Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1D1D246347511F0AB6A061CC4F9AE02.roa
File:                     F1D1D246347511F0AB6A061CC4F9AE02.roa (raw, json)
Hash identifier:          h2woUMe7Wmr1EGNDf71T/THmnXor8NakqqebA4ONMc0=
Subject key identifier:   C8:C6:0A:1C:9E:33:A4:A7:12:56:D4:96:28:95:BD:72:88:A8:91:40
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E975
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1D1D246347511F0AB6A061CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:36:14 +0000
ROA not before:           Sun 31 May 2026 17:36:14 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150616
IP address blocks:        103.77.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59765 (0xe975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:36:14 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c718e-0dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:68:a2:21:c8:1e:cc:58:27:d0:85:e4:48:
                    30:af:8f:20:db:25:e2:21:58:5f:65:db:f7:39:49:
                    bf:54:bf:14:12:8e:b6:73:d7:6f:7d:65:70:19:c4:
                    e4:73:ee:de:73:bf:7a:bd:4f:ed:75:d8:df:a7:ff:
                    ec:f0:6d:72:73:48:f7:c8:0d:52:dc:a7:c7:25:0f:
                    71:fa:89:d0:a7:ea:77:77:4d:87:ca:02:47:0c:73:
                    3f:8f:f4:6e:ac:a0:a2:d7:33:16:a1:35:b8:56:07:
                    8e:96:90:87:9e:80:9e:d1:6f:75:18:0b:c0:34:76:
                    45:d0:4d:bb:01:ef:5d:56:41:36:c7:a6:3e:f3:40:
                    f0:e5:73:06:ab:f5:af:00:c9:7f:2f:2e:82:3b:1d:
                    17:f2:9e:54:6e:64:60:61:cb:7b:8f:4a:d7:84:71:
                    ed:dd:0e:c1:ab:2d:5d:31:61:cb:82:db:9f:e2:71:
                    de:01:7b:bc:19:7c:08:06:3e:f4:5d:19:59:e5:7d:
                    2f:5f:4b:4d:a8:6e:46:0d:b3:41:17:99:d5:1b:3f:
                    46:aa:05:3c:a9:bc:fc:62:f2:8e:d0:26:fb:3f:1c:
                    aa:fd:4b:fa:07:e1:bc:9d:aa:f2:ef:12:9e:3e:48:
                    11:79:e1:2c:ea:d6:9e:3c:18:b9:3b:1e:fa:cf:41:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C6:0A:1C:9E:33:A4:A7:12:56:D4:96:28:95:BD:72:88:A8:91:40
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1D1D246347511F0AB6A061CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:4e:3a:ca:96:62:b9:b0:64:09:47:c3:c7:ce:2d:67:b2:
         4c:1d:f8:fc:96:18:83:87:20:aa:b0:78:66:dd:4f:d6:dd:4a:
         89:ee:66:9a:43:6b:49:b1:f9:07:23:61:1d:33:91:53:b6:af:
         74:f5:c9:e2:1b:8b:d4:dc:6d:1d:ac:6f:e0:f2:1e:0d:3f:b2:
         58:2b:f1:e7:28:13:1e:41:b3:84:7b:bc:72:89:1e:f5:af:87:
         93:eb:43:60:1b:be:93:80:e7:b0:bc:f6:d1:9e:bc:31:9d:36:
         4b:a2:c1:26:e6:d6:3d:52:41:ab:23:fe:8f:7e:a2:5f:e4:3b:
         18:f2:91:84:35:37:38:dc:29:57:73:24:35:b6:0e:20:2e:48:
         1d:b7:52:83:d2:1a:39:60:bf:9e:72:5d:2a:5d:d3:27:f5:21:
         42:2f:2e:2e:01:16:86:5c:18:76:e4:18:67:ef:6f:b5:2f:1e:
         44:13:4d:92:ad:15:0a:d9:d9:84:b7:d9:86:69:0f:47:de:6c:
         81:b9:bc:72:ea:b1:00:15:62:79:19:71:cc:2d:8c:60:9e:2c:
         a0:2c:63:d2:e7:7a:17:61:b2:43:cf:8d:0b:56:24:2f:38:69:
         d0:76:86:24:0b:30:6e:5e:d6:59:6a:71:9d:eb:46:60:32:bc:
         f8:c6:57:99
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOl1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzYxNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxOGUtMGRjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANjPaKIhyB7MWCfQheRIMK+PINsl4iFYX2Xb9zlJv1S/FBKOtnPXb31lcBnE
5HPu3nO/er1P7XXY36f/7PBtcnNI98gNUtynxyUPcfqJ0Kfqd3dNh8oCRwxzP4/0
bqygotczFqE1uFYHjpaQh56AntFvdRgLwDR2RdBNuwHvXVZBNsemPvNA8OVzBqv1
rwDJfy8ugjsdF/KeVG5kYGHLe49K14Rx7d0OwastXTFhy4Lbn+Jx3gF7vBl8CAY+
9F0ZWeV9L19LTahuRg2zQReZ1Rs/RqoFPKm8/GLyjtAm+z8cqv1L+gfhvJ2q8u8S
nj5IEXnhLOrWnjwYuTse+s9BS00CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTIxgoc
njOkpxJW1JYolb1yiKiRQDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YxRDFEMjQ2
MzQ3NTExRjBBQjZBMDYxQ0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWdNdjANBgkqhkiG9w0BAQsFAAOCAQEAWbhOOsqWYrmwZAlHw8fO
LWeyTB34/JYYg4cgqrB4Zt1P1t1Kie5mmkNrSbH5ByNhHTORU7avdPXJ4huL1Nxt
Haxv4PIeDT+yWCvx5ygTHkGzhHu8coke9a+Hk+tDYBu+k4DnsLz20Z68MZ02S6LB
JubWPVJBqyP+j36iX+Q7GPKRhDU3ONwpV3MkNbYOIC5IHbdSg9IaOWC/nnJdKl3T
J/UhQi8uLgEWhlwYduQYZ+9vtS8eRBNNkq0VCtnZhLfZhmkPR95sgbm8cuqxABVi
eRlxzC2MYJ4soCxj0ud6F2GyQ8+NC1YkLzhp0HaGJAswbl7WWWpxnetGYDK8+MZX
mQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:58 2026 by rpki-client