Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa
File:                     5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (raw, json)
Hash identifier:          SANw9dLH9bXdcBVHXUebGfCRir+vdFPmPdYxlp8aviU=
Subject key identifier:   FF:FF:DD:81:8C:05:A5:C4:92:2C:02:62:70:95:EB:8F:CD:F6:F2:31
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2CCC
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa
Signing time:             Sat 06 Jun 2026 16:17:21 +0000
ROA not before:           Sat 06 Jun 2026 16:17:21 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133456
IP address blocks:        103.230.50.0/23 maxlen: 24
                          2400:ec80::/32 maxlen: 32
                          2400:ec80:65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11468 (0x2ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Jun  6 16:17:21 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a244811-1166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:28:d3:5e:9a:c5:f2:28:d1:8c:97:c3:85:
                    44:c2:22:05:93:ce:a3:f7:8d:eb:f8:15:be:2d:4c:
                    3f:ac:c1:1f:30:a6:e7:5a:97:77:54:0c:30:00:fd:
                    68:44:a2:9e:d1:35:6b:52:a3:6c:fa:3c:fa:25:40:
                    91:ef:de:79:34:35:fb:12:37:91:ee:25:22:58:90:
                    35:b7:88:47:61:a7:b2:fa:41:1c:88:35:6b:c6:ce:
                    4a:64:ee:ac:dd:2b:ab:18:77:a4:25:7a:98:40:46:
                    28:ae:59:5c:42:9d:57:24:cb:00:96:c6:29:5f:95:
                    52:39:7f:40:09:46:fb:6e:b8:b6:55:27:de:ec:8a:
                    00:2b:36:0b:b9:f3:27:d3:23:89:b7:fb:53:b3:5a:
                    6c:3f:cf:22:ba:1a:cc:9c:b7:00:6c:d9:e7:eb:ee:
                    29:66:2e:db:0e:18:4b:d6:4b:5f:eb:a6:ca:57:ac:
                    fb:0a:64:2b:4f:3d:4e:00:c6:4f:65:57:34:73:58:
                    66:cf:2b:d1:3e:d7:10:33:cd:87:2a:a8:b0:8a:99:
                    15:7a:d3:2e:64:5e:80:ba:8b:e0:b4:3e:ed:ed:50:
                    8e:af:59:c5:07:78:aa:ec:30:77:24:b2:d2:b7:ed:
                    12:50:84:4d:35:b2:9a:ed:18:68:2c:a9:53:64:77:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:DD:81:8C:05:A5:C4:92:2C:02:62:70:95:EB:8F:CD:F6:F2:31
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.50.0/23
                IPv6:
                  2400:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:33:7f:3c:a2:6b:6c:df:9e:ea:98:b1:cc:d6:a8:70:16:bf:
         94:4b:14:6f:23:58:36:5e:8a:36:e5:7a:24:46:47:3f:6e:5a:
         f1:05:03:83:9f:66:88:b0:2c:4c:4b:97:86:30:44:0d:57:c5:
         a2:94:86:02:f8:d5:9d:33:24:69:81:1d:8f:8e:0e:bb:cc:ce:
         24:44:f4:a2:c4:db:56:99:ec:b9:30:4d:7e:27:03:2e:2a:3d:
         11:be:8a:0b:9b:a5:86:df:ef:02:77:90:4d:d4:92:29:4b:1b:
         cd:6f:23:bf:2c:d8:4f:49:f5:bc:d7:c4:ee:b3:d4:9c:00:49:
         ab:66:95:c9:e5:e9:ef:04:f2:39:6f:26:42:a0:5b:58:b9:73:
         4d:04:c6:ec:13:a8:d5:83:d1:ed:8e:7b:a4:fa:52:4a:0b:22:
         8d:84:58:9d:34:9e:bf:c7:a1:d2:6a:16:51:40:f9:38:04:d7:
         ca:c9:cc:83:97:e8:08:99:7b:1b:a5:fc:41:54:47:58:07:a3:
         88:6c:a3:ba:bb:d5:28:84:0b:cb:f7:ee:f7:a2:75:a0:4b:66:
         f4:a4:22:91:4d:e7:fd:f0:18:d0:bc:20:9b:67:d9:13:14:57:
         9e:43:eb:d4:1d:3e:e2:3b:eb:79:d9:de:bb:38:a6:68:4a:09:
         2c:46:df:42
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICLMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1OUUxMTAvBgNVBAUTKDNFM0RDNjJBRDM2OTQxMjcwNzlBOTg3MTc2QzIxOEMw
OUIzRUM5RkQwHhcNMjYwNjA2MTYxNzIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI0NDgxMS0xMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLko016axfIo0YyXw4VEwiIFk86j943r+BW+LUw/rMEfMKbnWpd3VAwwAP1o
RKKe0TVrUqNs+jz6JUCR7955NDX7EjeR7iUiWJA1t4hHYaey+kEciDVrxs5KZO6s
3SurGHekJXqYQEYorllcQp1XJMsAlsYpX5VSOX9ACUb7bri2VSfe7IoAKzYLufMn
0yOJt/tTs1psP88iuhrMnLcAbNnn6+4pZi7bDhhL1ktf66bKV6z7CmQrTz1OAMZP
ZVc0c1hmzyvRPtcQM82HKqiwipkVetMuZF6AuovgtD7t7VCOr1nFB3iq7DB3JLLS
t+0SUIRNNbKa7RhoLKlTZHf0fwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFP//3YGM
BaXEkiwCYnCV64/N9vIxMB8GA1UdIwQYMBaAFD49xirTaUEnB5qYcXbCGMCbPsn9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU5RS9ENDdGRUZDRUQ0
MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFTY0htcGh4ZHNJWXdKcy15
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BqM0dLdE5wUVNjSG1waHhkc0lZd0pzLXlmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1OUUvRDQ3RkVGQ0VENDBCMTFFMzg1RDQ4QTcwNTkxMUVBMzIvNUU3MzZCMUVF
RTJDMTFFQ0JEQTQzNjJCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ+YyMA0EAgACMAcDBQAkAOyAMA0GCSqGSIb3DQEBCwUAA4IBAQAF
M388omts357qmLHM1qhwFr+USxRvI1g2Xoo25XokRkc/blrxBQODn2aIsCxMS5eG
MEQNV8WilIYC+NWdMyRpgR2Pjg67zM4kRPSixNtWmey5ME1+JwMuKj0RvooLm6WG
3+8Cd5BN1JIpSxvNbyO/LNhPSfW818Tus9ScAEmrZpXJ5envBPI5byZCoFtYuXNN
BMbsE6jVg9Htjnuk+lJKCyKNhFidNJ6/x6HSahZRQPk4BNfKycyDl+gImXsbpfxB
VEdYB6OIbKO6u9UohAvL9+73onWgS2b0pCKRTef98BjQvCCbZ9kTFFeeQ+vUHT7i
O+t52d67OKZoSgksRt9C
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:40 2026 by rpki-client