Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/33A6923A5FF211F1A6FEF4E07C47A888.roa
File:                     33A6923A5FF211F1A6FEF4E07C47A888.roa (raw, json)
Hash identifier:          ce1zM+kNx50Hy7hwGgA+3iNgny2gcR98bqMoQ6LvwF8=
Subject key identifier:   2F:BA:5F:F1:61:0E:F3:D7:1F:C1:2D:5D:95:B9:5A:DF:42:47:3B:C5
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0247
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/33A6923A5FF211F1A6FEF4E07C47A888.roa
Signing time:             Thu 04 Jun 2026 08:48:48 +0000
ROA not before:           Thu 04 Jun 2026 08:48:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132541
IP address blocks:        103.115.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jun  4 08:48:48 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a213bf0-05c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:f0:11:4e:48:8a:f9:50:bb:13:70:8f:55:
                    d8:15:1e:bf:c4:e1:83:ec:eb:64:3d:77:63:86:1d:
                    02:d9:1a:5b:69:fe:f5:e4:45:3c:42:4e:5b:a5:25:
                    0b:95:f4:d5:13:fe:86:7e:26:64:97:20:ac:b1:b9:
                    2a:a6:15:9b:81:97:bc:24:11:58:05:33:de:40:57:
                    db:5a:b9:29:49:92:34:6e:e7:61:79:fd:7a:3d:b5:
                    6c:04:7e:9d:e2:6b:cc:58:ca:57:2c:43:54:2e:20:
                    81:27:3e:a0:ad:8b:c8:b7:e3:41:80:db:25:0b:4a:
                    30:6f:f1:fd:09:60:55:b1:7f:6c:17:38:af:39:62:
                    c6:16:0c:09:72:fb:4d:90:90:00:29:de:87:bd:07:
                    d1:be:f4:c7:10:f5:77:e4:53:bf:67:cb:e7:45:97:
                    75:5c:3e:4e:30:54:1b:40:41:76:82:18:fa:c9:2b:
                    f2:4f:3d:d7:59:51:26:64:2f:ca:d6:35:d0:4c:5d:
                    d8:7d:4e:dc:3a:5b:28:dd:49:30:10:40:2e:23:a1:
                    23:f7:85:4e:ec:82:f3:26:87:16:c2:11:dd:39:a3:
                    da:60:69:b0:5a:45:23:36:fc:96:b7:52:70:7a:45:
                    bc:c8:31:57:c2:c8:c4:f9:ff:a2:40:6e:94:8e:1d:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BA:5F:F1:61:0E:F3:D7:1F:C1:2D:5D:95:B9:5A:DF:42:47:3B:C5
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/33A6923A5FF211F1A6FEF4E07C47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7b:b4:a2:51:2b:f8:56:1c:ad:35:99:44:96:a1:2a:ab:ea:
         28:b1:3e:7a:a9:7c:e1:55:87:9d:13:a3:ec:9f:f6:b4:b5:6f:
         2b:ff:46:30:ab:5d:e6:58:6b:32:47:90:f4:c0:ae:06:5e:1c:
         2c:ba:23:61:5c:a1:58:81:b3:34:d2:df:81:89:23:49:48:3d:
         9a:3c:43:bf:91:25:0c:c2:6d:10:93:60:76:54:12:26:e8:0a:
         80:69:8c:f1:38:f1:ea:d6:e5:72:1e:98:20:b4:6a:09:a4:86:
         8d:f9:f4:5a:27:45:36:c3:24:21:08:d3:2f:5d:15:a3:a2:9d:
         f1:4f:4a:fb:02:a1:a6:b7:cf:0c:23:07:e0:34:95:11:9f:02:
         e2:3b:3f:0e:a2:09:85:ed:a7:4e:64:7a:93:65:02:b7:37:c8:
         42:74:ba:86:1d:aa:d2:ea:af:e8:65:f6:fa:52:20:f8:93:5c:
         81:31:3d:5a:14:37:95:e7:90:d8:59:75:45:36:dd:5f:35:eb:
         bb:f0:71:c6:6a:28:0a:86:c3:c5:da:fd:7f:76:f3:2c:f1:4c:
         24:25:c7:ea:39:ef:88:f4:ab:3d:04:74:02:95:19:5f:13:b6:
         08:80:aa:43:cb:4b:60:89:26:3f:1e:7e:60:20:05:6a:0b:6a:
         32:45:f9:53
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw
MDZCQjUxODYwHhcNMjYwNjA0MDg0ODQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxM2JmMC0wNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuirwEU5IivlQuxNwj1XYFR6/xOGD7OtkPXdjhh0C2Rpbaf715EU8Qk5bpSUL
lfTVE/6GfiZklyCssbkqphWbgZe8JBFYBTPeQFfbWrkpSZI0budhef16PbVsBH6d
4mvMWMpXLENULiCBJz6grYvIt+NBgNslC0owb/H9CWBVsX9sFzivOWLGFgwJcvtN
kJAAKd6HvQfRvvTHEPV35FO/Z8vnRZd1XD5OMFQbQEF2ghj6ySvyTz3XWVEmZC/K
1jXQTF3YfU7cOlso3UkwEEAuI6Ej94VO7ILzJocWwhHdOaPaYGmwWkUjNvyWt1Jw
ekW8yDFXwsjE+f+iQG6Ujh3gxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC+6X/Fh
DvPXH8EtXZW5Wt9CRzvFMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF
MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEwNUQvQzFFRkIwODA0RTI1MTFFRUFBQUU2RDQ5QzRGOUFFMDIvMzNBNjkyM0E1
RkYyMTFGMUE2RkVGNEUwN0M0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3MTMA0GCSqGSIb3DQEBCwUAA4IBAQAde7SiUSv4VhytNZlElqEq
q+oosT56qXzhVYedE6Psn/a0tW8r/0Ywq13mWGsyR5D0wK4GXhwsuiNhXKFYgbM0
0t+BiSNJSD2aPEO/kSUMwm0Qk2B2VBIm6AqAaYzxOPHq1uVyHpggtGoJpIaN+fRa
J0U2wyQhCNMvXRWjop3xT0r7AqGmt88MIwfgNJURnwLiOz8OogmF7adOZHqTZQK3
N8hCdLqGHarS6q/oZfb6UiD4k1yBMT1aFDeV55DYWXVFNt1fNeu78HHGaigKhsPF
2v1/dvMs8UwkJcfqOe+I9Ks9BHQClRlfE7YIgKpDy0tgiSY/Hn5gIAVqC2oyRflT
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:44:11 2026 by rpki-client