Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa
File:                     A015129EDD8811F092CEDE3F3C6F56BC.roa (raw, json)
Hash identifier:          jaduztiZkWsEih2v+ZreDFNUxOGBbSBOtbGx9e0k+pw=
Subject key identifier:   41:FA:38:9B:AA:15:45:A9:EF:4A:77:E0:7E:5E:6F:85:1C:B0:98:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DF9C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa
Signing time:             Thu 30 Apr 2026 10:44:53 +0000
ROA not before:           Thu 30 Apr 2026 10:44:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150630
IP address blocks:        103.66.234.0/24 maxlen: 24
                          103.79.164.0/22 maxlen: 24
                          103.86.68.0/24 maxlen: 24
                          103.86.69.0/24 maxlen: 24
                          2001:df2:4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57244 (0xdf9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 30 10:44:53 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f332a5-1a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:0e:04:7f:99:d1:a3:69:82:51:ad:46:b5:
                    6f:5c:92:f9:b1:1c:69:63:81:b4:ea:21:5e:b2:c9:
                    5a:7c:f5:83:22:9f:43:58:1d:33:38:39:18:d2:6a:
                    5d:57:c9:5e:73:f6:bb:3e:a6:25:79:05:75:e2:6c:
                    51:d0:b9:74:14:16:62:1f:1e:c6:47:43:42:81:7e:
                    ab:37:d4:82:71:fe:5f:43:b5:a3:56:c9:7c:6d:76:
                    1e:ea:4b:44:e0:7f:b9:36:e1:05:3e:7e:ac:a6:b9:
                    37:9d:10:c1:52:c4:53:a4:b1:cb:fa:25:7b:b0:1e:
                    be:82:1d:9f:d5:db:14:f8:a1:07:2b:8b:41:ac:b4:
                    65:29:03:3c:99:06:f6:80:e4:d1:ec:00:08:a8:62:
                    08:8f:26:86:3d:90:76:ba:a9:33:e2:2e:b7:ad:54:
                    90:81:13:d1:11:db:83:b6:32:73:f6:b9:75:c6:f4:
                    79:e8:e1:94:11:b0:a0:56:5d:ed:f2:8b:ce:4c:e9:
                    62:cc:e4:f3:0d:82:67:36:d9:55:41:90:7a:50:68:
                    1c:b7:52:f0:85:b8:c6:b7:8e:93:34:f3:c4:41:07:
                    7b:85:19:66:09:5a:9e:8e:75:71:da:8e:e5:7c:67:
                    64:85:cc:c8:f5:3b:f9:07:de:2d:f3:e2:c4:d3:ef:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:38:9B:AA:15:45:A9:EF:4A:77:E0:7E:5E:6F:85:1C:B0:98:CD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.234.0/24
                  103.79.164.0/22
                  103.86.68.0/23
                IPv6:
                  2001:df2:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:ee:c4:5f:c7:72:2b:89:5f:4e:ca:53:cc:51:ae:46:28:
         af:00:56:06:9f:de:32:ff:e2:a0:f8:61:04:04:ae:7f:2d:d8:
         d5:ad:36:61:74:23:26:89:e7:af:10:50:df:ea:cc:08:af:4a:
         ad:57:9f:d5:ef:56:27:f4:a5:f1:28:5c:96:9b:d1:6b:61:07:
         68:c8:9e:25:65:02:be:ab:2d:fb:38:db:29:98:b2:77:00:7b:
         92:cd:6f:8b:77:7b:5e:ae:57:0c:78:3a:b5:f0:bd:18:8f:66:
         a5:65:9b:71:03:c8:9f:81:35:f9:2a:6f:96:fa:cb:a8:86:22:
         51:16:36:53:02:42:4a:b1:d7:a2:b2:d3:f5:ac:8f:08:0f:e1:
         66:20:2f:3d:38:90:21:08:91:e9:3a:a1:67:02:7e:a9:74:dd:
         ac:ac:05:b2:e7:52:f6:a6:99:74:49:83:95:f1:e0:8c:10:d4:
         45:b3:5b:5d:81:62:3d:bd:30:2d:0e:18:b2:a1:0a:f8:3a:92:
         89:0e:c0:3e:31:e5:9b:89:6b:8a:e5:80:fa:bb:06:70:2e:fb:
         2f:8e:96:88:8a:ee:88:cf:e1:d0:3a:fb:ef:65:c0:3a:7d:ea:
         34:fc:01:86:f4:4e:78:c3:73:15:76:8d:f8:93:24:df:bb:2a:
         15:47:5c:02
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDAN+cMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDQzMDEwNDQ1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlmMzMyYTUtMWE1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGJDgR/mdGjaYJRrUa1b1yS+bEcaWOBtOohXrLJWnz1gyKfQ1gdMzg5GNJq
XVfJXnP2uz6mJXkFdeJsUdC5dBQWYh8exkdDQoF+qzfUgnH+X0O1o1bJfG12HupL
ROB/uTbhBT5+rKa5N50QwVLEU6Sxy/ole7AevoIdn9XbFPihByuLQay0ZSkDPJkG
9oDk0ewACKhiCI8mhj2QdrqpM+Iut61UkIET0RHbg7Yyc/a5dcb0eejhlBGwoFZd
7fKLzkzpYszk8w2CZzbZVUGQelBoHLdS8IW4xreOkzTzxEEHe4UZZglano51cdqO
5XxnZIXMyPU7+QfeLfPixNPvKk8CAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBRB+jib
qhVFqe9Kd+B+Xm+FHLCYzTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EwMTUxMjlF
REQ4ODExRjA5MkNFREUzRjNDNkY1NkJDLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw
GAQCAAEwEgMEAGdC6gMEAmdPpAMEAWdWRDAPBAIAAjAJAwcAIAEN8gTAMA0GCSqG
SIb3DQEBCwUAA4IBAQBtne7EX8dyK4lfTspTzFGuRiivAFYGn94y/+Kg+GEEBK5/
LdjVrTZhdCMmieevEFDf6swIr0qtV5/V71Yn9KXxKFyWm9FrYQdoyJ4lZQK+qy37
ONspmLJ3AHuSzW+Ld3terlcMeDq18L0Yj2alZZtxA8ifgTX5Km+W+suohiJRFjZT
AkJKsdeistP1rI8ID+FmIC89OJAhCJHpOqFnAn6pdN2srAWy51L2ppl0SYOV8eCM
ENRFs1tdgWI9vTAtDhiyoQr4OpKJDsA+MeWbiWuK5YD6uwZwLvsvjpaIiu6Iz+HQ
OvvvZcA6feo0/AGG9E54w3MVdo34kyTfuyoVR1wC
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:06 2026 by rpki-client