Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
File:                     738195EEB11811ED997EA457C4F9AE02.roa (raw, json)
Hash identifier:          QTF3ES2D2Qx8q3gy7vrfGGN+D9+IJxfQn8XNpdqSONA=
Subject key identifier:   24:54:F3:5A:58:F3:7C:CE:A2:CE:63:29:E3:2E:CE:AE:55:D1:5C:4F
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0284
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 03:28:09 +0000
ROA not before:           Sat 11 Jul 2026 03:28:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134926
IP address blocks:        103.189.88.0/24 maxlen: 24
                          103.189.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Jul 11 03:28:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51b849-fa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:d1:d2:3b:33:66:08:88:0f:ad:86:70:28:
                    2f:91:0c:93:8f:7f:97:db:16:14:9e:52:aa:d6:0b:
                    b3:ea:6f:3a:c9:27:10:61:5d:c5:ce:f5:2c:51:cb:
                    3b:1a:41:6c:3f:ff:82:31:c0:61:e1:71:c7:f7:75:
                    b1:17:57:99:de:74:ea:3a:50:36:00:78:f7:87:4c:
                    ff:a8:2e:09:ba:ee:e0:e8:21:35:60:73:57:25:d3:
                    f8:49:c8:1c:7a:12:2f:d2:f8:e3:47:6b:13:27:68:
                    ab:df:ac:46:50:f1:70:98:e7:7a:80:10:49:f8:1b:
                    cc:3b:f1:66:b5:9c:4a:0c:e5:18:93:c6:81:76:84:
                    65:55:76:d7:6d:18:ed:f0:9e:20:76:8f:5d:71:e0:
                    ed:a4:56:b8:b6:e6:79:66:d0:99:88:3f:0f:83:fc:
                    e8:2f:26:92:7b:f0:4a:ee:ad:1a:e1:08:fb:84:d3:
                    a9:1d:f4:5d:3c:4e:61:b8:4f:5f:08:0d:4d:1c:12:
                    8a:47:42:3a:4e:cf:ce:86:bd:e9:96:3f:cd:bc:38:
                    eb:86:8e:21:98:21:a5:1f:61:44:b2:88:f2:f1:5d:
                    e3:6d:25:37:b1:1f:02:b9:a1:24:17:25:62:f0:45:
                    15:2a:43:00:85:23:15:02:ae:9c:e4:63:5e:f1:2e:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:F3:5A:58:F3:7C:CE:A2:CE:63:29:E3:2E:CE:AE:55:D1:5C:4F
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:93:e5:9a:de:5c:b1:5c:7b:bb:f0:0a:a3:14:08:ff:a6:29:
         2b:e2:40:fe:00:8e:43:91:48:7b:51:5c:7c:10:13:76:70:4a:
         f3:01:ea:b3:f0:05:22:75:45:92:d8:f5:75:96:1d:58:61:df:
         63:0d:8b:c0:2c:49:5d:fe:14:ba:cb:5e:22:13:63:82:8d:c4:
         81:0e:31:a3:35:f0:3c:4d:20:0f:bf:6e:57:a3:6a:ad:ee:cb:
         69:91:bc:48:b6:a1:3d:7a:2b:d3:24:b6:46:e7:02:60:95:0b:
         79:d2:b7:d7:47:9f:ba:5d:04:51:d9:bb:50:82:1a:4f:08:b6:
         49:f8:f7:a8:2e:30:b7:70:6e:20:16:b2:a9:26:4f:87:59:8c:
         87:7a:df:bb:bf:b2:14:b1:29:4b:a8:11:71:fc:7b:f5:83:ec:
         7e:b6:38:1f:9f:18:c6:63:f5:9b:40:96:a7:c5:84:17:17:6f:
         23:80:63:4b:49:31:6d:ab:10:60:12:6e:93:6d:04:03:c5:76:
         5b:2b:3d:f9:06:ff:d4:59:7b:01:3f:7f:00:30:4d:1e:cc:c3:
         43:5c:c0:c3:d0:47:df:b8:f1:c3:1e:5d:39:9f:0e:82:7b:7f:
         85:09:fd:63:1d:cb:d2:86:3e:64:23:93:3c:12:14:d6:7c:cd:
         9e:a1:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:48 2026 by rpki-client