Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa
File:                     390C84E8CD3811F09B08A83DC4F9AE02.roa (raw, json)
Hash identifier:          ONdY2CZEUdO0aLtdVqoMR3OFB/28D3pRcCa7aGvaDQ4=
Subject key identifier:   C9:67:90:2D:10:B1:44:29:61:CA:B9:6B:3D:2A:CE:1E:B5:BE:6E:C3
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       110A
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 18:02:28 +0000
ROA not before:           Mon 06 Jul 2026 18:02:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134186
IP address blocks:        103.138.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4362 (0x110a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Jul  6 18:02:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bedb4-9c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:13:6f:24:1d:fe:d4:e6:54:ca:d2:58:74:
                    67:6c:ee:de:55:74:e6:0a:60:c5:a1:70:d4:3d:bb:
                    f5:42:02:98:d1:8c:b0:44:de:16:8c:91:f7:e8:96:
                    b2:a8:ee:68:c4:3b:38:0a:56:e0:44:de:7a:5a:e4:
                    d2:b2:b1:fb:b2:01:de:40:01:88:e9:89:0d:34:d9:
                    d6:cb:1b:06:b9:3e:c9:dc:2b:c3:92:94:94:f9:72:
                    06:46:a7:76:3f:99:f8:5d:27:96:1e:e5:f6:bb:70:
                    95:07:f1:8d:d3:2f:9b:07:84:5e:2b:38:0e:bc:b2:
                    53:b0:57:4a:9f:5b:8f:27:3e:90:79:f0:1d:d5:1a:
                    4d:c2:35:c5:dd:b0:93:97:fb:66:41:da:27:b7:e1:
                    1d:fa:1d:ea:52:2b:4f:66:0e:8c:6b:c2:af:a9:2e:
                    4c:18:a4:a5:c1:cd:b1:3e:ce:53:15:75:1b:43:bc:
                    e4:f7:f7:f5:d3:7a:e8:06:80:a5:84:45:4c:81:cf:
                    48:76:70:cc:cf:a6:40:4d:0e:70:e0:2f:e4:94:21:
                    7a:3e:6a:d6:76:d8:3c:fd:1e:e4:f9:a5:95:f8:94:
                    e3:b0:fa:18:95:a9:3f:18:a9:35:ed:34:4b:4f:da:
                    db:98:79:ce:0c:c6:31:35:bb:74:ec:da:12:77:da:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:90:2D:10:B1:44:29:61:CA:B9:6B:3D:2A:CE:1E:B5:BE:6E:C3
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/390C84E8CD3811F09B08A83DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:b8:eb:31:d4:64:5f:25:33:ad:68:5e:2e:fc:07:13:f3:
         f8:6a:fc:0d:cd:0b:b9:fd:7f:2f:58:aa:ec:bc:94:2c:16:0f:
         b8:21:90:ff:a0:f5:7e:ee:72:a6:a9:90:cb:92:ac:54:aa:20:
         d0:a1:db:90:ef:cb:8a:aa:c6:66:5d:07:10:38:8d:15:a7:73:
         8b:14:13:82:8b:9a:1f:76:cc:b7:fa:bc:01:37:af:af:71:8b:
         e4:09:b2:54:64:89:5f:73:1b:de:35:d1:c5:08:18:9c:28:a0:
         6a:22:c3:32:97:a0:c7:1e:94:df:c2:42:00:93:b4:a0:27:98:
         e2:79:19:67:1f:63:f8:51:08:58:80:0d:a1:5d:94:08:08:a7:
         e8:32:08:c9:c3:03:df:9d:e8:42:9d:b7:87:a9:4a:58:a9:c1:
         7b:18:b1:46:28:f8:39:96:e8:86:b6:1a:25:f0:75:c9:6e:5a:
         a1:e8:98:ed:8c:53:8b:a1:d4:37:c1:e3:8b:9d:28:92:40:e9:
         60:68:12:2c:8f:e9:9d:00:3e:3e:5f:a6:74:b5:20:2f:d2:8c:
         89:bc:1c:4b:51:2e:2f:cd:6c:1e:24:86:28:ae:55:c3:6a:12:
         dd:29:0c:78:84:1d:67:98:4b:11:c6:57:3e:36:49:c8:b6:c0:
         5a:29:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:19 2026 by rpki-client