Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa
File:                     D65557A20BE411EDA3980F75C4F9AE02.roa (raw, json)
Hash identifier:          q5Ko9CtNO+fbz8DbzS8ptuZqGtVHdy1YGl1TOOB43aE=
Subject key identifier:   4A:12:02:3B:40:22:81:45:70:7A:E9:B2:9E:7D:D1:CE:E8:2D:59:B1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFDB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:46:17 +0000
ROA not before:           Mon 06 Jul 2026 16:46:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135236
IP address blocks:        103.189.56.0/23 maxlen: 24
                          2001:df5:f0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61403 (0xefdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:46:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdbd9-dba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:c6:ea:c0:3e:6f:6a:da:16:7a:49:7c:3a:
                    a9:fb:e8:0d:ca:6a:6c:47:8a:48:76:47:88:6e:b8:
                    d8:23:2e:df:a1:39:8b:d6:a1:57:dd:a0:15:a7:fe:
                    5d:4c:dd:5b:43:b5:2c:64:7e:cc:fc:cb:94:1f:fc:
                    3f:37:11:c8:e2:1a:20:0b:f7:52:e5:0f:97:ac:c9:
                    4b:b5:01:6b:64:5a:63:96:d2:8f:45:4f:bc:0f:b7:
                    fc:24:1f:cb:4e:d1:4d:1a:37:56:2c:76:3b:cd:f8:
                    ef:27:e9:16:47:6e:45:a8:b3:79:52:b6:a8:14:d8:
                    1b:8b:cc:3a:39:60:cf:3b:95:73:33:5a:fa:92:44:
                    d3:d1:c6:6b:5a:ac:e3:1f:aa:5a:9c:cf:ef:6c:c8:
                    37:de:2b:c8:de:20:9f:fa:a6:3d:79:ea:31:35:04:
                    f7:af:bc:ed:c4:72:3f:fe:12:79:a4:34:a6:90:b7:
                    0d:0a:43:f6:7a:5a:af:6f:d7:1a:8e:ac:cf:ad:36:
                    d2:bf:e8:64:8c:03:7c:9f:c1:56:64:da:f8:14:ff:
                    a5:96:d7:9e:38:59:97:7d:d8:0a:06:a7:bb:83:18:
                    6e:08:30:a8:0d:01:3c:6a:a9:8c:02:7a:cd:9c:da:
                    9c:c9:8a:5d:66:91:50:14:d7:25:e8:77:fe:19:b1:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:12:02:3B:40:22:81:45:70:7A:E9:B2:9E:7D:D1:CE:E8:2D:59:B1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.56.0/23
                IPv6:
                  2001:df5:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:71:b9:95:89:f4:0d:b0:8c:99:8d:e0:c1:e9:da:64:43:
         82:29:6a:54:d1:55:0a:77:82:ee:51:18:36:92:67:25:67:f1:
         19:03:cb:b9:04:77:ed:87:c4:b9:c4:09:1d:c1:09:c1:07:51:
         60:5d:e1:19:8a:34:99:13:53:4f:36:b2:de:e3:de:1c:5f:68:
         85:0d:d6:2c:72:3f:79:bc:2c:6e:88:21:f7:64:ba:3b:81:49:
         f9:0a:60:54:10:a6:d0:e7:9a:d2:63:86:80:7d:15:8f:07:3e:
         1f:2c:ef:90:4f:79:df:97:42:f9:ae:9a:77:24:80:5e:40:f5:
         11:be:a3:8e:0f:c7:9e:7f:e7:b8:d6:08:d2:f6:b2:90:d0:b0:
         dc:78:91:b3:2e:a9:3d:56:83:9c:20:98:1f:2f:3b:91:0e:e0:
         9a:2d:5e:2a:1c:0d:f7:13:dc:91:56:9e:14:68:ab:d8:ff:32:
         7a:54:e6:c3:c9:72:b3:9b:18:9c:48:ad:d0:c3:ef:b4:81:24:
         cf:d5:1a:c2:52:3f:f1:7e:74:ae:1b:bf:9e:36:cb:00:76:b0:
         76:34:d7:5d:2e:70:73:d8:49:24:2a:a8:95:30:8b:93:37:d1:
         a2:4c:e1:45:61:95:00:88:b3:fe:eb:87:68:8f:97:33:95:83:
         77:af:54:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAO/bMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDYxN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiZDktZGJhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALesxurAPm9q2hZ6SXw6qfvoDcpqbEeKSHZHiG642CMu36E5i9ahV92gFaf+
XUzdW0O1LGR+zPzLlB/8PzcRyOIaIAv3UuUPl6zJS7UBa2RaY5bSj0VPvA+3/CQf
y07RTRo3Vix2O8347yfpFkduRaizeVK2qBTYG4vMOjlgzzuVczNa+pJE09HGa1qs
4x+qWpzP72zIN94ryN4gn/qmPXnqMTUE96+87cRyP/4SeaQ0ppC3DQpD9npar2/X
Go6sz6020r/oZIwDfJ/BVmTa+BT/pZbXnjhZl33YCganu4MYbggwqA0BPGqpjAJ6
zZzanMmKXWaRUBTXJeh3/hmxL68CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRKEgI7
QCKBRXB66bKefdHO6C1ZsTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2NTU1N0Ey
MEJFNDExRURBMzk4MEY3NUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWe9ODAPBAIAAjAJAwcAIAEN9fDAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCxHG5lYn0DbCMmY3gwenaZEOCKWpU0VUKd4LuURg2kmclZ/EZA8u5BHfth8S5
xAkdwQnBB1FgXeEZijSZE1NPNrLe494cX2iFDdYscj95vCxuiCH3ZLo7gUn5CmBU
EKbQ55rSY4aAfRWPBz4fLO+QT3nfl0L5rpp3JIBeQPURvqOOD8eef+e41gjS9rKQ
0LDceJGzLqk9VoOcIJgfLzuRDuCaLV4qHA33E9yRVp4UaKvY/zJ6VObDyXKzmxic
SK3Qw++0gSTP1RrCUj/xfnSuG7+eNssAdrB2NNddLnBz2EkkKqiVMIuTN9GiTOFF
YZUAiLP+64doj5czlYN3r1Qv
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:52 2026 by rpki-client