Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
File:                     7338235CC06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier:          Aeg61XcuOkOdleV15Q4+Qk8RtuldUKElhU+Yjo/HRrk=
Subject key identifier:   0F:CF:E8:F9:59:70:FD:46:FC:13:84:BC:40:2F:0C:04:0D:E9:9A:72
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       1600
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 17:17:46 +0000
ROA not before:           Fri 10 Jul 2026 17:17:46 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135106
IP address blocks:        103.209.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5632 (0x1600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: Jul 10 17:17:46 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a51293a-2f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:6f:63:05:4f:76:86:d5:0f:80:4d:0c:50:
                    5c:83:e9:20:39:97:82:ed:b2:59:f7:e2:1e:07:ad:
                    49:af:67:68:5b:cc:5a:e5:a8:39:b0:47:23:de:0b:
                    e5:ae:3e:f0:76:d4:fd:41:ce:6d:de:ef:23:1d:12:
                    6c:46:e6:f2:ff:fc:6d:fc:30:d7:ca:d5:ab:13:05:
                    8f:d7:db:cd:2e:5d:d3:13:0f:50:84:8b:b1:5d:ed:
                    4c:6c:19:7e:6d:12:01:f0:44:2b:46:bc:77:f2:a2:
                    3a:2a:8a:0d:a6:96:52:d4:2d:01:76:34:5f:ad:1e:
                    a9:b7:ce:2d:38:9c:f1:b0:74:4b:cc:06:43:34:b4:
                    8d:b9:58:49:89:c1:a2:f3:5b:57:a8:c5:b5:c5:65:
                    26:db:32:1a:aa:9b:65:01:1b:f4:c6:c6:25:ea:8b:
                    fa:4a:17:b3:dd:58:41:d5:60:7c:b7:37:78:35:ba:
                    71:6e:a2:b7:a1:aa:57:3d:4f:40:31:e1:b8:a2:57:
                    af:f3:94:68:9f:55:0a:40:4a:f6:3d:89:30:ca:d1:
                    6a:2d:82:f5:33:14:01:99:38:6b:d4:b6:98:8a:de:
                    49:2b:36:c2:26:17:be:1b:b4:ae:08:d3:7b:12:51:
                    d9:88:b5:30:9f:4a:82:4e:22:a2:c6:09:5d:01:e9:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:E8:F9:59:70:FD:46:FC:13:84:BC:40:2F:0C:04:0D:E9:9A:72
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:9b:e1:86:03:b9:a7:d3:4d:0c:e6:d7:e4:94:90:cf:c4:
         82:48:b9:bc:0a:e8:24:72:37:9e:60:65:96:7c:77:12:9b:e2:
         ff:9c:f8:1c:7a:66:99:96:44:f0:ce:d4:cd:23:9c:83:8a:13:
         25:6f:b9:12:4d:a7:0d:68:69:a0:cd:38:3c:d1:0d:a7:b8:20:
         ec:4a:bf:f6:cb:45:e8:33:cc:09:8a:06:c0:6a:77:80:f4:43:
         70:3c:85:58:8d:15:a5:30:20:15:65:61:57:af:a3:16:35:7e:
         bf:51:dd:b5:10:f6:bd:95:e8:42:7c:de:17:99:6e:d5:c1:25:
         60:dc:1f:65:e7:e6:16:fc:33:dc:ce:ef:6c:82:60:87:2c:b8:
         ff:3a:3a:16:7b:03:0a:37:09:c5:14:f8:54:b6:c4:0e:c9:c0:
         35:a8:5a:de:ea:70:06:ad:a7:5d:fc:f5:15:f4:cf:18:c2:7c:
         99:cb:52:12:16:cb:c7:23:dd:b8:53:23:33:14:5e:e8:60:64:
         1d:98:d3:ad:13:7b:be:2b:c5:81:af:e5:c9:31:5c:1f:44:94:
         9a:bf:9b:8b:79:8d:9a:9c:7f:07:c0:e3:34:97:8d:0f:90:e7:
         29:b2:22:a9:d2:07:9a:e5:e4:30:10:88:7e:1f:14:a3:04:75:
         03:b6:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:21 2026 by rpki-client