Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
File:                     D08850D2B71411ED98AFCC20C4F9AE02.roa (raw, json)
Hash identifier:          x63jZuccY3EFvN+dQbF4Rjcil5MsUqwIGk9y/9imM7Q=
Subject key identifier:   C6:42:18:7E:CF:BB:2F:FE:A1:51:D8:16:41:C8:67:08:0F:64:18:0A
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2740
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 18:21:58 +0000
ROA not before:           Tue 30 Jun 2026 18:21:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24242424
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10048 (0x2740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Jun 30 18:21:58 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a440946-ea37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:9b:aa:7c:16:11:c7:ae:c0:ea:46:41:c5:
                    2c:2d:65:d2:2c:79:af:81:5d:51:97:1e:c0:cc:80:
                    5a:ee:48:ab:b5:b4:07:38:a7:8a:db:60:1e:b9:dd:
                    07:41:79:92:84:ca:50:54:f8:fe:5b:6a:c8:c4:57:
                    f4:23:28:f7:17:ff:70:83:8d:69:6b:23:d9:cb:07:
                    79:f6:f8:4d:c5:00:50:12:63:f4:79:16:b3:51:0e:
                    21:e3:bc:2e:e7:33:3d:10:b0:e3:53:19:37:81:9f:
                    12:a1:f4:2f:fb:63:a6:ad:37:7d:d6:31:7d:41:12:
                    26:e3:60:5e:f0:2b:10:42:8f:43:5b:24:ad:71:ba:
                    90:f0:8e:00:b3:e1:84:61:59:35:42:0b:c4:84:4a:
                    04:f4:17:98:33:7e:e7:4a:8c:cc:aa:ec:f6:eb:42:
                    52:5e:08:28:4d:52:f2:c6:ff:34:81:6e:da:9f:c9:
                    ae:41:fe:3b:4b:0d:4e:84:9b:72:34:f4:a7:87:98:
                    91:5a:c5:aa:3d:24:90:23:73:7b:db:d3:4a:86:29:
                    a7:a8:de:da:4f:35:ce:02:e0:90:ce:5d:77:01:61:
                    b7:fe:79:a9:ae:94:87:44:92:68:d1:46:bb:b3:d0:
                    00:c6:06:ae:66:b0:cf:63:ad:3f:ea:fd:c5:ed:dc:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:42:18:7E:CF:BB:2F:FE:A1:51:D8:16:41:C8:67:08:0F:64:18:0A
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:4b:97:fb:9a:98:df:aa:3e:17:ab:6c:1f:35:05:f5:c1:
         59:81:75:ce:99:93:8a:6a:a1:e5:0f:62:4b:8c:0e:85:8d:85:
         8a:51:08:e4:dc:45:fa:86:f1:34:93:7b:0f:8e:58:91:fc:e4:
         5c:f2:c4:6d:29:54:39:42:75:0b:97:ed:79:db:73:be:af:c2:
         f3:d9:54:e6:ac:dc:73:bb:aa:be:8d:bf:f6:93:aa:c6:2b:4d:
         a9:f5:28:fa:a3:01:8b:9c:4e:15:a4:e2:01:e8:92:22:06:39:
         80:b1:e0:76:53:82:85:bf:a3:26:f5:b8:77:99:06:14:f3:b1:
         0f:8b:f9:db:e5:bf:d4:9a:87:dd:21:7b:94:0f:d8:c1:f8:89:
         82:2c:fa:7b:dc:2b:9c:3c:cd:3a:a8:07:ef:13:54:60:a2:a3:
         c3:f5:75:26:b7:49:c8:89:4f:65:c5:a6:cc:8f:8a:c5:2e:4a:
         ad:f4:80:6f:a5:2c:d6:e7:4b:8c:d1:b8:75:62:b7:e1:f8:eb:
         6f:cd:2b:e9:30:4f:36:99:65:2f:a3:96:93:5e:29:76:19:b0:
         4f:95:95:f3:51:b4:1a:86:ad:03:65:04:61:98:94:40:3d:66:
         05:e8:72:ca:88:20:af:2e:74:df:71:32:ce:80:2d:39:2c:2b:
         cb:a8:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:50 2026 by rpki-client