Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/E68BF368DD9911EF85614A53C4F9AE02.roa
File:                     E68BF368DD9911EF85614A53C4F9AE02.roa (raw, json)
Hash identifier:          4UtPt5B8hYyJD4hF93bs/vucykXruXCHxmeF8+IkVFE=
Subject key identifier:   41:21:B0:A8:A0:92:24:FF:63:51:A7:05:8E:38:23:0A:07:14:4D:57
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       08CF
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/E68BF368DD9911EF85614A53C4F9AE02.roa
Signing time:             Thu 14 May 2026 21:25:12 +0000
ROA not before:           Thu 14 May 2026 21:25:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137000
IP address blocks:        103.149.58.0/24 maxlen: 24
                          103.149.59.0/24 maxlen: 24
                          2405:e3c0::/32 maxlen: 32
                          2405:e3c0::/48 maxlen: 48
                          2405:e3c0:1::/48 maxlen: 48
                          2405:e3c0:2::/48 maxlen: 48
                          2405:e3c0:3::/48 maxlen: 48
                          2405:e3c0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: May 14 21:25:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a063db7-e351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:5b:fc:02:f7:87:f1:cf:81:5c:fc:2c:b3:
                    e6:84:e2:a9:e6:3e:f1:24:85:b3:be:57:97:d8:a1:
                    9a:2c:b5:7b:48:7b:ff:d6:bc:44:6e:67:d2:f7:51:
                    b3:65:7c:8d:a3:04:45:1b:86:ee:05:ac:b9:8d:05:
                    cd:f1:94:e6:62:05:52:a6:04:ba:c0:9e:6d:4c:88:
                    f4:f3:96:04:84:21:0d:30:75:6f:3e:07:b2:ca:1d:
                    da:8e:94:a1:04:a7:03:5e:c1:1f:3b:68:e6:40:0c:
                    b9:ee:6f:ed:59:e5:50:bf:4a:08:a8:c9:57:f8:98:
                    fe:8b:ed:cd:50:99:e0:ef:de:5d:c0:49:18:39:81:
                    f2:79:8b:68:57:ad:5f:5d:a4:7c:78:91:cb:4d:9c:
                    b3:e2:01:63:0b:73:0c:6f:6b:8a:e1:a0:d6:79:4b:
                    83:19:87:2a:cb:8e:ac:a8:13:74:5a:2f:18:0e:5e:
                    de:f7:01:49:8c:02:45:c6:91:60:9c:81:af:91:c4:
                    26:a4:1c:3e:87:8e:18:aa:ef:ae:76:59:b4:9f:79:
                    87:53:b5:47:35:bc:99:7b:d8:10:c1:55:5e:cd:3c:
                    01:bb:eb:79:e6:c8:af:a9:c0:e1:4c:03:21:11:e3:
                    08:10:c9:d4:3d:7e:cf:1c:af:cf:a7:e9:ef:a5:c9:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:B0:A8:A0:92:24:FF:63:51:A7:05:8E:38:23:0A:07:14:4D:57
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/E68BF368DD9911EF85614A53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.58.0/23
                IPv6:
                  2405:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:56:ad:aa:26:f3:01:cb:a5:a6:19:6a:62:89:6f:f2:bd:5e:
         80:15:e6:a1:4c:df:b5:bf:3d:53:0f:5d:d6:2d:ae:62:18:1e:
         0b:83:06:db:c4:b7:ae:55:41:fe:84:a2:51:0d:d3:38:32:ba:
         79:be:cb:23:7c:61:c2:ca:d9:fb:b4:e8:14:f8:d0:ea:ee:1a:
         6d:38:9b:cc:b0:1d:f6:a5:7c:eb:e4:da:19:4f:dc:d6:ce:fc:
         14:92:51:46:2d:c2:76:c7:10:c6:7f:79:d5:e5:16:80:c3:44:
         44:9a:aa:a4:32:85:78:05:02:57:02:f1:71:b2:64:65:86:ed:
         48:b7:a8:ec:a4:5d:3d:13:31:e9:d0:8b:7e:94:a9:0d:1c:76:
         fd:65:a5:33:ba:eb:2f:63:d3:55:2b:bc:17:2e:e5:b4:dd:11:
         4f:8c:98:dc:4c:f1:e3:1a:8d:26:f9:9c:a1:ac:96:9d:9d:f5:
         4b:64:84:3d:c6:72:79:02:4c:18:53:4c:ff:ae:42:fb:68:e4:
         d5:0a:39:f8:d8:63:2c:cb:b8:68:20:ff:ac:12:ca:31:24:2d:
         0d:56:c1:db:8a:63:9f:46:05:bc:ab:f8:34:c6:04:e8:2a:3e:
         55:9f:78:60:ab:7e:17:06:64:9a:a1:62:19:c6:16:4e:89:c2:
         df:10:13:12
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjYwNTE0MjEyNTEyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA2M2RiNy1lMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyA1b/AL3h/HPgVz8LLPmhOKp5j7xJIWzvleX2KGaLLV7SHv/1rxEbmfS91Gz
ZXyNowRFG4buBay5jQXN8ZTmYgVSpgS6wJ5tTIj085YEhCENMHVvPgeyyh3ajpSh
BKcDXsEfO2jmQAy57m/tWeVQv0oIqMlX+Jj+i+3NUJng795dwEkYOYHyeYtoV61f
XaR8eJHLTZyz4gFjC3MMb2uK4aDWeUuDGYcqy46sqBN0Wi8YDl7e9wFJjAJFxpFg
nIGvkcQmpBw+h44Yqu+udlm0n3mHU7VHNbyZe9gQwVVezTwBu+t55sivqcDhTAMh
EeMIEMnUPX7PHK/Pp+nvpcn1JQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEEhsKig
kiT/Y1GnBY44IwoHFE1XMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUU4M0IvNzkyRDE0OEFGMjgxMTFFQThBNkZDNjZEQzRGOUFFMDIvRTY4QkYzNjhE
RDk5MTFFRjg1NjE0QTUzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5U6MA0EAgACMAcDBQAkBePAMA0GCSqGSIb3DQEBCwUAA4IBAQCj
Vq2qJvMBy6WmGWpiiW/yvV6AFeahTN+1vz1TD13WLa5iGB4LgwbbxLeuVUH+hKJR
DdM4Mrp5vssjfGHCytn7tOgU+NDq7hptOJvMsB32pXzr5NoZT9zWzvwUklFGLcJ2
xxDGf3nV5RaAw0REmqqkMoV4BQJXAvFxsmRlhu1It6jspF09EzHp0It+lKkNHHb9
ZaUzuusvY9NVK7wXLuW03RFPjJjcTPHjGo0m+ZyhrJadnfVLZIQ9xnJ5AkwYU0z/
rkL7aOTVCjn42GMsy7hoIP+sEsoxJC0NVsHbimOfRgW8q/g0xgToKj5Vn3hgq34X
BmSaoWIZxhZOicLfEBMS
-----END CERTIFICATE-----
Generated at Thu May 21 10:29:30 2026 by rpki-client