Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
File:                     EF8735005E5211EC95FF2E63C4F9AE02.roa (raw, json)
Hash identifier:          5nZEeXnK36lO31LXQKKFeX7kBc4eTJxc8eY4XYb9tgM=
Subject key identifier:   BF:DC:97:51:57:EF:4E:92:41:D3:7C:DE:B4:AA:AE:CF:A7:6A:84:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E4F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:58:01 +0000
ROA not before:           Sun 31 May 2026 16:58:01 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136713
IP address blocks:        103.103.92.0/22 maxlen: 24
                          2401:2c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58612 (0xe4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:58:01 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6899-79ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:7c:86:ca:0f:a8:59:7a:b7:ef:a6:71:27:
                    cf:3c:b9:70:e6:86:87:f7:13:d0:dc:7b:2e:a7:3c:
                    7d:fb:46:0a:30:0e:20:62:5b:7f:d0:bf:7d:58:7a:
                    7c:8c:35:db:7b:73:5d:21:79:1c:bd:27:fa:e6:b6:
                    6c:ad:18:63:f7:df:8e:1d:a3:eb:3a:3a:3a:3e:05:
                    99:44:d4:39:ee:d9:b3:37:60:e6:70:67:c1:76:74:
                    e6:b4:bc:5c:f9:0b:24:9a:b4:12:5c:39:b6:7a:d9:
                    ab:bd:bf:26:18:8e:cf:e0:68:cc:8e:06:70:07:57:
                    94:71:9b:b4:44:0d:82:6a:ef:68:fa:3d:8a:81:1d:
                    05:d5:e6:93:8a:14:6e:ad:fa:00:36:51:c0:5b:17:
                    61:69:c0:b1:dd:d1:25:51:3e:bf:04:2a:5e:8b:8e:
                    b7:8f:66:a5:15:f4:78:00:c4:bb:9f:5a:9f:17:d0:
                    a3:0b:a2:82:1e:74:6b:86:e0:59:2d:ea:53:81:4f:
                    08:9f:01:7b:10:cc:16:65:a6:81:d6:31:7c:60:fc:
                    39:db:22:9b:ee:46:2e:ac:59:f9:b8:c2:16:24:33:
                    40:51:e8:0d:dd:c3:68:c9:7b:c2:4d:95:19:19:d5:
                    75:13:46:8a:83:ae:01:ed:47:60:b9:fa:68:9f:f6:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:97:51:57:EF:4E:92:41:D3:7C:DE:B4:AA:AE:CF:A7:6A:84:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8735005E5211EC95FF2E63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.92.0/22
                IPv6:
                  2401:2c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:05:71:81:b8:a0:67:59:2d:cf:ec:0d:00:64:53:16:bd:30:
         36:97:c9:08:79:d9:80:29:25:8b:39:6c:16:ba:ff:33:34:6a:
         1c:44:1b:7b:2b:5e:be:cd:3f:84:8a:68:89:fb:69:d9:1c:e1:
         2e:ce:ac:dc:0a:a7:ff:b1:6a:7e:29:6a:ed:5e:00:5a:0a:d7:
         eb:4d:a2:af:72:29:6a:25:06:6f:18:27:e1:66:3b:80:4e:c0:
         c8:f4:83:79:22:a3:1c:23:a8:1b:98:8a:5e:33:46:21:b9:f4:
         b3:46:06:4a:57:2f:19:43:76:55:5b:5f:93:9e:5e:1c:c8:97:
         da:f9:e3:24:6e:4c:27:de:ff:30:d6:83:70:0b:55:f7:7c:15:
         3c:2b:e5:86:3b:99:d4:5b:c9:e8:f8:e6:ce:ee:f9:93:cb:9f:
         f0:a4:a0:4b:14:32:68:b2:bd:5c:20:0a:87:7f:bf:01:c9:f3:
         08:be:2b:a3:fc:6f:7d:ff:1c:07:01:f1:71:26:7f:d8:b2:99:
         42:ff:60:84:c1:98:a6:24:81:ec:27:34:b8:d3:6f:24:fc:e0:
         41:d1:c9:ce:9e:01:35:6f:fc:f9:0a:ae:fc:4e:1a:95:6c:c3:
         3c:d7:70:a6:09:fd:ef:e4:ee:27:03:0a:1b:ef:95:eb:ac:f9:
         69:a8:5c:37
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOT0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTgwMVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4OTktNzllZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhWfIbKD6hZerfvpnEnzzy5cOaGh/cT0Nx7Lqc8fftGCjAOIGJbf9C/fVh6
fIw123tzXSF5HL0n+ua2bK0YY/ffjh2j6zo6Oj4FmUTUOe7Zszdg5nBnwXZ05rS8
XPkLJJq0Elw5tnrZq72/JhiOz+BozI4GcAdXlHGbtEQNgmrvaPo9ioEdBdXmk4oU
bq36ADZRwFsXYWnAsd3RJVE+vwQqXouOt49mpRX0eADEu59anxfQowuigh50a4bg
WS3qU4FPCJ8BexDMFmWmgdYxfGD8Odsim+5GLqxZ+bjCFiQzQFHoDd3DaMl7wk2V
GRnVdRNGioOuAe1HYLn6aJ/2/WsCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBS/3JdR
V+9OkkHTfN60qq7Pp2qEYDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGODczNTAw
NUU1MjExRUM5NUZGMkU2M0M0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAmdnXDANBAIAAjAHAwUAJAEsYDANBgkqhkiG9w0BAQsFAAOCAQEA
ZAVxgbigZ1ktz+wNAGRTFr0wNpfJCHnZgCklizlsFrr/MzRqHEQbeytevs0/hIpo
iftp2RzhLs6s3Aqn/7Fqfilq7V4AWgrX602ir3IpaiUGbxgn4WY7gE7AyPSDeSKj
HCOoG5iKXjNGIbn0s0YGSlcvGUN2VVtfk55eHMiX2vnjJG5MJ97/MNaDcAtV93wV
PCvlhjuZ1FvJ6Pjmzu75k8uf8KSgSxQyaLK9XCAKh3+/AcnzCL4ro/xvff8cBwHx
cSZ/2LKZQv9ghMGYpiSB7Cc0uNNvJPzgQdHJzp4BNW/8+Qqu/E4alWzDPNdwpgn9
7+TuJwMKG++V66z5aahcNw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:28 2026 by rpki-client