Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/5C4BD8C6761311F1BE9748D07EA30FBC.roa
File:                     5C4BD8C6761311F1BE9748D07EA30FBC.roa (raw, json)
Hash identifier:          tEL4/0K/1b9tNBRissSTq4YQN08VaguB/qFdo7l7p5A=
Subject key identifier:   40:A2:65:16:93:41:74:74:F3:53:9E:2A:2B:4F:79:03:9F:59:60:C2
Certificate issuer:       /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial:       0B1E
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/5C4BD8C6761311F1BE9748D07EA30FBC.roa
Signing time:             Thu 02 Jul 2026 12:49:32 +0000
ROA not before:           Thu 02 Jul 2026 12:49:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137580
IP address blocks:        103.114.24.0/22 maxlen: 22
                          103.114.24.0/24 maxlen: 24
                          103.114.25.0/24 maxlen: 24
                          103.114.26.0/24 maxlen: 24
                          103.114.27.0/24 maxlen: 24
                          2407:44c0::/32 maxlen: 32
                          2407:44c0::/40 maxlen: 48
                          2407:44c0:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
        Validity
            Not Before: Jul  2 12:49:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a465e5c-83fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:b8:dc:b5:bc:1a:70:c6:3f:bf:dc:af:61:
                    ce:0c:a9:6a:82:47:1e:32:bf:5e:9b:fa:ee:a0:24:
                    29:f4:90:d2:78:14:32:38:0c:ef:af:14:83:39:b4:
                    6a:ac:23:f8:dc:09:2f:f8:42:82:70:e5:96:d7:b7:
                    92:50:7e:41:88:03:e3:89:23:94:fa:19:97:75:70:
                    9a:f3:37:7f:24:eb:6b:53:93:ef:f6:d1:4a:a3:c7:
                    dc:af:ea:67:a8:86:c7:84:87:15:4f:92:18:49:09:
                    12:1c:70:52:b0:c2:c7:09:21:d0:7f:10:2d:a7:c2:
                    3e:d2:a9:6c:bd:dc:f7:16:74:67:16:87:1b:30:51:
                    d6:dc:02:3f:08:e7:a7:75:42:49:1f:a7:f4:b8:f5:
                    ab:09:3f:b3:89:d3:30:1f:8e:75:88:bc:ad:63:4d:
                    f7:03:d1:07:d7:fd:7d:32:15:cd:6f:97:0e:45:11:
                    e9:9a:7b:00:46:a4:f8:b5:d5:c9:bd:7b:c0:7d:13:
                    1a:23:27:a9:d9:db:98:96:b5:a7:3e:02:bc:9d:04:
                    41:26:e1:60:ea:a4:39:34:50:cb:df:53:f1:c9:46:
                    1c:ca:7e:df:7d:74:6d:fe:34:a8:4b:1f:bf:92:bd:
                    db:fc:e8:e1:52:46:43:6e:2b:99:98:aa:b4:9b:05:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A2:65:16:93:41:74:74:F3:53:9E:2A:2B:4F:79:03:9F:59:60:C2
            X509v3 Authority Key Identifier:
                keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/5C4BD8C6761311F1BE9748D07EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.24.0/22
                IPv6:
                  2407:44c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:41:bf:40:ab:c2:84:67:56:12:ec:e1:aa:50:43:57:a8:79:
         92:e5:19:a9:02:2e:4d:f2:10:aa:b9:55:b9:83:33:27:96:8b:
         14:5e:cb:d2:27:43:6d:b6:a3:28:04:c1:48:af:52:e5:b1:47:
         38:75:de:33:82:03:4b:49:f7:89:0f:81:d8:24:3c:32:3c:1b:
         18:11:9e:2e:63:27:d8:f4:4d:57:cb:86:94:e8:0e:b8:e0:45:
         72:b9:c9:68:04:1c:c3:32:7b:ed:8b:61:f6:d9:43:7d:e0:c1:
         d0:f1:fe:3b:90:7a:4f:b8:e8:6a:94:61:3c:68:b7:dd:33:98:
         8b:f2:c2:6d:a8:97:a5:68:f6:f0:a1:ac:df:6e:e1:65:7f:90:
         8d:6a:6b:35:a0:c8:e9:3e:01:0c:0e:d8:ea:5f:a4:55:e2:0f:
         62:88:49:fa:4e:cd:32:1d:cd:42:d8:e5:d6:c6:4b:da:5c:1d:
         a6:e3:db:23:c3:f7:21:1b:5d:12:63:14:8e:94:cf:a5:b8:4e:
         6e:f0:08:c9:70:f6:d9:5c:29:37:75:c1:80:8c:61:1c:62:0e:
         f6:3a:09:6c:04:a1:de:04:78:75:8d:59:52:ea:29:74:e2:50:
         d4:f9:10:48:97:d0:ed:43:8b:20:d4:98:37:14:b6:df:66:69:
         82:b3:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:40 2026 by rpki-client