Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
File:                     22355CF4DE8411EDBC551D19C4F9AE02.roa (raw, json)
Hash identifier:          G/kXHotVNXe/Ru6S94R+9y4XKhDCZ9Ild+4s0h8wWNE=
Subject key identifier:   A9:03:48:B4:FC:96:D0:80:5A:71:62:D3:B6:9E:D6:B7:8C:AE:D8:59
Certificate issuer:       /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial:       354B
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:13:13 +0000
ROA not before:           Sun 31 May 2026 16:13:13 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58589
IP address blocks:        103.8.229.0/24 maxlen: 24
                          103.12.3.0/24 maxlen: 24
                          103.232.168.0/24 maxlen: 24
                          103.232.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13643 (0x354b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
        Validity
            Not Before: May 31 16:13:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1c5e18-944a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:0e:4a:71:94:a7:21:41:2f:07:1c:04:f0:
                    ea:23:a1:8f:8a:10:95:55:18:4d:78:68:38:63:20:
                    c9:8f:63:96:8b:40:71:10:0d:f4:ee:bb:e0:da:4c:
                    3c:16:51:4d:fe:00:63:97:74:1a:c1:79:54:29:f0:
                    c7:9f:ae:71:01:9e:bf:a7:7f:aa:c3:39:bc:6d:6b:
                    d2:05:b7:5f:8f:ea:86:44:4d:c1:19:46:cf:6a:ac:
                    b7:63:0e:86:20:d1:af:84:a7:b7:51:b1:73:17:72:
                    cd:7d:69:62:66:07:52:d2:b8:b4:fb:92:b7:fe:8b:
                    f6:c1:35:75:bc:2c:84:cf:8d:f7:f5:f7:25:6f:43:
                    11:3d:c4:a9:80:3c:f2:31:44:86:18:bd:d5:36:5a:
                    a9:38:2b:a9:0a:cd:eb:0a:05:bb:b0:25:db:0a:48:
                    26:f6:08:05:3a:f0:39:7e:9b:6f:18:b3:d0:5c:5d:
                    0a:e5:c6:b2:7a:26:d2:0a:9d:8a:ee:6e:79:70:77:
                    bd:5a:a4:e7:ba:a0:4f:70:ab:78:04:4c:1b:b8:50:
                    dc:c2:32:18:1b:d1:87:93:03:7d:35:7f:6c:4d:57:
                    d4:c6:4e:f0:07:04:1c:ad:a1:a2:a8:d1:5b:76:25:
                    f8:e9:2d:25:11:31:a1:86:3c:5a:d0:56:16:92:c2:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:48:B4:FC:96:D0:80:5A:71:62:D3:B6:9E:D6:B7:8C:AE:D8:59
            X509v3 Authority Key Identifier:
                keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.229.0/24
                  103.12.3.0/24
                  103.232.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:22:90:47:ca:e7:3b:e0:5f:31:9b:d8:61:63:0e:84:95:c4:
         74:3d:d4:be:07:d6:c4:9e:26:e9:18:ee:b8:ad:fa:4b:97:3f:
         09:5a:29:35:8b:1e:9f:ca:1f:54:51:22:da:6b:ad:e0:8c:3f:
         21:46:f5:4d:3d:c4:93:aa:0d:d9:4d:58:27:d0:5a:c4:8a:58:
         d6:ba:63:4f:1b:1a:84:4f:99:c4:c5:15:3e:03:d7:8d:91:0a:
         dd:72:b8:3c:6c:5c:f2:a3:49:e5:c5:dc:66:f6:b4:8e:f5:51:
         5a:5a:4e:11:03:e2:4d:4a:39:8f:9d:6c:a4:80:ae:73:e5:fb:
         9a:66:4b:a2:51:8f:d1:de:8f:54:38:3d:96:08:d3:bf:1a:63:
         ff:06:55:35:ef:90:49:38:68:62:8b:a7:18:ac:80:26:66:fb:
         fb:06:db:d9:5f:d3:7c:99:b5:e3:4a:fb:33:da:fb:77:f1:d5:
         99:a4:0e:7d:47:bb:65:fe:ee:f2:36:da:53:a3:11:16:56:e6:
         9c:1c:28:f0:dd:c9:96:86:26:b7:3c:e5:dc:b9:8d:4a:37:de:
         17:82:c2:d5:93:da:13:19:c2:1a:c0:cd:90:c4:87:52:84:4f:
         33:c5:8c:b0:db:6a:6d:af:d8:92:dd:82:c8:0b:38:19:4a:92:
         41:ff:75:aa
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF
MDg5ODg3MzQwHhcNMjYwNTMxMTYxMzEzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWUxOC05NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs90OSnGUpyFBLwccBPDqI6GPihCVVRhNeGg4YyDJj2OWi0BxEA307rvg2kw8
FlFN/gBjl3QawXlUKfDHn65xAZ6/p3+qwzm8bWvSBbdfj+qGRE3BGUbPaqy3Yw6G
INGvhKe3UbFzF3LNfWliZgdS0ri0+5K3/ov2wTV1vCyEz4339fclb0MRPcSpgDzy
MUSGGL3VNlqpOCupCs3rCgW7sCXbCkgm9ggFOvA5fptvGLPQXF0K5cayeibSCp2K
7m55cHe9WqTnuqBPcKt4BEwbuFDcwjIYG9GHkwN9NX9sTVfUxk7wBwQcraGiqNFb
diX46S0lETGhhjxa0FYWksKdNwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKkDSLT8
ltCAWnFi07ae1reMrthZMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE
QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkFFNkEvNTgzMjQ1QjYxREFBMTFFMjg3MkFGM0E1MDhCMDJDRDIvMjIzNTVDRjRE
RTg0MTFFREJDNTUxRDE5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZwjlAwQAZwwDAwQBZ+ioMA0GCSqGSIb3DQEBCwUAA4IBAQAJIpBH
yuc74F8xm9hhYw6ElcR0PdS+B9bEnibpGO64rfpLlz8JWik1ix6fyh9UUSLaa63g
jD8hRvVNPcSTqg3ZTVgn0FrEiljWumNPGxqET5nExRU+A9eNkQrdcrg8bFzyo0nl
xdxm9rSO9VFaWk4RA+JNSjmPnWykgK5z5fuaZkuiUY/R3o9UOD2WCNO/GmP/BlU1
75BJOGhii6cYrIAmZvv7BtvZX9N8mbXjSvsz2vt38dWZpA59R7tl/u7yNtpToxEW
VuacHCjw3cmWhia3POXcuY1KN94XgsLVk9oTGcIawM2QxIdShE8zxYyw22ptr9iS
3YLICzgZSpJB/3Wq
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:37 2026 by rpki-client