Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa
File:                     F028710643D311ED8F6CD311C4F9AE02.roa (raw, json)
Hash identifier:          y04QRClERAJhoRCJTD+BBdKnr4C7inBwaYZ7mLKycyE=
Subject key identifier:   37:B8:35:60:93:18:33:9F:FA:35:42:F8:7E:6D:29:24:51:5E:A1:2E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:40:39 +0000
ROA not before:           Sun 31 May 2026 16:40:39 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134008
IP address blocks:        103.56.224.0/24 maxlen: 24
                          103.56.225.0/24 maxlen: 24
                          103.56.226.0/24 maxlen: 24
                          103.56.227.0/24 maxlen: 24
                          103.116.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58074 (0xe2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:40:39 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6487-a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:70:be:9c:8d:58:0c:3b:93:08:21:41:3e:
                    dd:53:5a:e8:82:06:89:fc:07:7e:a6:4c:29:0c:8f:
                    89:78:c2:70:48:3b:68:f9:0b:7f:e2:43:3b:ed:fa:
                    ce:28:bd:9b:a0:d9:ec:96:f8:08:79:56:f6:9f:a5:
                    32:2a:02:ad:c9:64:a8:fd:b9:41:50:f5:31:d4:54:
                    f8:3c:f3:32:7a:de:94:68:0a:31:93:53:b2:2c:4e:
                    46:2e:f0:f7:0e:8d:ba:40:bf:b2:31:58:a0:d4:01:
                    2a:6d:89:0e:2f:2b:e4:63:99:60:58:d3:5b:1b:e6:
                    87:d0:57:bf:bf:a8:f0:04:d4:d1:ad:3b:1f:dc:0a:
                    f1:bf:2d:4e:35:e3:c6:38:fa:2b:dd:77:ba:30:9b:
                    6f:87:c7:f8:a9:3f:29:42:92:f8:62:dd:df:6c:d9:
                    eb:d3:f6:6f:63:5b:cb:4a:73:a8:d3:34:43:52:2b:
                    1e:82:9b:d5:fa:01:ae:83:08:95:df:60:a6:9e:dd:
                    fc:8d:10:1a:66:7e:80:b9:e9:67:e8:6b:b1:2b:cc:
                    8b:b2:de:cf:93:7b:c3:31:3d:c5:a1:4a:db:c4:de:
                    c6:10:a9:b2:8c:01:3a:fb:51:2b:7c:66:ed:88:57:
                    13:da:b0:e4:c2:2b:aa:00:85:aa:ed:72:97:25:5e:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:35:60:93:18:33:9F:FA:35:42:F8:7E:6D:29:24:51:5E:A1:2E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F028710643D311ED8F6CD311C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.224.0/22
                  103.116.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:02:8f:e5:b4:a6:c8:a4:f6:44:99:97:ee:c8:6c:f6:68:
         16:4b:72:9a:4c:7a:da:14:2a:fa:b2:22:03:1e:97:7f:72:d2:
         24:f8:d2:1a:db:87:83:d6:31:3e:ae:9e:12:09:af:6f:95:36:
         a2:92:7c:c3:8b:fb:1e:ee:f1:45:08:62:8a:80:93:e7:da:89:
         1f:b3:65:95:5a:f7:17:56:05:14:44:62:ea:48:19:eb:13:d3:
         7a:ad:5a:80:d3:11:ca:75:6e:b4:99:a9:04:75:f6:84:ed:63:
         4e:43:34:30:0a:6f:39:bd:0f:f5:e1:9d:a8:f3:39:52:f7:7d:
         89:33:d1:98:dc:3b:b5:e5:fb:63:50:a9:f7:24:61:2c:a8:dd:
         5d:06:87:ca:29:b6:3d:bf:7a:98:f3:11:0b:0c:fb:87:ba:69:
         b7:5d:52:da:9b:b1:6c:b4:df:40:20:2d:73:03:dd:74:9a:0a:
         1d:73:73:5c:3c:e2:45:86:65:4b:d8:e1:5a:c2:5a:ea:d9:80:
         8c:2a:3d:b4:34:86:80:c1:fe:c7:0d:fc:98:bc:b1:80:2b:16:
         13:ff:f4:e4:e6:bd:52:7e:21:2a:09:d3:e1:02:42:37:91:af:
         ec:66:71:27:b0:b3:32:ce:04:7c:e6:66:2d:72:26:4c:1d:80:
         93:2c:fd:05
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAOLaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NDAzOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY0ODctYTgwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPIcL6cjVgMO5MIIUE+3VNa6IIGifwHfqZMKQyPiXjCcEg7aPkLf+JDO+36
zii9m6DZ7Jb4CHlW9p+lMioCrclkqP25QVD1MdRU+DzzMnrelGgKMZNTsixORi7w
9w6NukC/sjFYoNQBKm2JDi8r5GOZYFjTWxvmh9BXv7+o8ATU0a07H9wK8b8tTjXj
xjj6K913ujCbb4fH+Kk/KUKS+GLd32zZ69P2b2Nby0pzqNM0Q1IrHoKb1foBroMI
ld9gpp7d/I0QGmZ+gLnpZ+hrsSvMi7Lez5N7wzE9xaFK28TexhCpsowBOvtRK3xm
7YhXE9qw5MIrqgCFqu1ylyVeoTsCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQ3uDVg
kxgzn/o1Qvh+bSkkUV6hLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YwMjg3MTA2
NDNEMzExRUQ4RjZDRDMxMUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAmc44AMEAWd07jANBgkqhkiG9w0BAQsFAAOCAQEAbGcCj+W0psik
9kSZl+7IbPZoFktymkx62hQq+rIiAx6Xf3LSJPjSGtuHg9YxPq6eEgmvb5U2opJ8
w4v7Hu7xRQhiioCT59qJH7NllVr3F1YFFERi6kgZ6xPTeq1agNMRynVutJmpBHX2
hO1jTkM0MApvOb0P9eGdqPM5Uvd9iTPRmNw7teX7Y1Cp9yRhLKjdXQaHyim2Pb96
mPMRCwz7h7ppt11S2puxbLTfQCAtcwPddJoKHXNzXDziRYZlS9jhWsJa6tmAjCo9
tDSGgMH+xw38mLyxgCsWE//05Oa9Un4hKgnT4QJCN5Gv7GZxJ7CzMs4EfOZmLXIm
TB2Akyz9BQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:25 2026 by rpki-client