Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa
File:                     CADAF78636B511EEB24C0246C4F9AE02.roa (raw, json)
Hash identifier:          nv5+7k2ghOuZC0aB684F+002OOcVTyKS3KBJnLHJMBo=
Subject key identifier:   D7:FA:6E:C3:91:30:25:51:E5:0E:FC:C2:F3:4D:35:04:4A:85:BC:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:02:32 +0000
ROA not before:           Mon 06 Jul 2026 17:02:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138247
IP address blocks:        103.127.160.0/24 maxlen: 24
                          2001:df7:6d00::/49 maxlen: 49
                          2001:df7:6d00:8000::/49 maxlen: 49
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61898 (0xf1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:02:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdfa8-34b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:44:a2:27:6e:ae:a4:14:0d:0a:11:3e:c4:
                    ac:2f:2f:5c:1b:f8:52:2c:ab:10:c5:d3:be:22:ec:
                    af:85:c6:e2:6b:06:ac:a3:bb:a5:69:a7:30:e2:5f:
                    ec:fe:cc:59:c1:2b:aa:43:d1:69:db:cf:83:0e:33:
                    9e:c5:d3:39:0c:ff:db:8f:16:e1:4c:a2:74:c6:05:
                    fa:e3:c4:49:86:26:d6:f3:1a:dc:b1:14:59:8b:7a:
                    36:0e:37:b0:ef:21:20:f9:cd:56:f0:0b:d2:4a:83:
                    01:63:21:ba:d7:83:af:49:88:22:b2:59:8a:c7:c2:
                    a2:8e:b0:43:4f:4b:42:a1:7b:a3:d2:71:ac:47:f2:
                    43:da:a9:d1:d0:dd:5a:4a:35:f9:fb:94:cb:73:ec:
                    3c:e4:85:f6:bb:65:d2:2c:c7:1d:eb:39:e7:4a:ce:
                    59:13:0f:9f:78:d1:9a:71:be:da:a2:cf:00:f6:3b:
                    d8:79:9a:24:88:cb:e9:1e:30:a8:2f:35:1f:5b:ef:
                    59:b5:e4:5d:6d:6c:62:f7:2c:29:c0:83:36:61:4c:
                    2c:aa:7b:e1:b8:85:17:db:b0:6f:04:64:15:a3:63:
                    bb:de:41:01:d1:57:ec:7c:38:3b:60:bc:53:6a:58:
                    96:6a:6d:ec:94:45:db:17:3b:50:b5:29:95:a9:b7:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:6E:C3:91:30:25:51:E5:0E:FC:C2:F3:4D:35:04:4A:85:BC:EA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.160.0/24
                IPv6:
                  2001:df7:6d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:8e:29:cf:c6:1b:4d:75:ec:44:7d:13:48:60:24:77:1b:
         c2:c7:19:25:55:3f:a2:be:5c:10:32:58:e2:02:c4:e3:f7:3e:
         b3:e9:5b:99:bf:68:a7:90:23:87:91:55:84:29:85:bb:24:c7:
         7f:fd:5c:43:cc:ed:6f:21:18:76:1e:07:ef:5e:fa:d7:58:de:
         f1:e6:3b:52:24:d5:e4:63:cb:d7:f1:51:ec:d7:ce:5f:2d:a8:
         56:25:a2:4d:14:90:9d:32:65:69:64:8b:1b:1d:e0:a4:dc:ef:
         09:ad:6c:65:33:3b:32:21:37:37:f4:4c:92:96:08:9f:77:cc:
         79:bc:64:d1:8b:85:e7:90:09:d7:9f:84:26:c2:75:d8:81:10:
         14:c3:ad:35:0a:e9:96:1b:c8:fa:d8:40:d0:8c:11:63:ea:d3:
         59:9a:fd:8d:9b:03:24:a4:4c:1a:22:5b:04:14:0d:e5:6d:5f:
         84:97:2b:56:82:85:73:af:db:1a:2c:89:72:e3:15:44:b1:7c:
         ed:a0:41:9e:c9:7f:bd:39:f8:f8:99:0b:e2:68:01:36:33:00:
         42:8b:1e:b3:e0:81:e9:9f:68:cf:7a:17:57:1c:98:84:cb:f4:
         25:e0:fd:c5:8f:4d:27:44:0e:db:33:55:f9:fd:39:60:9d:f5:
         45:24:f5:0c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPHKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDIzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRmYTgtMzRiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM0cRKInbq6kFA0KET7ErC8vXBv4UiyrEMXTviLsr4XG4msGrKO7pWmnMOJf
7P7MWcErqkPRadvPgw4znsXTOQz/248W4UyidMYF+uPESYYm1vMa3LEUWYt6Ng43
sO8hIPnNVvAL0kqDAWMhuteDr0mIIrJZisfCoo6wQ09LQqF7o9JxrEfyQ9qp0dDd
Wko1+fuUy3PsPOSF9rtl0izHHes550rOWRMPn3jRmnG+2qLPAPY72HmaJIjL6R4w
qC81H1vvWbXkXW1sYvcsKcCDNmFMLKp74biFF9uwbwRkFaNju95BAdFX7Hw4O2C8
U2pYlmpt7JRF2xc7ULUplam32tkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTX+m7D
kTAlUeUO/MLzTTUESoW86jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NBREFGNzg2
MzZCNTExRUVCMjRDMDI0NkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAGd/oDAPBAIAAjAJAwcAIAEN920AMA0GCSqGSIb3DQEBCwUAA4IB
AQCIpI4pz8YbTXXsRH0TSGAkdxvCxxklVT+ivlwQMljiAsTj9z6z6VuZv2inkCOH
kVWEKYW7JMd//VxDzO1vIRh2HgfvXvrXWN7x5jtSJNXkY8vX8VHs185fLahWJaJN
FJCdMmVpZIsbHeCk3O8JrWxlMzsyITc39EySlgifd8x5vGTRi4XnkAnXn4QmwnXY
gRAUw601CumWG8j62EDQjBFj6tNZmv2NmwMkpEwaIlsEFA3lbV+ElytWgoVzr9sa
LIly4xVEsXztoEGeyX+9Ofj4mQviaAE2MwBCix6z4IHpn2jPehdXHJiEy/Ql4P3F
j00nRA7bM1X5/TlgnfVFJPUM
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:45 2026 by rpki-client