Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6EA68BDCC11EAB486CA81C4F9AE02.roa
File:                     7FB6EA68BDCC11EAB486CA81C4F9AE02.roa (raw, json)
Hash identifier:          uPOd0RyDIvMkQxWbH9LYF0ObJqHDS46qkObKYkgQ160=
Subject key identifier:   96:57:48:FD:7B:91:CA:09:6F:C4:90:32:3C:3D:ED:3B:AA:A5:59:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       ECC2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6EA68BDCC11EAB486CA81C4F9AE02.roa
Signing time:             Thu 11 Jun 2026 09:45:35 +0000
ROA not before:           Thu 11 Jun 2026 09:45:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137100
IP address blocks:        103.105.110.0/24 maxlen: 24
                          103.118.144.0/24 maxlen: 24
                          103.118.145.0/24 maxlen: 24
                          103.118.146.0/24 maxlen: 24
                          103.118.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60610 (0xecc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 11 09:45:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a2a83bf-f6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:bf:f5:d8:9b:cd:c8:8c:bc:75:64:fa:0f:
                    de:17:26:93:c2:1b:93:40:99:e4:ac:76:ed:2d:3a:
                    0b:fa:5a:6a:4d:38:ed:cf:1b:e0:3c:21:a0:b8:4e:
                    dc:95:a8:c0:8f:91:96:ea:56:e6:80:9b:1b:44:d8:
                    43:f6:68:48:cb:f9:c6:0f:48:26:db:56:b4:49:d4:
                    d1:7a:61:ec:d8:8d:7e:1a:d0:c4:6b:4a:9e:ba:ed:
                    c6:23:c5:fd:74:69:df:48:7e:f6:1b:1d:bc:58:0c:
                    74:2d:c4:b8:e2:d9:dd:7b:f5:41:07:73:f1:97:35:
                    33:26:ce:b2:7b:dc:55:73:3c:df:b9:05:16:01:a8:
                    da:23:76:cc:7e:d4:fb:35:b6:60:c7:2a:90:6f:8e:
                    12:74:6f:07:d8:8f:45:09:7c:82:01:90:69:37:1a:
                    ec:47:de:23:d4:fe:89:ce:b6:7a:81:61:f2:61:d5:
                    f9:61:a7:3f:22:d9:05:f5:24:a7:84:b8:0b:43:a2:
                    21:da:88:ec:42:c8:b1:0e:1d:d2:73:a8:94:12:15:
                    27:14:ed:ed:f0:2c:ec:01:e4:b2:59:e1:e0:ae:c6:
                    c4:26:97:f7:ef:17:65:60:67:ec:73:43:8f:ac:63:
                    63:7a:3c:47:fb:3f:40:5c:f3:e1:a4:92:db:1e:46:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:57:48:FD:7B:91:CA:09:6F:C4:90:32:3C:3D:ED:3B:AA:A5:59:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6EA68BDCC11EAB486CA81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.110.0/24
                  103.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:68:ed:b9:84:1d:d2:f5:e8:15:73:b9:a6:f5:9f:30:06:
         2e:6e:93:3b:63:a2:ec:b9:9e:37:37:6d:85:01:ea:b4:4b:28:
         07:c3:14:10:ca:61:75:99:12:d3:25:0f:ee:7d:78:f1:a5:ec:
         de:7f:c4:49:e0:b2:03:95:c0:f9:30:f3:4c:72:6e:08:af:95:
         96:3e:78:6b:f0:5f:b9:1d:3e:04:bd:77:75:24:3d:84:cb:72:
         3e:13:a0:2a:5e:d4:f5:e6:67:f3:25:78:e2:59:bf:73:c0:5e:
         05:0c:47:05:6d:05:00:4b:b7:cf:d0:ae:fd:34:41:7c:e1:f0:
         9a:e9:7a:be:71:fa:0c:1d:1f:59:3b:e4:75:e5:85:35:a0:58:
         22:ce:6d:f2:02:63:38:9e:25:32:de:f7:7b:d1:9c:04:5b:40:
         a0:62:0c:2f:c7:4b:b8:cb:b8:8a:a5:92:c0:dc:32:95:5f:bc:
         15:9e:6b:3b:38:83:18:13:0e:b5:81:1d:78:5b:35:f3:0f:ea:
         9f:7e:44:27:02:6a:fe:2e:35:4c:b2:05:56:d5:99:9c:3d:e6:
         33:e3:6f:72:72:b8:a7:b3:bc:02:1f:70:8a:76:ee:77:25:4a:
         84:cd:60:9b:3f:1b:9f:75:00:0e:c2:f2:66:db:2a:60:11:73:
         27:cf:c9:7f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAOzCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDYxMTA5NDUzNVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmEyYTgzYmYtZjZiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJUWv/XYm83IjLx1ZPoP3hcmk8Ibk0CZ5Kx27S06C/paak047c8b4DwhoLhO
3JWowI+RlupW5oCbG0TYQ/ZoSMv5xg9IJttWtEnU0Xph7NiNfhrQxGtKnrrtxiPF
/XRp30h+9hsdvFgMdC3EuOLZ3Xv1QQdz8Zc1MybOsnvcVXM837kFFgGo2iN2zH7U
+zW2YMcqkG+OEnRvB9iPRQl8ggGQaTca7EfeI9T+ic62eoFh8mHV+WGnPyLZBfUk
p4S4C0OiIdqI7ELIsQ4d0nOolBIVJxTt7fAs7AHkslnh4K7GxCaX9+8XZWBn7HND
j6xjY3o8R/s/QFzz4aSS2x5GnF8CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSWV0j9
e5HKCW/EkDI8Pe07qqVZvTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdGQjZFQTY4
QkRDQzExRUFCNDg2Q0E4MUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGdpbgMEAmd2kDANBgkqhkiG9w0BAQsFAAOCAQEArJ5o7bmEHdL1
6BVzuab1nzAGLm6TO2Oi7LmeNzdthQHqtEsoB8MUEMphdZkS0yUP7n148aXs3n/E
SeCyA5XA+TDzTHJuCK+Vlj54a/BfuR0+BL13dSQ9hMtyPhOgKl7U9eZn8yV44lm/
c8BeBQxHBW0FAEu3z9Cu/TRBfOHwmul6vnH6DB0fWTvkdeWFNaBYIs5t8gJjOJ4l
Mt73e9GcBFtAoGIML8dLuMu4iqWSwNwylV+8FZ5rOziDGBMOtYEdeFs18w/qn35E
JwJq/i41TLIFVtWZnD3mM+NvcnK4p7O8Ah9winbudyVKhM1gmz8bn3UADsLyZtsq
YBFzJ8/Jfw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:25 2026 by rpki-client