Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4D625C84DCA11F18320EFFBB1833773.roa
File:                     E4D625C84DCA11F18320EFFBB1833773.roa (raw, json)
Hash identifier:          1BKeL/QWXe06+8K+7USWEuUCZubdsGaBUbG++rb2xck=
Subject key identifier:   27:5E:D6:5A:7C:1A:52:DE:58:F1:E6:7C:97:E1:AC:3B:0D:C5:D7:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F238
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4D625C84DCA11F18320EFFBB1833773.roa
Signing time:             Mon 06 Jul 2026 17:06:04 +0000
ROA not before:           Mon 06 Jul 2026 17:06:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138799
IP address blocks:        103.138.126.0/24 maxlen: 24
                          103.141.110.0/23 maxlen: 24
                          210.79.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62008 (0xf238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:06:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be07c-d5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:99:fb:1f:ce:1a:a7:a0:ff:57:41:b9:e6:
                    4d:d3:b7:8e:a6:ef:d5:41:77:db:7c:ab:0e:8a:4a:
                    4d:7b:a0:ba:ac:94:4e:61:dd:ff:e9:44:2f:9b:a8:
                    8f:34:83:5c:ed:4c:27:d4:f9:d3:9a:36:3e:fd:3d:
                    ff:de:32:2f:97:6f:79:a6:60:fd:39:ce:5a:02:db:
                    01:90:61:97:ea:7f:b6:44:91:21:8c:91:3e:bf:19:
                    14:c3:15:01:d6:7b:fb:c5:af:50:a8:2e:89:74:af:
                    2e:04:3a:42:01:d0:91:b8:b8:13:a3:26:1c:ed:7c:
                    c9:5c:b9:c8:45:c3:4f:f0:5d:19:52:50:d5:f0:fd:
                    47:c8:85:b4:62:d5:39:34:c2:41:48:73:c0:7d:72:
                    28:f4:3b:b0:ca:b2:cf:70:8e:cf:85:2b:83:80:04:
                    66:15:57:51:70:81:fc:a1:dc:01:66:40:5d:e7:d1:
                    59:f0:b8:e8:fe:4f:b8:37:e6:83:ed:7b:1e:43:a6:
                    45:a4:38:50:1e:09:13:21:55:e9:db:05:b3:9e:a1:
                    de:bc:e0:78:43:9a:7a:1f:97:21:6d:bb:bd:8c:7c:
                    8d:45:fd:c7:a3:b9:0f:65:ae:ec:d4:fd:b6:f4:23:
                    5b:52:78:81:d6:7a:53:0d:88:aa:08:b9:af:d9:d0:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:D6:5A:7C:1A:52:DE:58:F1:E6:7C:97:E1:AC:3B:0D:C5:D7:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4D625C84DCA11F18320EFFBB1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.126.0/24
                  103.141.110.0/23
                  210.79.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:0d:69:77:37:e5:c1:4d:99:3b:07:1f:27:ae:c4:e0:0f:
         28:67:31:b0:45:c4:b8:11:92:cb:ef:27:ec:dd:d8:f6:a0:80:
         4a:fb:b0:a2:a5:e4:ea:11:34:00:d3:3e:3f:84:3d:7d:17:fc:
         ea:cf:63:8e:b2:42:59:17:83:fc:49:81:bd:48:0c:7c:af:32:
         04:2b:de:73:ef:5b:1c:bf:d1:d9:2d:87:4c:4e:2b:cb:c3:1b:
         f3:49:5f:09:e9:7c:a1:ff:9c:99:49:78:13:f7:25:9c:50:97:
         30:a8:78:c4:88:33:a6:9c:70:ad:92:32:e8:dc:f0:f6:82:4b:
         f7:1a:37:3a:9f:ed:29:ae:63:4a:7c:bd:27:63:b0:34:48:7d:
         03:f5:8c:fc:05:41:7e:64:9f:9f:00:23:f8:ec:6e:9f:ff:7f:
         ea:a0:08:3c:5b:a7:c9:6b:0e:48:50:7f:f5:92:e2:b8:08:55:
         31:3d:db:d2:25:e9:bc:c3:7c:63:88:1c:47:5f:3c:6b:d9:e9:
         5e:b8:c8:2f:d3:2e:67:cb:b7:e8:a9:3a:cc:90:14:ef:09:ae:
         3f:74:5a:a0:e2:d4:ad:19:65:66:a4:ed:37:f3:f2:44:64:43:
         13:a8:53:19:1c:bc:a3:e6:3b:85:fd:47:8f:77:e0:ed:ed:3e:
         59:6b:da:91
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIDAPI4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDYwNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUwN2MtZDViMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKjPmfsfzhqnoP9XQbnmTdO3jqbv1UF323yrDopKTXuguqyUTmHd/+lEL5uo
jzSDXO1MJ9T505o2Pv09/94yL5dveaZg/TnOWgLbAZBhl+p/tkSRIYyRPr8ZFMMV
AdZ7+8WvUKguiXSvLgQ6QgHQkbi4E6MmHO18yVy5yEXDT/BdGVJQ1fD9R8iFtGLV
OTTCQUhzwH1yKPQ7sMqyz3COz4Urg4AEZhVXUXCB/KHcAWZAXefRWfC46P5PuDfm
g+17HkOmRaQ4UB4JEyFV6dsFs56h3rzgeEOaeh+XIW27vYx8jUX9x6O5D2Wu7NT9
tvQjW1J4gdZ6Uw2Iqgi5r9nQlI8CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBQnXtZa
fBpS3ljx5nyX4aw7DcXXRzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U0RDYyNUM4
NERDQTExRjE4MzIwRUZGQkIxODMzNzczLnJvYTArBggrBgEFBQcBBwEB/wQcMBow
GAQCAAEwEgMEAGeKfgMEAWeNbgMEANJPmDANBgkqhkiG9w0BAQsFAAOCAQEAhfUN
aXc35cFNmTsHHyeuxOAPKGcxsEXEuBGSy+8n7N3Y9qCASvuwoqXk6hE0ANM+P4Q9
fRf86s9jjrJCWReD/EmBvUgMfK8yBCvec+9bHL/R2S2HTE4ry8Mb80lfCel8of+c
mUl4E/clnFCXMKh4xIgzppxwrZIy6Nzw9oJL9xo3Op/tKa5jSny9J2OwNEh9A/WM
/AVBfmSfnwAj+Oxun/9/6qAIPFunyWsOSFB/9ZLiuAhVMT3b0iXpvMN8Y4gcR188
a9npXrjIL9MuZ8u36Kk6zJAU7wmuP3RaoOLUrRllZqTtN/PyRGRDE6hTGRy8o+Y7
hf1Hj3fg7e0+WWvakQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:06 2026 by rpki-client