfkEtBuG2vjD
o//Jzx5ENE2VvzTXnyjg15IGu3ufOX8nu8EVfHLz8q1h4vh6FpAy11rZK9fNunPd
Zrng0p7X3Jg4MxTAkr8qbJ8NgGMCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQ4Od8o
ivCMvc6kY2Ml16eL8l7eCzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JCOTJDQUI2
MTIwOTExRUI5QjAyREIzQUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeceTANBgkqhkiG9w0BAQsFAAOCAQEAP1PobjvFgeTHetnv0JDL
T8Q0s9bmpwdiuwDJjpp8DApd9wkJegpyt5OcYdb88bpza+qhuG1mgSlrZZSt9kzk
9DZAeuBXNC2tN79VsFQuyDM8XjpC9F7AZQuOSUKLRVjIyWj+eTTWI1T2dbdpJxyt
DLf9xbVI62F5EuE2jbq3wbS9uNtyMMzH3GCDmNmJia2CC80jvuuZOkVWTEKFSbVK
MvG7+4bat4GqBV6HDQuCXmJCe19z+4QkeML4Hpa+Te/Gg3tiWmdqZkdfZBa/47LG
PRyBCIkrd3qyOArgnbzFY95ALQUbUbh2wn6R/tR5B6nCzUs+WVfVv0+gwBqPVKXz
yw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:14 2026 by rpki-client