Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5CDB600F5BC11EF8965AD38C4F9AE02.roa
File:                     F5CDB600F5BC11EF8965AD38C4F9AE02.roa (raw, json)
Hash identifier:          8bXBToVsq/YFdH5hAanRgkYIqYQi/Q8S0BDKYWFtWxY=
Subject key identifier:   78:78:15:6B:45:D2:73:0E:72:1F:EE:CE:09:F6:FF:1C:34:CD:F8:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F258
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5CDB600F5BC11EF8965AD38C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:07:05 +0000
ROA not before:           Mon 06 Jul 2026 17:07:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139517
IP address blocks:        103.143.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62040 (0xf258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:07:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be0b9-f1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:5e:97:ec:6a:82:a7:ed:c7:67:e8:ec:ef:
                    9b:68:02:31:8d:5c:38:0a:0a:e3:0d:ac:f9:a6:3f:
                    51:91:69:7e:55:a1:3d:a6:f6:67:c9:82:19:57:45:
                    a1:51:ec:9a:e7:20:30:d8:7b:a1:37:a3:70:91:44:
                    67:69:d4:66:b1:f8:64:80:2d:da:68:00:82:6a:e4:
                    8c:ea:48:ec:18:71:3f:ad:62:60:34:cb:d6:a9:1e:
                    62:4b:c8:e6:41:c1:e8:94:c7:27:65:d3:48:2d:2c:
                    bd:ed:74:7a:6b:3b:7c:97:2d:cd:7f:82:0d:7e:83:
                    fd:6d:c7:64:cf:f0:f7:a3:a6:bc:c4:a1:ab:72:11:
                    ea:51:6a:9f:72:2f:f3:1c:b5:7f:2b:e5:be:0c:0b:
                    44:63:6c:7e:05:00:fe:45:5c:de:44:ab:c2:dc:6f:
                    99:58:60:f9:74:92:31:18:4e:93:e2:86:57:6d:a6:
                    9f:5b:34:85:f6:33:97:03:6a:e6:93:07:58:4a:56:
                    93:de:e2:7b:f8:b9:e0:9f:a4:d5:9f:80:fa:e6:85:
                    c5:38:f1:a9:41:e2:8c:84:f4:be:2c:30:b2:0d:b8:
                    bd:3f:8c:51:73:1b:d9:45:f5:e6:24:81:7c:b7:3f:
                    d5:f0:d2:4c:35:81:86:9f:06:b4:e8:fb:10:a7:91:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:15:6B:45:D2:73:0E:72:1F:EE:CE:09:F6:FF:1C:34:CD:F8:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5CDB600F5BC11EF8965AD38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:3f:05:2a:ee:f2:2a:f4:30:f6:94:d2:75:72:18:a4:e4:
         7c:6a:1a:af:9f:23:19:f6:aa:13:1d:e3:92:68:85:25:1f:49:
         2a:0e:67:38:6a:f5:1f:79:88:c3:84:ff:9a:13:e4:03:7c:e1:
         26:17:0c:5b:49:82:74:2b:c4:c4:6a:94:b1:f7:8e:66:70:c4:
         68:f4:21:12:56:c2:a3:c2:d7:b9:5c:4e:a9:b4:52:1e:93:22:
         69:c5:83:a4:fc:6f:b8:71:d3:a1:d7:a3:7c:22:89:88:55:9b:
         ec:bf:3f:53:59:d4:5b:49:0d:60:51:80:8a:36:5f:f3:f6:56:
         53:7a:9e:d4:88:c7:62:4a:1c:da:ce:55:39:aa:2f:17:61:c6:
         5e:fe:48:d3:bb:da:8e:23:2f:96:89:c2:6f:92:bc:92:bd:c2:
         9b:92:e5:70:7c:ec:3d:69:93:47:72:de:e3:b7:05:b8:9a:3a:
         a4:74:08:61:1b:90:0d:72:b0:54:f9:27:4c:e1:df:e8:10:3b:
         ef:46:6e:33:76:e5:21:8b:04:50:da:fe:33:62:30:c7:06:56:
         aa:98:2a:e9:97:88:86:93:93:ba:7f:c7:a2:49:79:8f:7c:55:
         97:37:10:28:1e:ef:78:2f:14:01:c3:00:59:16:84:80:77:82:
         1e:58:05:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPJYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MDcwNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUwYjktZjFhMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANJrXpfsaoKn7cdn6Ozvm2gCMY1cOAoK4w2s+aY/UZFpflWhPab2Z8mCGVdF
oVHsmucgMNh7oTejcJFEZ2nUZrH4ZIAt2mgAgmrkjOpI7BhxP61iYDTL1qkeYkvI
5kHB6JTHJ2XTSC0sve10ems7fJctzX+CDX6D/W3HZM/w96OmvMShq3IR6lFqn3Iv
8xy1fyvlvgwLRGNsfgUA/kVc3kSrwtxvmVhg+XSSMRhOk+KGV22mn1s0hfYzlwNq
5pMHWEpWk97ie/i54J+k1Z+A+uaFxTjxqUHijIT0viwwsg24vT+MUXMb2UX15iSB
fLc/1fDSTDWBhp8GtOj7EKeRKx8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR4eBVr
RdJzDnIf7s4J9v8cNM34+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1Q0RCNjAw
RjVCQzExRUY4OTY1QUQzOEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGePbTANBgkqhkiG9w0BAQsFAAOCAQEAKG8/BSru8ir0MPaU0nVy
GKTkfGoar58jGfaqEx3jkmiFJR9JKg5nOGr1H3mIw4T/mhPkA3zhJhcMW0mCdCvE
xGqUsfeOZnDEaPQhElbCo8LXuVxOqbRSHpMiacWDpPxvuHHTodejfCKJiFWb7L8/
U1nUW0kNYFGAijZf8/ZWU3qe1IjHYkoc2s5VOaovF2HGXv5I07vajiMvlonCb5K8
kr3Cm5LlcHzsPWmTR3Le47cFuJo6pHQIYRuQDXKwVPknTOHf6BA770ZuM3blIYsE
UNr+M2IwxwZWqpgq6ZeIhpOTun/Hokl5j3xVlzcQKB7veC8UAcMAWRaEgHeCHlgF
Cw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:28 2026 by rpki-client