Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa
File:                     0C735BD69E9011F0B89DA40FC4F9AE02.roa (raw, json)
Hash identifier:          cYkyH8jmIQLGBrgGKmykDjaCGafQL1bx15vM3VJCAm8=
Subject key identifier:   DD:4F:CA:4B:FF:D8:CC:12:7A:ED:16:23:99:68:AA:1D:E7:5B:A7:41
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DA2E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:02:52 +0000
ROA not before:           Wed 01 Oct 2025 06:29:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142474
IP address blocks:        103.170.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55854 (0xda2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct  1 06:29:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c59c-d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:82:a1:c3:ce:32:90:f0:7d:17:62:f8:c1:e7:
                    f1:56:a4:c9:96:5a:26:6a:96:b6:0c:dd:76:bf:6e:
                    70:93:fb:e1:24:e5:0e:28:7a:1a:7c:e9:f5:c7:84:
                    8d:15:35:32:13:e2:2f:72:48:cd:09:fa:9d:25:ed:
                    5a:76:36:43:5a:1d:00:23:a6:a0:ab:16:33:b1:74:
                    16:da:10:53:44:5e:bb:04:d0:fc:fa:d7:a7:8f:1b:
                    d0:0d:1c:c7:de:f2:ec:4a:04:b7:07:d0:31:0a:dc:
                    6e:bb:cd:20:26:92:87:d1:dc:1e:1c:04:b9:a0:dc:
                    3b:3a:df:c6:3a:7a:ef:af:c6:46:25:c4:26:38:6e:
                    81:dd:68:82:1d:e3:ff:fb:4c:17:31:66:36:0b:eb:
                    c5:df:f6:e5:37:36:5e:84:09:a7:df:e3:51:73:ec:
                    8b:c3:ee:47:21:43:3c:9c:76:78:bd:19:e6:d2:70:
                    79:1a:47:95:2c:10:73:53:d3:e7:c8:0e:b1:84:a4:
                    ef:ec:a5:00:0e:d7:72:bd:8f:6c:69:58:b7:be:a1:
                    cb:ee:35:b1:36:a8:7c:54:f9:25:79:c2:35:52:d7:
                    d5:81:91:86:6d:e2:ba:2f:a4:31:1b:97:fe:a2:eb:
                    62:93:b6:c8:d8:70:2b:5a:42:55:df:2d:9e:b4:95:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:CA:4B:FF:D8:CC:12:7A:ED:16:23:99:68:AA:1D:E7:5B:A7:41
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C735BD69E9011F0B89DA40FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:81:70:23:de:44:9a:7e:6e:23:9e:37:46:19:66:05:72:bd:
         c3:82:59:f9:fc:ca:51:73:4e:ab:51:77:22:bd:88:62:0d:20:
         c2:a1:4e:78:40:e6:7b:d5:81:30:c9:b7:e9:ba:95:65:a9:fd:
         8c:57:11:02:e0:0b:31:3a:1b:6a:a9:65:a1:2c:1d:49:5e:b2:
         bd:4c:1c:3d:15:78:92:c2:3f:41:9a:ca:ab:14:bc:bb:dd:9f:
         19:39:04:40:70:85:e8:d5:fd:13:32:8d:1f:c3:09:02:48:5a:
         72:c7:78:49:9c:6a:3b:c4:34:bd:28:40:47:64:ca:58:d0:fc:
         17:00:aa:7a:88:95:30:37:f4:7f:ec:85:d4:34:67:d1:f2:81:
         48:f6:1b:6c:58:5e:cf:a1:be:f1:90:71:79:8d:22:09:77:6f:
         3e:bf:88:85:65:d4:31:87:8a:2f:e5:6e:0a:5a:b5:cf:fc:f7:
         16:ed:3a:97:2a:70:e8:20:2f:eb:f3:77:88:af:9c:f0:14:69:
         4c:c9:d4:a0:97:bb:df:8a:8f:d2:19:3a:00:d4:7c:4d:e0:2b:
         dd:a0:2e:5e:21:f6:4c:64:5d:79:26:47:34:99:71:3d:56:41:
         09:91:fe:fc:4a:49:85:26:4f:b7:db:f7:d8:2c:72:98:c3:a5:
         91:19:88:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANouMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MTAwMTA2Mjk1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1OWMtZDQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPKCocPOMpDwfRdi+MHn8VakyZZaJmqWtgzddr9ucJP74STlDih6Gnzp9ceE
jRU1MhPiL3JIzQn6nSXtWnY2Q1odACOmoKsWM7F0FtoQU0ReuwTQ/PrXp48b0A0c
x97y7EoEtwfQMQrcbrvNICaSh9HcHhwEuaDcOzrfxjp676/GRiXEJjhugd1ogh3j
//tMFzFmNgvrxd/25Tc2XoQJp9/jUXPsi8PuRyFDPJx2eL0Z5tJweRpHlSwQc1PT
58gOsYSk7+ylAA7Xcr2PbGlYt76hy+41sTaofFT5JXnCNVLX1YGRhm3iui+kMRuX
/qLrYpO2yNhwK1pCVd8tnrSV2RUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTdT8pL
/9jMEnrtFiOZaKod51unQTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBDNzM1QkQ2
OUU5MDExRjBCODlEQTQwRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeqajANBgkqhkiG9w0BAQsFAAOCAQEAKIFwI95Emn5uI543Rhlm
BXK9w4JZ+fzKUXNOq1F3Ir2IYg0gwqFOeEDme9WBMMm36bqVZan9jFcRAuALMTob
aqlloSwdSV6yvUwcPRV4ksI/QZrKqxS8u92fGTkEQHCF6NX9EzKNH8MJAkhacsd4
SZxqO8Q0vShAR2TKWND8FwCqeoiVMDf0f+yF1DRn0fKBSPYbbFhez6G+8ZBxeY0i
CXdvPr+IhWXUMYeKL+VuClq1z/z3Fu06lypw6CAv6/N3iK+c8BRpTMnUoJe734qP
0hk6ANR8TeAr3aAuXiH2TGRdeSZHNJlxPVZBCZH+/EpJhSZPt9v32CxymMOlkRmI
9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:53 2026 by rpki-client