Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/C110D9D23D8611EEB7F2D04BC4F9AE02.roa
File:                     C110D9D23D8611EEB7F2D04BC4F9AE02.roa (raw, json)
Hash identifier:          zgE9WXk2BJNIymZ/8T8FPez8w0RKw5fSp5N/daqdWGY=
Subject key identifier:   A2:E2:2A:E5:3A:20:C5:61:8B:99:15:CF:9B:D6:DD:9A:BA:C0:DD:C2
Certificate issuer:       /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial:       0245
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/C110D9D23D8611EEB7F2D04BC4F9AE02.roa
Signing time:             Fri 17 Jul 2026 03:29:11 +0000
ROA not before:           Fri 17 Jul 2026 03:29:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151465
IP address blocks:        103.229.188.0/23 maxlen: 23
                          103.229.188.0/24 maxlen: 24
                          103.229.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
                          rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Validity
            Not Before: Jul 17 03:29:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59a187-04d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:e8:1a:30:3b:1b:24:f6:f9:5d:8a:53:40:
                    9a:02:5c:34:ef:95:01:7c:2e:bc:83:f7:42:6b:05:
                    0f:4d:d3:02:bf:0f:11:bd:e5:5b:35:00:df:46:8f:
                    b3:42:94:1e:be:2b:f6:86:d3:4b:1a:eb:37:69:2b:
                    a8:c9:6e:20:11:e0:67:a2:8e:a3:7f:a4:76:ce:02:
                    4d:4a:84:3b:06:b5:d8:fc:d7:e8:e1:af:39:46:77:
                    7a:89:e7:4d:5e:37:42:1d:33:bf:81:75:a0:26:3f:
                    61:ba:c9:0c:e7:2f:1f:a4:cc:05:97:eb:cb:03:b5:
                    f3:91:ce:60:b6:b9:f8:61:bb:df:74:81:6e:04:28:
                    bc:7f:2d:1e:f7:90:2f:2d:70:7c:63:8d:f9:80:ac:
                    df:0b:d2:91:5a:27:71:d0:85:8d:5c:5a:62:ae:96:
                    61:7b:f9:e8:b8:30:83:91:3e:51:34:78:aa:33:cf:
                    bd:98:23:13:41:fc:a0:f0:f7:3d:92:42:79:af:e7:
                    d4:10:8a:29:76:b8:70:21:bc:49:96:99:c0:5f:c4:
                    17:e4:9a:6e:ff:d1:d1:d1:b6:cc:92:3d:d2:fe:78:
                    81:2b:7e:37:72:3d:92:c5:88:d6:c9:d2:58:7e:64:
                    db:73:d2:f9:07:ad:83:e6:d1:ab:91:eb:74:b7:55:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E2:2A:E5:3A:20:C5:61:8B:99:15:CF:9B:D6:DD:9A:BA:C0:DD:C2
            X509v3 Authority Key Identifier:
                keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/C110D9D23D8611EEB7F2D04BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:23:cc:34:5c:b5:ad:b3:0b:41:48:14:8e:5f:86:ab:19:3a:
         8a:02:85:b3:95:6d:8b:58:dd:c0:71:e7:b4:5f:0f:04:f2:ea:
         25:e8:20:18:6f:49:de:43:c5:f4:ee:e4:31:54:d4:bd:df:9a:
         22:97:80:2f:01:0a:11:b0:cb:bb:a9:18:26:58:22:ab:85:35:
         be:6b:a3:46:1d:05:00:8b:ef:3a:5a:17:71:62:d5:d1:80:ca:
         1d:40:0b:89:df:64:6e:ba:df:a5:ba:90:53:67:6d:73:77:2b:
         6d:78:41:10:c6:74:cd:2e:ef:4c:4f:e5:ed:b6:02:bf:40:8c:
         aa:5c:10:ff:84:b0:01:71:00:d9:f1:4d:8e:35:67:6b:29:c0:
         22:4d:f5:3b:17:cc:fa:1d:1f:5c:9a:81:3a:62:b7:ee:1d:0f:
         06:25:12:53:55:c2:85:0e:85:87:6b:32:06:f3:9f:71:85:6e:
         ea:9d:ea:fc:fc:35:e0:ba:49:9a:d7:fb:8a:63:c6:20:b9:ef:
         b2:3b:85:01:55:3d:dc:26:b4:16:97:a0:51:70:57:88:f0:c0:
         71:6f:dd:80:3b:28:6e:ff:ad:c0:ab:0e:9f:10:a5:cd:4e:0c:
         0a:07:5d:48:43:68:21:f8:58:33:16:b3:1a:30:a2:61:a4:1f:
         36:11:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:55 2026 by rpki-client