Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D25D0F4C8B0F11F1A158DEF93211F970.roa
File:                     D25D0F4C8B0F11F1A158DEF93211F970.roa (raw, json)
Hash identifier:          4LwihGXRvkGzIvXWhgbO7ZceLMDPt43UKOaq/AAZwvc=
Subject key identifier:   B1:02:6E:10:A3:A6:15:3C:24:48:8B:18:F3:52:86:69:64:35:96:F8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F9D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D25D0F4C8B0F11F1A158DEF93211F970.roa
Signing time:             Wed 29 Jul 2026 05:39:10 +0000
ROA not before:           Wed 29 Jul 2026 05:39:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146867
IP address blocks:        103.173.96.0/24 maxlen: 24
                          103.173.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63956 (0xf9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 29 05:39:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6991fd-c8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:83:4c:0a:cf:71:07:a6:09:0e:8f:b2:97:
                    51:0c:fe:6f:8a:25:fc:a8:8d:93:b2:50:53:2d:1b:
                    93:ab:9c:79:28:24:99:fe:18:30:3e:15:42:03:26:
                    2a:bf:55:74:1b:91:d9:70:ab:dc:ba:03:88:d4:05:
                    b7:f0:c9:5c:a6:98:11:e1:3a:ab:af:88:2e:35:ab:
                    f1:78:e5:c1:ce:e8:f2:4b:cb:5f:08:4f:01:4e:24:
                    71:72:9b:29:c2:51:35:19:7e:03:44:a7:f6:5c:7b:
                    e3:07:21:4b:76:45:d3:03:ca:86:8e:97:87:59:f7:
                    82:6c:c5:7b:fb:a3:91:3c:a7:30:3f:e3:b6:0b:b0:
                    e4:55:2b:6c:d6:17:64:32:f5:02:05:55:f1:34:54:
                    84:d0:3a:19:44:16:6f:6f:81:8f:7d:cb:8e:04:32:
                    70:1e:b9:e8:42:ef:d0:85:ab:d8:45:67:77:69:f3:
                    79:eb:c3:d1:6c:bb:12:77:6a:91:38:5c:3e:8b:09:
                    f5:32:c3:ea:c8:59:d4:21:11:26:0d:78:74:b1:79:
                    a4:4a:77:fd:ce:89:8c:7c:c2:45:9b:9e:12:4e:ad:
                    b7:b3:e0:31:de:b0:c0:5e:3e:fc:79:1d:47:b9:07:
                    78:43:86:d6:1c:5e:98:5e:a7:1e:d2:64:fc:d3:86:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:6E:10:A3:A6:15:3C:24:48:8B:18:F3:52:86:69:64:35:96:F8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D25D0F4C8B0F11F1A158DEF93211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:6c:69:7e:8f:2c:25:57:c4:37:12:cb:5d:a4:84:fc:5d:
         aa:b9:74:53:9c:dc:99:30:08:28:67:dd:bf:09:8a:1d:40:8c:
         1a:fc:ba:c7:a0:6e:03:d9:64:5d:7f:92:3f:fd:4e:0d:74:aa:
         83:4c:7d:8b:04:ea:e2:20:b9:94:e4:29:c6:6a:82:6e:42:47:
         97:92:58:b8:b7:39:3c:48:4c:42:06:a8:f0:5d:56:4b:c4:c9:
         e0:af:0c:73:09:01:f5:a8:5b:5d:77:35:e8:94:5d:d8:d4:2f:
         ff:b2:8c:3f:c4:ab:75:a0:91:0a:c6:97:da:59:86:1b:b3:1d:
         46:89:55:87:e8:97:a2:b9:bf:94:fa:37:65:d2:c0:c5:93:33:
         4a:f0:7b:10:f1:29:29:96:40:b8:02:f8:6a:f0:d4:32:d0:87:
         b0:ed:17:ff:1c:9b:af:88:c2:e0:0b:e2:c9:05:f0:0d:5e:42:
         3c:3b:ad:2b:a7:e2:de:e6:b4:4d:1d:b7:85:7c:07:da:6d:ac:
         4f:f3:aa:c0:4b:21:63:cc:c7:5f:0f:96:cf:33:ba:e1:d7:f3:
         96:a0:f3:1e:df:52:a3:65:d1:9f:f7:dd:07:19:3e:5c:0f:b9:
         84:ae:d5:9c:33:18:70:52:d7:10:67:ee:03:84:fa:c5:76:1b:
         92:49:63:76
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPnUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcyOTA1MzkxMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE2OTkxZmQtYzhmMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANifg0wKz3EHpgkOj7KXUQz+b4ol/KiNk7JQUy0bk6uceSgkmf4YMD4VQgMm
Kr9VdBuR2XCr3LoDiNQFt/DJXKaYEeE6q6+ILjWr8Xjlwc7o8kvLXwhPAU4kcXKb
KcJRNRl+A0Sn9lx74wchS3ZF0wPKho6Xh1n3gmzFe/ujkTynMD/jtguw5FUrbNYX
ZDL1AgVV8TRUhNA6GUQWb2+Bj33LjgQycB656ELv0IWr2EVnd2nzeevD0Wy7Endq
kThcPosJ9TLD6shZ1CERJg14dLF5pEp3/c6JjHzCRZueEk6tt7PgMd6wwF4+/Hkd
R7kHeEOG1hxemF6nHtJk/NOG+YUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSxAm4Q
o6YVPCRIixjzUoZpZDWW+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyNUQwRjRD
OEIwRjExRjFBMTU4REVGOTMyMTFGOTcwLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWetYDANBgkqhkiG9w0BAQsFAAOCAQEAa75saX6PLCVXxDcSy12k
hPxdqrl0U5zcmTAIKGfdvwmKHUCMGvy6x6BuA9lkXX+SP/1ODXSqg0x9iwTq4iC5
lOQpxmqCbkJHl5JYuLc5PEhMQgao8F1WS8TJ4K8McwkB9ahbXXc16JRd2NQv/7KM
P8SrdaCRCsaX2lmGG7MdRolVh+iXorm/lPo3ZdLAxZMzSvB7EPEpKZZAuAL4avDU
MtCHsO0X/xybr4jC4AviyQXwDV5CPDutK6fi3ua0TR23hXwH2m2sT/OqwEshY8zH
Xw+WzzO64dfzlqDzHt9So2XRn/fdBxk+XA+5hK7VnDMYcFLXEGfuA4T6xXYbkklj
dg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:16 2026 by rpki-client