Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92A1F89A859711F1AA46C81595A30FBC.roa
File:                     92A1F89A859711F1AA46C81595A30FBC.roa (raw, json)
Hash identifier:          qu4k2yv2WUcmAzVoNp5VJHGj2p/TYR55dEoEaQuMTnM=
Subject key identifier:   5E:61:5D:2F:DF:CA:32:7F:48:B1:D4:64:BE:7D:CB:CF:51:E5:DD:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F90B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92A1F89A859711F1AA46C81595A30FBC.roa
Signing time:             Wed 22 Jul 2026 06:46:16 +0000
ROA not before:           Wed 22 Jul 2026 06:46:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     11911
IP address blocks:        103.10.109.0/24 maxlen: 24
                          103.95.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63755 (0xf90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 22 06:46:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a606738-3912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:61:54:88:fa:7f:ed:e5:97:cb:12:6d:c8:
                    8a:91:20:e9:c7:a7:91:7a:45:79:0f:ef:96:cf:66:
                    6c:b0:de:6f:37:00:54:b8:39:40:93:b2:d4:36:3d:
                    39:52:4c:ad:fe:25:7e:00:b4:65:30:ed:ae:c4:30:
                    f6:fb:1a:5d:7c:5b:6f:72:3a:52:d4:73:2f:83:60:
                    b3:4c:ea:56:6d:8b:f1:e2:9e:c1:99:90:51:fa:50:
                    26:e2:64:96:0a:4e:ba:80:8a:ae:7b:49:2f:5a:7f:
                    8b:59:8e:40:ea:c8:69:89:fa:72:c7:ce:53:0c:ac:
                    a2:e5:e3:c1:94:62:8a:a9:02:1d:de:a1:a1:49:95:
                    c2:d7:7b:fb:9c:81:f1:93:90:53:c6:dd:a5:35:53:
                    41:1b:61:a2:2f:07:1a:9d:76:6a:f7:3a:41:c1:df:
                    0a:dd:e8:68:e3:48:f2:b8:b5:f7:76:a8:6c:78:1f:
                    78:ee:8a:2e:ad:e7:e7:3d:88:84:a0:3e:58:e1:78:
                    e4:c7:11:85:d9:26:59:60:2a:18:78:40:c1:f4:15:
                    3d:85:d6:9c:68:f3:06:eb:3b:23:38:d5:96:bf:29:
                    7a:42:1f:a7:d9:e3:6e:d1:4d:90:86:95:62:44:34:
                    93:c4:80:d6:59:c1:11:cd:bd:7c:82:44:13:c2:de:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:5D:2F:DF:CA:32:7F:48:B1:D4:64:BE:7D:CB:CF:51:E5:DD:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92A1F89A859711F1AA46C81595A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.109.0/24
                  103.95.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:e2:92:c3:37:22:66:c0:88:1a:d8:fa:c3:d2:51:db:b3:
         5f:a8:26:ab:84:9b:5f:9b:f7:91:42:9b:ac:46:89:a9:96:c6:
         1c:96:f6:ba:2b:be:3c:0b:6c:54:f9:7f:9a:17:18:7e:45:9f:
         9c:85:e6:0d:29:d1:d7:3c:3e:23:d1:ee:40:08:d5:a0:28:d5:
         33:ce:a1:46:66:4d:ae:79:a2:83:cd:74:d4:43:a2:df:06:c3:
         36:88:ec:1c:20:8e:17:f7:99:7d:c5:31:02:d0:ba:30:e2:9e:
         96:82:15:a1:8b:08:eb:8f:15:b3:54:dd:a8:54:24:10:88:f9:
         62:e1:f0:b3:6a:9c:d0:87:92:63:64:1d:7e:2c:32:71:c9:44:
         af:61:6d:00:42:6b:e4:69:10:64:2c:96:94:72:6f:b2:6c:16:
         da:28:24:a7:92:fc:71:cf:de:90:2a:ab:95:1f:b3:d6:4a:f7:
         a4:c7:3d:6b:ca:72:56:b6:f0:4a:23:d3:c6:06:60:41:74:9a:
         1a:ff:c5:a8:ac:2f:64:18:75:fc:ea:c8:b7:a6:36:81:30:51:
         cd:db:74:4d:13:11:eb:d9:22:06:25:08:42:ee:eb:28:1b:1e:
         3a:59:77:75:35:09:fa:d8:8e:36:89:d3:0b:b7:83:8a:f9:02:
         7f:7e:1e:cf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPkLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcyMjA2NDYxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE2MDY3MzgtMzkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIy4YVSI+n/t5ZfLEm3IipEg6cenkXpFeQ/vls9mbLDebzcAVLg5QJOy1DY9
OVJMrf4lfgC0ZTDtrsQw9vsaXXxbb3I6UtRzL4Ngs0zqVm2L8eKewZmQUfpQJuJk
lgpOuoCKrntJL1p/i1mOQOrIaYn6csfOUwysouXjwZRiiqkCHd6hoUmVwtd7+5yB
8ZOQU8bdpTVTQRthoi8HGp12avc6QcHfCt3oaONI8ri193aobHgfeO6KLq3n5z2I
hKA+WOF45McRhdkmWWAqGHhAwfQVPYXWnGjzBus7IzjVlr8pekIfp9njbtFNkIaV
YkQ0k8SA1lnBEc29fIJEE8Led2cCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBReYV0v
38oyf0ix1GS+fcvPUeXd+TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkyQTFGODlB
ODU5NzExRjFBQTQ2QzgxNTk1QTMwRkJDLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAGcKbQMEAGdfJDANBgkqhkiG9w0BAQsFAAOCAQEAXiviksM3ImbA
iBrY+sPSUduzX6gmq4SbX5v3kUKbrEaJqZbGHJb2uiu+PAtsVPl/mhcYfkWfnIXm
DSnR1zw+I9HuQAjVoCjVM86hRmZNrnmig8101EOi3wbDNojsHCCOF/eZfcUxAtC6
MOKeloIVoYsI648Vs1TdqFQkEIj5YuHws2qc0IeSY2QdfiwycclEr2FtAEJr5GkQ
ZCyWlHJvsmwW2igkp5L8cc/ekCqrlR+z1kr3pMc9a8pyVrbwSiPTxgZgQXSaGv/F
qKwvZBh1/OrIt6Y2gTBRzdt0TRMR69kiBiUIQu7rKBseOll3dTUJ+tiONonTC7eD
ivkCf34ezw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:16 2026 by rpki-client