Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
File:                     E1DA593EF22511EC88BA5369C4F9AE02.roa (raw, json)
Hash identifier:          VY+uOlk08FZkivSsUYIh/JDdO20x70HPplI2sJEvcUs=
Subject key identifier:   D3:6E:87:46:C9:95:E4:98:F0:50:72:4D:B8:83:D9:C2:45:48:85:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E241
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:35:43 +0000
ROA not before:           Sun 31 May 2026 16:35:43 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133235
IP address blocks:        103.231.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57921 (0xe241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:35:43 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c635f-8c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:82:ac:8f:1c:dd:8b:b8:53:b9:76:64:26:
                    60:26:3b:25:a6:93:b8:fd:a4:bb:72:ce:eb:35:ed:
                    23:08:1f:56:85:66:11:1d:27:13:14:43:73:23:ef:
                    90:b5:45:d6:1b:7b:80:39:47:c2:45:52:0b:49:f9:
                    5c:d7:0a:f6:72:56:d8:95:a0:46:14:1d:e7:b6:ef:
                    59:be:da:2f:af:46:98:3a:03:b8:50:e0:ee:f7:3f:
                    90:fe:da:d1:34:90:0a:ae:ef:ca:ad:e2:61:33:bf:
                    cf:60:7f:1e:31:8d:aa:a0:64:2a:a1:95:15:6a:2c:
                    25:d0:54:e2:fa:70:cd:52:97:38:31:39:e8:90:ab:
                    69:eb:e7:61:7a:7f:7b:ea:d2:82:39:a5:f6:fb:8d:
                    90:39:39:c8:66:b3:86:ab:33:c5:ba:3b:a9:fc:32:
                    35:7c:62:02:80:ae:a8:20:33:37:33:a3:13:10:b9:
                    a0:98:02:21:ad:62:70:6c:6b:17:8b:5f:73:12:8a:
                    86:d5:58:50:91:6f:8b:76:86:46:3e:29:ca:86:4a:
                    1e:5e:82:01:b9:c4:1e:36:e2:c5:fc:34:49:50:89:
                    17:8d:98:e1:db:03:88:da:0d:f6:fc:f2:a2:04:f9:
                    0f:06:e7:d8:16:b7:ca:d9:e1:ef:00:99:2b:a1:f5:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:87:46:C9:95:E4:98:F0:50:72:4D:B8:83:D9:C2:45:48:85:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:d8:dd:40:72:c6:78:d2:70:57:75:e5:c9:8f:ee:4b:1d:
         2a:10:2c:fa:76:cd:e7:6b:b2:9d:27:da:c4:8a:8e:fb:5b:6e:
         10:9f:68:37:ae:98:62:8c:8d:f5:45:67:bf:9f:46:a2:ee:96:
         61:a2:86:29:cc:5c:a8:22:c3:f4:da:40:a0:24:c9:e5:5f:50:
         72:ed:21:db:49:39:08:47:84:48:37:71:24:04:c5:35:95:d9:
         9d:f5:d6:df:e0:0b:fa:7d:c2:b8:06:9b:fb:23:76:2e:be:9b:
         9a:ac:11:cb:ad:46:7c:64:78:6c:9b:a9:82:84:61:9c:0c:40:
         36:5d:97:2c:60:1c:7b:0f:85:e8:2e:34:c0:a4:65:82:0c:39:
         4b:52:3f:eb:a0:ac:a0:22:7a:12:50:1e:80:eb:f9:3e:8a:66:
         b6:82:f9:91:21:db:32:a2:dd:31:3a:06:ba:0f:81:38:82:37:
         72:0d:94:c2:25:bd:4d:92:75:49:fc:7c:05:48:28:c9:fc:60:
         7f:ab:89:54:c8:88:a1:a0:dc:d7:7b:18:03:60:94:3e:3e:84:
         77:b1:76:e5:ad:4c:30:d5:d7:1c:b5:a7:f4:b9:42:c4:ef:11:
         46:20:6e:aa:8d:47:d5:95:d2:31:b7:ba:12:28:6f:ff:e5:c8:
         15:d1:27:36
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOJBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzU0M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzNWYtOGM2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYqgqyPHN2LuFO5dmQmYCY7JaaTuP2ku3LO6zXtIwgfVoVmER0nExRDcyPv
kLVF1ht7gDlHwkVSC0n5XNcK9nJW2JWgRhQd57bvWb7aL69GmDoDuFDg7vc/kP7a
0TSQCq7vyq3iYTO/z2B/HjGNqqBkKqGVFWosJdBU4vpwzVKXODE56JCraevnYXp/
e+rSgjml9vuNkDk5yGazhqszxbo7qfwyNXxiAoCuqCAzNzOjExC5oJgCIa1icGxr
F4tfcxKKhtVYUJFvi3aGRj4pyoZKHl6CAbnEHjbixfw0SVCJF42Y4dsDiNoN9vzy
ogT5Dwbn2Ba3ytnh7wCZK6H1Wy8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTTbodG
yZXkmPBQck24g9nCRUiFNjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UxREE1OTNF
RjIyNTExRUM4OEJBNTM2OUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWfnIDANBgkqhkiG9w0BAQsFAAOCAQEAtkrY3UByxnjScFd15cmP
7ksdKhAs+nbN52uynSfaxIqO+1tuEJ9oN66YYoyN9UVnv59Gou6WYaKGKcxcqCLD
9NpAoCTJ5V9Qcu0h20k5CEeESDdxJATFNZXZnfXW3+AL+n3CuAab+yN2Lr6bmqwR
y61GfGR4bJupgoRhnAxANl2XLGAcew+F6C40wKRlggw5S1I/66CsoCJ6ElAegOv5
PopmtoL5kSHbMqLdMToGug+BOII3cg2UwiW9TZJ1Sfx8BUgoyfxgf6uJVMiIoaDc
13sYA2CUPj6Ed7F25a1MMNXXHLWn9LlCxO8RRiBuqo1H1ZXSMbe6Eihv/+XIFdEn
Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:24 2026 by rpki-client