Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa
File:                     823433125F0C11EC8C2C2820C4F9AE02.roa (raw, json)
Hash identifier:          WH/Wg/EO4nt6pgpoUx6Qd+KWgLY+/DrNoBzFsn4L0uA=
Subject key identifier:   ED:FF:C8:44:E8:10:09:55:86:EB:4D:6D:73:0F:70:6E:6F:3D:35:15
Certificate issuer:       /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial:       0BB1
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa
Signing time:             Mon 20 Jul 2026 20:20:08 +0000
ROA not before:           Mon 20 Jul 2026 20:20:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.115.193.0/24 maxlen: 24
                          2001:de9:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
                          rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
        Validity
            Not Before: Jul 20 20:20:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5e82f8-91fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:39:dd:8b:e9:08:7e:da:3e:65:f1:ea:48:
                    35:16:a0:dc:4c:6b:77:68:c2:d9:4e:93:f2:32:f2:
                    f5:c4:90:d8:fa:ad:e2:f1:77:52:7a:24:92:6a:ee:
                    ba:f5:eb:dc:1c:a5:46:ae:8b:60:80:95:28:0e:51:
                    43:b5:d5:28:98:3f:1d:2d:52:93:e0:f2:43:d2:98:
                    2d:6d:cd:b9:ad:1f:f7:68:96:38:85:99:fc:80:f8:
                    9b:ab:65:56:87:a0:40:48:78:fe:d5:33:0d:83:6d:
                    16:f9:8d:90:93:22:36:d4:c1:1f:4b:0c:4f:1e:ff:
                    82:66:ab:27:f0:9e:a3:ed:c3:a0:b9:c4:13:e6:3a:
                    35:4e:b6:f0:13:0e:16:6b:31:94:6f:95:87:46:f4:
                    56:6c:20:9b:bb:23:fa:f4:6e:25:de:20:c4:71:04:
                    6f:d1:79:8b:b6:ae:fe:65:30:7b:d9:93:89:0a:c5:
                    17:54:3f:c1:38:db:66:ef:bf:9f:c6:99:4a:e6:dd:
                    1c:23:04:30:b8:b5:14:be:87:b0:87:c8:47:9c:ca:
                    b2:3d:56:72:6d:4b:a3:df:8a:8c:91:1b:d8:77:12:
                    28:57:13:21:5e:41:cf:5b:ad:1a:20:0f:16:ea:a8:
                    45:b6:39:37:29:de:32:38:b3:b0:01:00:36:f4:a4:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FF:C8:44:E8:10:09:55:86:EB:4D:6D:73:0F:70:6E:6F:3D:35:15
            X509v3 Authority Key Identifier:
                keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/823433125F0C11EC8C2C2820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.193.0/24
                IPv6:
                  2001:de9:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:5e:6c:70:9b:b7:b9:74:63:7f:1b:5b:38:04:02:4a:bd:f7:
         43:5c:f6:d7:33:77:8b:fb:8e:38:e1:b3:07:e1:1d:16:f7:b3:
         f3:0b:82:37:dd:0c:c6:88:5b:c5:cd:d6:a9:24:32:6a:8d:6f:
         e1:94:2b:93:8f:5b:e1:63:91:8b:2e:51:90:18:5d:6c:4e:71:
         b5:db:f0:f7:da:9a:73:27:54:c7:2f:93:9f:be:1d:7f:9f:a5:
         5b:1e:9d:a5:29:f0:12:47:38:1a:3a:f9:cd:01:d2:02:94:8a:
         e5:94:9a:1e:49:2d:93:10:fd:5b:40:56:70:78:2f:d4:6c:dc:
         a5:5c:f0:7f:79:e9:d1:a8:02:7e:bb:83:2c:41:0d:73:0f:05:
         e6:a9:07:46:53:33:ec:6a:d2:ec:31:bb:39:f0:b5:d2:73:4d:
         85:f9:8e:78:96:b4:eb:7d:bc:5c:22:26:31:07:2b:ae:8d:5d:
         da:c3:fb:e2:6e:83:84:76:35:85:af:f4:03:82:51:13:45:bc:
         25:93:44:df:5a:30:1d:96:a0:9d:3b:bd:4a:91:66:3c:0d:af:
         00:d1:04:28:95:de:4d:d9:36:66:dc:7a:c4:95:8a:e1:49:31:
         35:38:30:80:a0:60:1e:2f:91:c6:92:1b:1f:66:ee:41:03:7f:
         3b:e2:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:56 2026 by rpki-client