Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa
File:                     C24CEF602B3811F0ABB68D6EC4F9AE02.roa (raw, json)
Hash identifier:          ygcUc+tmCUrIjLnSUQkKvEfwz2MulqI/6lKh54/lZNs=
Subject key identifier:   C0:2B:9B:62:45:5B:FD:22:1C:1E:24:78:61:16:EA:03:54:DB:7F:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2E5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:41:00 +0000
ROA not before:           Sun 31 May 2026 16:41:00 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134022
IP address blocks:        45.115.184.0/24 maxlen: 24
                          45.115.185.0/24 maxlen: 24
                          45.115.186.0/24 maxlen: 24
                          45.115.187.0/24 maxlen: 24
                          103.44.48.0/22 maxlen: 24
                          103.66.212.0/22 maxlen: 24
                          103.121.240.0/24 maxlen: 24
                          103.121.241.0/24 maxlen: 24
                          103.121.242.0/24 maxlen: 24
                          103.121.243.0/24 maxlen: 24
                          103.131.93.0/24 maxlen: 24
                          103.169.246.0/23 maxlen: 24
                          103.181.8.0/23 maxlen: 24
                          103.182.140.0/23 maxlen: 24
                          2404:d9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58085 (0xe2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:41:00 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c649c-1114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:9a:2d:f1:3c:b2:7c:d3:1a:86:43:3b:e4:
                    6e:8c:f8:2c:58:e6:4b:d7:be:63:be:f7:1d:04:5e:
                    38:df:1d:3f:af:3f:70:fd:39:93:54:42:c0:ac:3c:
                    db:58:77:b8:26:43:b9:b1:03:7f:0b:6f:37:e8:e5:
                    ba:49:f8:d5:1c:8e:47:e5:bc:43:e3:7e:81:46:b6:
                    c8:6c:7c:fd:49:d6:78:23:2e:39:bd:32:51:04:99:
                    f9:4e:7a:0d:79:a8:60:68:55:6a:64:ba:ef:6f:04:
                    b3:60:ff:67:eb:40:40:82:be:29:32:83:8a:3c:fd:
                    54:2f:13:60:05:d1:5a:73:c0:15:35:59:c4:ad:9a:
                    13:d6:02:cb:51:7c:c0:ef:d9:db:1c:7b:4e:0a:dd:
                    c5:25:91:6c:68:8a:81:6e:67:a5:7b:97:90:80:b6:
                    17:9c:68:8c:a8:00:b8:90:29:43:ba:e7:3f:10:f4:
                    72:a2:3e:be:36:41:e2:02:b6:0a:4d:a2:70:8a:66:
                    be:97:15:a3:ab:9f:03:72:8c:f1:aa:9e:ad:50:7c:
                    26:97:b7:a9:b1:97:77:00:65:6d:c0:26:a8:e6:e8:
                    77:f3:95:2c:47:18:5e:6b:01:59:80:d6:1f:e7:dd:
                    a1:ef:af:95:c9:02:79:81:2c:68:0c:26:39:f4:5a:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2B:9B:62:45:5B:FD:22:1C:1E:24:78:61:16:EA:03:54:DB:7F:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.184.0/22
                  103.44.48.0/22
                  103.66.212.0/22
                  103.121.240.0/22
                  103.131.93.0/24
                  103.169.246.0/23
                  103.181.8.0/23
                  103.182.140.0/23
                IPv6:
                  2404:d9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:37:6e:bd:69:87:45:9d:a3:39:e2:5c:cb:86:fb:ed:f9:
         a4:37:20:33:5e:2a:8d:29:b5:dd:fd:8f:43:d7:1c:41:48:5b:
         10:a0:09:bc:98:a1:7f:54:c6:69:69:5c:c1:51:d1:a4:d2:b0:
         18:e4:b2:39:86:57:62:87:f4:87:5e:dd:78:b3:c0:0e:68:58:
         35:1b:ae:54:9d:c0:da:e6:1b:40:6c:06:54:a9:ce:53:15:6b:
         43:f5:6d:cd:50:a4:62:e1:5a:a4:12:69:21:f3:46:4b:c7:78:
         21:d5:0e:fa:70:80:00:89:c3:c7:b9:87:86:70:a8:22:ae:ef:
         24:fb:96:90:e2:e9:56:32:8d:2a:98:1d:51:36:80:8f:ad:7c:
         d0:ec:77:71:8f:6c:9d:b7:f6:7d:5e:ee:05:65:19:8a:39:ca:
         d5:ff:fe:6c:8c:37:c0:27:5a:b5:87:e2:7c:9c:49:33:30:94:
         2e:85:d1:3c:2f:d7:d6:1a:f8:99:7c:69:bf:59:7e:44:83:28:
         7d:6f:bb:ad:4a:b0:fd:4a:1b:c8:a4:40:e2:49:7c:dc:43:e4:
         67:1d:60:c5:db:4a:8a:3d:8c:3a:42:49:be:f4:84:c0:d8:c3:
         85:c4:e5:94:61:ee:29:db:ec:a1:39:44:e8:27:de:39:91:58:
         5b:92:ea:3e
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIDAOLlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NDEwMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY0OWMtMTExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG1mi3xPLJ80xqGQzvkboz4LFjmS9e+Y773HQReON8dP68/cP05k1RCwKw8
21h3uCZDubEDfwtvN+jlukn41RyOR+W8Q+N+gUa2yGx8/UnWeCMuOb0yUQSZ+U56
DXmoYGhVamS6728Es2D/Z+tAQIK+KTKDijz9VC8TYAXRWnPAFTVZxK2aE9YCy1F8
wO/Z2xx7TgrdxSWRbGiKgW5npXuXkIC2F5xojKgAuJApQ7rnPxD0cqI+vjZB4gK2
Ck2icIpmvpcVo6ufA3KM8aqerVB8Jpe3qbGXdwBlbcAmqObod/OVLEcYXmsBWYDW
H+fdoe+vlckCeYEsaAwmOfRaYJcCAwEAAaOCApkwggKVMB0GA1UdDgQWBBTAK5ti
RVv9IhweJHhhFuoDVNt/UzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyNENFRjYw
MkIzODExRjBBQkI2OEQ2RUM0RjlBRTAyLnJvYTBYBggrBgEFBQcBBwEB/wRJMEcw
NgQCAAEwMAMEAi1zuAMEAmcsMAMEAmdC1AMEAmd58AMEAGeDXQMEAWep9gMEAWe1
CAMEAWe2jDANBAIAAjAHAwUAJATZwDANBgkqhkiG9w0BAQsFAAOCAQEAm6A3br1p
h0WdozniXMuG++35pDcgM14qjSm13f2PQ9ccQUhbEKAJvJihf1TGaWlcwVHRpNKw
GOSyOYZXYof0h17deLPADmhYNRuuVJ3A2uYbQGwGVKnOUxVrQ/VtzVCkYuFapBJp
IfNGS8d4IdUO+nCAAInDx7mHhnCoIq7vJPuWkOLpVjKNKpgdUTaAj6180Ox3cY9s
nbf2fV7uBWUZijnK1f/+bIw3wCdatYfifJxJMzCULoXRPC/X1hr4mXxpv1l+RIMo
fW+7rUqw/UobyKRA4kl83EPkZx1gxdtKij2MOkJJvvSEwNjDhcTllGHuKdvsoTlE
6CfeOZFYW5LqPg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:35 2026 by rpki-client