Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa
File:                     18DC10026A6911F18287CF148C47A888.roa (raw, json)
Hash identifier:          OCkrDay8zjth0V1lG/kZd/C6BIueT/ReUwbtLOpeoAg=
Subject key identifier:   EB:9A:C4:5A:EB:A1:71:69:9B:F4:81:10:A0:A7:B3:FB:73:59:88:C2
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       3582
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa
Signing time:             Mon 06 Jul 2026 20:07:01 +0000
ROA not before:           Mon 06 Jul 2026 20:07:01 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        103.53.40.0/22 maxlen: 24
                          111.118.212.0/22 maxlen: 24
                          119.18.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Jul  6 20:07:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a4c0ae5-4389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:73:2b:30:34:bf:94:cd:ed:b1:90:0b:73:
                    7f:3d:fb:44:97:37:e8:38:5d:e9:3d:b3:48:7d:7d:
                    73:6c:67:cd:5a:8c:59:37:c0:ba:53:c8:de:f8:c7:
                    5f:19:17:0e:43:95:b5:fa:fe:83:c4:fc:a7:f7:ce:
                    5e:fc:c8:bb:df:4f:46:0c:da:4c:50:0a:06:39:28:
                    38:14:56:50:cb:d0:6b:3b:16:d5:1b:b0:91:f2:4d:
                    bd:91:66:02:ab:e9:26:23:c7:aa:e4:92:e2:40:94:
                    29:b0:ef:c6:dd:fb:04:fa:9c:ec:0d:91:60:54:50:
                    a7:01:10:a3:17:b6:0a:59:df:4b:9a:4a:c2:28:81:
                    b3:6b:b5:5b:df:44:07:fc:54:b5:ff:a6:7f:08:eb:
                    78:52:eb:a3:64:e8:a7:e2:ce:6d:f2:b3:72:c3:91:
                    93:65:85:00:8e:2d:69:7f:53:22:0e:c3:bb:c5:17:
                    f9:d9:f0:86:0d:8d:bc:5e:91:77:f2:7a:9f:03:6f:
                    2b:4f:25:68:a6:7b:79:58:0d:91:b5:25:6d:d9:24:
                    62:3c:d9:71:71:51:25:29:a1:4a:da:06:f1:f8:4c:
                    05:16:7a:a7:20:05:dc:bf:e7:06:bc:63:29:36:06:
                    69:c1:31:b8:d4:9d:6f:9e:68:86:e3:3a:d2:0c:eb:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9A:C4:5A:EB:A1:71:69:9B:F4:81:10:A0:A7:B3:FB:73:59:88:C2
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.40.0/22
                  111.118.212.0/22
                  119.18.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:55:3e:49:c7:83:e3:5c:97:46:0c:8b:45:a2:99:84:a0:
         9c:2a:c7:5b:4d:a3:db:de:57:69:c5:50:61:ea:bd:7a:0d:68:
         38:be:5b:72:d2:35:b4:36:ec:6d:ad:88:f2:7f:9f:b4:80:80:
         ce:73:53:00:28:c0:bc:0a:a7:49:6a:5e:9b:ec:aa:b6:da:48:
         12:69:f9:9c:95:08:ee:24:60:67:f7:6d:de:d6:5a:32:da:e8:
         80:16:50:98:29:e1:ac:a2:98:85:12:92:9b:a6:64:97:7f:13:
         5e:48:59:9a:1f:1c:5c:6a:51:58:58:51:09:ff:19:28:6e:54:
         7e:9b:2d:13:91:8a:bc:bf:5f:64:e1:d4:87:37:c7:d8:0d:32:
         79:97:48:3c:59:9b:40:52:9c:5b:b0:dc:00:a5:97:0e:ac:30:
         64:9e:02:20:8b:2c:c2:e9:27:97:aa:f1:e5:59:89:6e:52:6d:
         86:46:ad:58:32:c7:89:6e:f2:5d:59:79:a0:f7:b8:77:25:c3:
         84:63:31:0b:76:e0:95:24:83:70:c7:3a:76:71:46:7a:8e:7c:
         00:93:96:fd:e0:ea:85:f4:56:30:a3:28:9a:b9:4e:f4:31:d0:
         68:b3:b2:e6:23:5e:46:5f:87:f2:5d:c2:70:94:85:a5:3e:da:
         0d:1c:16:35
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC
RDEzODk2MzEwHhcNMjYwNzA2MjAwNzAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMGFlNS00Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9NzKzA0v5TN7bGQC3N/PftElzfoOF3pPbNIfX1zbGfNWoxZN8C6U8je+Mdf
GRcOQ5W1+v6DxPyn985e/Mi7309GDNpMUAoGOSg4FFZQy9BrOxbVG7CR8k29kWYC
q+kmI8eq5JLiQJQpsO/G3fsE+pzsDZFgVFCnARCjF7YKWd9LmkrCKIGza7Vb30QH
/FS1/6Z/COt4UuujZOin4s5t8rNyw5GTZYUAji1pf1MiDsO7xRf52fCGDY28XpF3
8nqfA28rTyVopnt5WA2RtSVt2SRiPNlxcVElKaFK2gbx+EwFFnqnIAXcv+cGvGMp
NgZpwTG41J1vnmiG4zrSDOtTsQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOuaxFrr
oXFpm/SBEKCns/tzWYjCMB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE
QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzE3NTMvODA1MTQ1OTAxREE3MTFFMkFBQTk0QUExMDhCMDJDRDIvMThEQzEwMDI2
QTY5MTFGMTgyODdDRjE0OEM0N0E4ODgucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCZzUoAwQCb3bUAwQEdxIwMA0GCSqGSIb3DQEBCwUAA4IBAQBlyFU+
SceD41yXRgyLRaKZhKCcKsdbTaPb3ldpxVBh6r16DWg4vlty0jW0NuxtrYjyf5+0
gIDOc1MAKMC8CqdJal6b7Kq22kgSafmclQjuJGBn923e1loy2uiAFlCYKeGsopiF
EpKbpmSXfxNeSFmaHxxcalFYWFEJ/xkoblR+my0TkYq8v19k4dSHN8fYDTJ5l0g8
WZtAUpxbsNwApZcOrDBkngIgiyzC6SeXqvHlWYluUm2GRq1YMseJbvJdWXmg97h3
JcOEYzELduCVJINwxzp2cUZ6jnwAk5b94OqF9FYwoyiauU70MdBos7LmI15GX4fy
XcJwlIWlPtoNHBY1
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:12 2026 by rpki-client