Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
File:                     D419127E7F8F11EE8E122B28C4F9AE02.roa (raw, json)
Hash identifier:          wg2jkz2CRRah5avTB2BvN10dbKQPaxtJ6UKeU83/LDs=
Subject key identifier:   0C:4A:51:87:5C:24:2D:F7:47:2F:5D:7C:67:5B:1A:DD:84:A9:4B:8B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F237
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:06:03 +0000
ROA not before:           Mon 06 Jul 2026 17:06:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138798
IP address blocks:        103.79.100.0/24 maxlen: 24
                          103.79.102.0/24 maxlen: 24
                          103.117.219.0/24 maxlen: 24
                          103.135.201.0/24 maxlen: 24
                          103.135.202.0/24 maxlen: 24
                          103.135.203.0/24 maxlen: 24
                          103.141.116.0/23 maxlen: 24
                          103.160.237.0/24 maxlen: 24
                          103.174.140.0/23 maxlen: 24
                          103.181.92.0/24 maxlen: 24
                          2001:df6:5280::/48 maxlen: 48
                          2407:35c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62007 (0xf237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be07a-7258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:83:23:eb:86:7d:37:8c:3f:b3:d8:3b:6b:
                    fe:e4:c1:b8:81:a7:13:6f:f3:9d:ab:13:bc:c7:71:
                    00:10:25:49:96:66:41:b1:4a:66:83:10:5f:15:8d:
                    f8:42:4c:67:86:74:5a:3c:81:28:bb:18:2d:ea:3a:
                    2a:03:53:77:95:05:9c:9f:64:6a:c9:72:d3:08:af:
                    83:50:b6:00:e6:0b:ea:2b:94:4a:e4:6e:30:05:c1:
                    70:d3:7d:2f:fb:8f:63:4a:d9:51:32:e0:4e:f1:53:
                    1b:a1:7e:0b:2b:09:e1:fc:36:c5:57:a5:15:6c:57:
                    f7:23:0e:67:0c:44:da:94:3d:4b:35:1c:1d:d4:93:
                    89:58:4e:67:67:c3:d8:7d:78:5f:d2:fc:cf:a0:84:
                    6a:0b:e0:c3:92:0c:f3:14:27:25:f5:da:e2:66:ba:
                    ff:09:01:c9:8a:f2:56:b2:2f:11:6e:69:da:a5:11:
                    64:1e:90:03:49:92:b8:11:76:21:23:a0:7e:60:77:
                    4b:e0:b4:20:87:eb:59:bc:e3:14:28:b8:44:ca:2b:
                    7b:e1:7a:97:94:e7:4a:53:a9:76:2e:bf:95:98:9e:
                    3d:66:57:96:b1:2a:39:ea:05:58:d3:d4:18:43:4e:
                    78:23:f0:3e:17:36:ff:e3:1e:2e:3a:ed:31:85:93:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:51:87:5C:24:2D:F7:47:2F:5D:7C:67:5B:1A:DD:84:A9:4B:8B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.100.0/24
                  103.79.102.0/24
                  103.117.219.0/24
                  103.135.201.0-103.135.203.255
                  103.141.116.0/23
                  103.160.237.0/24
                  103.174.140.0/23
                  103.181.92.0/24
                IPv6:
                  2001:df6:5280::/48
                  2407:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:f6:f5:0a:c7:f7:12:07:62:3c:1d:df:c1:ef:ec:c3:11:
         80:91:2b:51:ee:f1:e4:a7:ac:e8:58:19:28:e6:d6:27:3d:5a:
         f7:ad:5a:dd:8a:2e:e1:86:3d:c8:80:43:b8:ed:11:c8:04:2b:
         40:d7:53:a4:e9:7d:e5:5c:a3:1e:71:7e:5c:59:ac:87:36:8c:
         25:30:7e:9a:7a:14:39:ea:63:c7:fb:da:0c:66:88:52:d5:43:
         25:9b:6c:f8:81:31:56:e8:fa:7d:33:1f:4f:0c:51:00:28:57:
         da:d7:6d:c1:a3:18:6e:63:07:e9:72:13:ad:79:7f:9c:77:25:
         ef:8f:12:14:61:33:6d:46:bb:a8:78:59:8c:62:1a:7e:b3:48:
         2b:49:ca:79:0f:1d:77:3b:6c:d5:f7:96:bc:3a:54:6f:7b:56:
         6e:96:30:39:f4:34:ea:50:40:c0:85:5d:a4:9e:41:26:f3:b3:
         a0:e0:42:d0:aa:95:a7:fe:d5:e6:07:04:95:77:6b:11:8f:7c:
         7d:a0:ff:4b:40:ef:97:a0:3f:c7:55:d6:4b:ae:64:21:13:03:
         44:48:70:a3:c8:9a:8c:46:4b:93:14:88:d6:f1:48:c3:52:5e:
         56:79:50:fc:1c:e8:8d:0b:01:83:75:4f:56:4b:51:f7:92:cc:
         07:3a:93:ec
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAPI3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDYwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUwN2EtNzI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKBugyPrhn03jD+z2Dtr/uTBuIGnE2/znasTvMdxABAlSZZmQbFKZoMQXxWN
+EJMZ4Z0WjyBKLsYLeo6KgNTd5UFnJ9kasly0wivg1C2AOYL6iuUSuRuMAXBcNN9
L/uPY0rZUTLgTvFTG6F+CysJ4fw2xVelFWxX9yMOZwxE2pQ9SzUcHdSTiVhOZ2fD
2H14X9L8z6CEagvgw5IM8xQnJfXa4ma6/wkByYryVrIvEW5p2qURZB6QA0mSuBF2
ISOgfmB3S+C0IIfrWbzjFCi4RMore+F6l5TnSlOpdi6/lZiePWZXlrEqOeoFWNPU
GENOeCPwPhc2/+MeLjrtMYWTA9MCAwEAAaOCAqowggKmMB0GA1UdDgQWBBQMSlGH
XCQt90cvXXxnWxrdhKlLizAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q0MTkxMjdF
N0Y4RjExRUU4RTEyMkIyOEM0RjlBRTAyLnJvYTBpBggrBgEFBQcBBwEB/wRaMFgw
PgQCAAEwOAMEAGdPZAMEAGdPZgMEAGd12zAMAwQAZ4fJAwQCZ4fIAwQBZ410AwQA
Z6DtAwQBZ66MAwQAZ7VcMBYEAgACMBADBwAgAQ32UoADBQAkBzXAMA0GCSqGSIb3
DQEBCwUAA4IBAQA56fb1Csf3EgdiPB3fwe/swxGAkStR7vHkp6zoWBko5tYnPVr3
rVrdii7hhj3IgEO47RHIBCtA11Ok6X3lXKMecX5cWayHNowlMH6aehQ56mPH+9oM
ZohS1UMlm2z4gTFW6Pp9Mx9PDFEAKFfa123BoxhuYwfpchOteX+cdyXvjxIUYTNt
RruoeFmMYhp+s0grScp5Dx13O2zV95a8OlRve1ZuljA59DTqUEDAhV2knkEm87Og
4ELQqpWn/tXmBwSVd2sRj3x9oP9LQO+XoD/HVdZLrmQhEwNESHCjyJqMRkuTFIjW
8UjDUl5WeVD8HOiNCwGDdU9WS1H3kswHOpPs
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:42 2026 by rpki-client