Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E37D27F6D82311EC93CDF87BC4F9AE02.roa
File:                     E37D27F6D82311EC93CDF87BC4F9AE02.roa (raw, json)
Hash identifier:          d/aDZEnvDTQzICUwdSRiLvxBvEItW4YHpByHRAqoWvs=
Subject key identifier:   F6:A3:32:E4:4A:BB:DE:8D:D9:FA:81:95:8F:C2:C1:7E:6C:63:B9:35
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E37D27F6D82311EC93CDF87BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:15 +0000
ROA not before:           Thu 08 May 2025 16:23:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149572
IP address blocks:        103.184.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55028 (0xd6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f3-3290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:db:82:98:77:d8:6a:3d:10:2f:13:64:73:
                    c3:fa:40:fb:9f:81:d7:ec:9c:86:ad:5d:e5:7c:df:
                    1b:42:3c:3b:96:0b:b5:4a:b4:c4:00:5d:e6:1a:a5:
                    ac:b3:c2:3e:78:aa:c3:d6:a4:23:48:57:5a:bb:ab:
                    1d:f5:02:97:03:bc:69:4a:d7:69:1c:65:8b:e6:f8:
                    b7:f6:98:1f:92:bf:e1:38:48:7d:0a:6d:e2:cf:ee:
                    be:36:8f:f7:63:c1:bf:24:61:8d:49:75:29:24:cd:
                    56:e1:3b:e1:0f:19:46:00:5c:5b:94:a7:41:05:e4:
                    48:36:51:9f:35:0c:65:f4:90:5f:f5:20:9d:36:70:
                    53:eb:dd:ab:79:7b:b4:cc:c9:d1:a8:99:40:28:fa:
                    df:b6:2c:6b:31:3d:c2:f6:25:06:ae:f8:b0:69:f0:
                    68:91:42:1b:f4:70:87:de:6b:3d:af:5f:f5:92:fd:
                    18:ce:77:10:8a:12:78:e5:05:41:37:53:45:84:73:
                    f8:a4:6f:02:4a:bb:39:59:b8:c6:0f:ec:fa:48:ae:
                    54:2e:6a:63:72:bb:22:1c:46:ae:06:9a:0c:a9:55:
                    be:f0:08:2c:6e:52:34:66:3f:ae:e6:44:e4:ee:85:
                    ee:c0:26:13:0f:16:d5:a8:b6:99:30:04:2d:91:f7:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A3:32:E4:4A:BB:DE:8D:D9:FA:81:95:8F:C2:C1:7E:6C:63:B9:35
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E37D27F6D82311EC93CDF87BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:ba:bd:17:02:10:35:88:66:bc:ab:8b:69:4d:df:f5:98:
         9d:3f:e7:c4:d8:68:8f:38:a3:5a:76:d0:8f:f0:99:72:43:f0:
         bd:cf:00:d1:2f:9c:96:66:19:e2:83:72:ac:1b:c8:a7:74:8b:
         b1:4f:c0:30:67:ec:35:c9:08:72:62:ac:f4:74:03:b7:97:c8:
         51:1b:a9:a1:b8:59:e6:e3:b8:ed:3f:98:f2:48:e6:a6:54:c5:
         7e:51:3a:21:f7:b4:6a:ca:13:62:76:96:f7:81:05:22:93:8d:
         d9:d7:c3:bd:91:14:d8:d5:d7:ba:ad:fe:23:cc:2c:a3:ce:5f:
         99:c6:65:75:18:34:17:2d:cc:92:c6:27:15:5b:29:c0:2b:41:
         cb:08:81:11:f3:04:fd:0b:12:84:7c:38:6f:93:20:9f:02:62:
         f1:04:63:11:57:5b:55:ed:92:10:b2:ef:bc:ad:74:0d:62:86:
         0d:e0:92:93:a5:8c:98:2b:37:e1:f9:1f:46:08:d2:49:3e:d8:
         4e:7f:3a:f0:7a:ac:c7:fd:33:0b:58:72:2c:98:b5:7c:65:67:
         c9:3e:c3:ca:48:da:0b:ae:42:64:e9:5d:73:e1:48:5d:c5:d2:
         d6:cb:a8:ba:cc:05:8f:cf:02:40:e0:f1:f4:6a:84:d2:cd:45:
         0b:22:e7:95
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANb0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjMwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMxZjMtMzI5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIEm24KYd9hqPRAvE2Rzw/pA+5+B1+ychq1d5XzfG0I8O5YLtUq0xABd5hql
rLPCPniqw9akI0hXWrurHfUClwO8aUrXaRxli+b4t/aYH5K/4ThIfQpt4s/uvjaP
92PBvyRhjUl1KSTNVuE74Q8ZRgBcW5SnQQXkSDZRnzUMZfSQX/UgnTZwU+vdq3l7
tMzJ0aiZQCj637YsazE9wvYlBq74sGnwaJFCG/Rwh95rPa9f9ZL9GM53EIoSeOUF
QTdTRYRz+KRvAkq7OVm4xg/s+kiuVC5qY3K7IhxGrgaaDKlVvvAILG5SNGY/ruZE
5O6F7sAmEw8W1ai2mTAELZH3QM0CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT2ozLk
Srvejdn6gZWPwsF+bGO5NTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UzN0QyN0Y2
RDgyMzExRUM5M0NERjg3QkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGe4iTANBgkqhkiG9w0BAQsFAAOCAQEAFn+6vRcCEDWIZryri2lN
3/WYnT/nxNhojzijWnbQj/CZckPwvc8A0S+clmYZ4oNyrBvIp3SLsU/AMGfsNckI
cmKs9HQDt5fIURupobhZ5uO47T+Y8kjmplTFflE6Ife0asoTYnaW94EFIpON2dfD
vZEU2NXXuq3+I8wso85fmcZldRg0Fy3MksYnFVspwCtBywiBEfME/QsShHw4b5Mg
nwJi8QRjEVdbVe2SELLvvK10DWKGDeCSk6WMmCs34fkfRgjSST7YTn868Hqsx/0z
C1hyLJi1fGVnyT7DykjaC65CZOldc+FIXcXS1suouswFj88CQODx9GqE0s1FCyLn
lQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:20 2026 by rpki-client