Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa
File:                     9D48E6FA74A311F1A9A5878E8DA30FBC.roa (raw, json)
Hash identifier:          xkPtVPMC8LwP0xmr85yW63wuZ3xQc7W5TjWBXAJU6Mw=
Subject key identifier:   47:EE:36:CE:51:1F:C3:7D:4C:A4:68:D6:97:CC:E1:E5:F1:B3:CA:77
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       0319
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa
Signing time:             Wed 01 Jul 2026 02:28:53 +0000
ROA not before:           Wed 01 Jul 2026 02:28:53 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.186.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Jul  1 02:28:53 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a447b64-73ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:29:6f:cc:c7:36:2d:81:38:24:51:05:35:
                    7c:da:ec:db:7e:b3:48:9f:cd:25:a5:80:77:76:fd:
                    6a:3a:9a:ce:5d:89:22:e7:7c:28:be:4f:16:16:00:
                    72:89:8e:82:14:7f:b6:a6:1f:e2:6d:a1:32:ea:2d:
                    6c:66:cf:cf:5e:86:87:46:cd:95:48:05:c1:64:a6:
                    2c:56:dd:84:ad:8c:61:f9:e9:73:3b:f0:17:25:05:
                    3b:a2:75:83:27:7d:60:72:5e:03:e3:19:93:f3:7d:
                    7e:61:54:41:2d:37:6d:3f:5b:6c:ee:a5:75:d1:8b:
                    4b:bd:ab:1d:82:2d:9a:93:cb:d0:74:47:98:35:3f:
                    2c:62:d8:aa:05:e4:9b:37:6a:0d:05:21:4e:31:06:
                    47:38:0e:f9:e1:05:ae:20:cb:1b:66:fe:40:70:1f:
                    e7:78:1a:c1:f1:5b:8b:02:f0:56:e0:a8:2f:1e:51:
                    67:dc:80:e9:96:76:4e:bb:a5:b5:61:60:79:e4:c2:
                    c6:a4:02:5c:1e:d2:1a:45:cc:23:fd:8b:d7:f3:c8:
                    aa:e0:15:d1:0a:01:ef:99:b0:12:62:ba:86:cb:6f:
                    d2:3a:5c:65:ec:4f:da:99:d2:97:ab:06:47:75:a7:
                    7c:4e:97:db:f0:30:9c:03:e6:8b:34:4d:7a:3c:bb:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:36:CE:51:1F:C3:7D:4C:A4:68:D6:97:CC:E1:E5:F1:B3:CA:77
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/9D48E6FA74A311F1A9A5878E8DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:bf:f3:9c:ae:1f:e1:15:b7:93:e6:7c:88:15:b9:c7:4e:
         7b:26:d8:02:4e:31:a2:bf:9b:90:ff:b9:e0:0b:d0:b1:1f:5b:
         fd:5e:35:a1:83:bc:ab:75:92:8c:ba:a8:0e:8e:52:8f:0e:b5:
         f1:b1:fb:56:20:69:d6:96:db:64:74:e2:23:fa:0b:14:a3:a0:
         a4:39:02:28:be:d4:34:0a:f5:28:ee:cc:68:be:89:a6:5b:ef:
         fe:26:7f:d8:aa:7e:e5:11:b0:09:f9:e3:7f:b1:cc:75:8f:a3:
         d3:0a:b0:2b:13:8c:18:8b:4d:02:8d:ef:34:2e:73:42:c6:d0:
         7d:0f:07:29:d4:ce:fb:f6:d6:d4:1c:fa:12:e0:b5:64:1d:ef:
         ac:34:89:96:f8:ed:28:29:7e:ac:13:32:d0:31:8c:93:65:91:
         9d:a1:de:f6:dc:cc:7c:b7:f4:d6:ce:1d:9f:fc:6f:c2:99:b2:
         a7:3f:b8:81:7c:42:d8:16:69:d3:af:3d:c2:dc:08:ac:d2:be:
         1a:14:fa:d1:ae:99:a9:2b:95:0f:33:2e:6d:e1:a8:e0:78:34:
         ac:2c:eb:2e:d1:57:20:45:a7:23:bd:9c:6f:71:bc:5c:69:8f:
         08:16:03:c5:eb:42:7f:57:5c:df:75:ef:c4:83:ec:c4:fa:2c:
         42:ec:45:08
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3
RDk4Q0Q2OTQwHhcNMjYwNzAxMDIyODUzWhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0N2I2NC03M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2bwpb8zHNi2BOCRRBTV82uzbfrNIn80lpYB3dv1qOprOXYki53wovk8WFgBy
iY6CFH+2ph/ibaEy6i1sZs/PXoaHRs2VSAXBZKYsVt2ErYxh+elzO/AXJQU7onWD
J31gcl4D4xmT831+YVRBLTdtP1ts7qV10YtLvasdgi2ak8vQdEeYNT8sYtiqBeSb
N2oNBSFOMQZHOA754QWuIMsbZv5AcB/neBrB8VuLAvBW4KgvHlFn3IDplnZOu6W1
YWB55MLGpAJcHtIaRcwj/YvX88iq4BXRCgHvmbASYrqGy2/SOlxl7E/amdKXqwZH
dad8Tpfb8DCcA+aLNE16PLuxewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEfuNs5R
H8N9TKRo1pfM4eXxs8p3MB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0
MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxNkUvN0IxQkRDMEMyNDI3MTFFRDkwRjk4QTgxQzRGOUFFMDIvOUQ0OEU2RkE3
NEEzMTFGMUE5QTU4NzhFOERBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7poMA0GCSqGSIb3DQEBCwUAA4IBAQALpL/znK4f4RW3k+Z8iBW5
x057JtgCTjGiv5uQ/7ngC9CxH1v9XjWhg7yrdZKMuqgOjlKPDrXxsftWIGnWlttk
dOIj+gsUo6CkOQIovtQ0CvUo7sxovommW+/+Jn/Yqn7lEbAJ+eN/scx1j6PTCrAr
E4wYi00Cje80LnNCxtB9Dwcp1M779tbUHPoS4LVkHe+sNImW+O0oKX6sEzLQMYyT
ZZGdod723Mx8t/TWzh2f/G/CmbKnP7iBfELYFmnTrz3C3Ais0r4aFPrRrpmpK5UP
My5t4ajgeDSsLOsu0VcgRacjvZxvcbxcaY8IFgPF60J/V1zfde/Eg+zE+ixC7EUI
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:39 2026 by rpki-client