Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
File:                     C00CB30A87A711EA94E5CF22C4F9AE02.roa (raw, json)
Hash identifier:          tfYPd4ibpUuaYHaLbI0h01aKZky6cs6Lw26My7OXg04=
Subject key identifier:   98:BB:EA:EA:18:5F:4F:61:15:9A:FE:78:58:0B:D2:2C:21:1D:77:EA
Certificate issuer:       /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial:       198A
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
Signing time:             Fri 10 Jul 2026 17:17:17 +0000
ROA not before:           Fri 10 Jul 2026 17:17:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136794
IP address blocks:        103.96.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
                          rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6538 (0x198a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E504, serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
        Validity
            Not Before: Jul 10 17:17:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51291c-a8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:ca:62:6b:bb:0c:36:fe:b5:4d:4a:1e:96:
                    1a:12:e6:f5:c1:f3:d4:b7:d9:9c:c1:fe:a5:c7:a2:
                    d3:4f:d3:05:12:7c:99:de:3c:43:5a:cb:69:16:7a:
                    5c:cb:92:9f:b1:38:55:1f:db:98:bb:cb:6f:4a:01:
                    be:b0:ed:a7:38:27:da:e7:93:3f:6b:69:5d:ef:f1:
                    4f:c2:83:03:e4:a6:d9:bb:51:66:4e:2a:62:cf:16:
                    98:44:47:16:51:65:8c:bd:e3:9d:f0:5a:15:be:01:
                    49:b3:e0:f3:2f:a7:32:58:3e:48:c7:74:a0:89:90:
                    02:bf:f9:ff:dc:45:e4:93:e0:db:4b:77:00:fe:53:
                    f8:46:21:9e:19:ca:df:47:25:a6:df:49:f2:ad:f8:
                    01:d6:c0:4f:19:08:86:68:f8:db:63:98:82:c5:a6:
                    84:0a:52:38:bd:c8:14:19:d2:1e:95:55:ad:15:a1:
                    f6:7d:b7:9c:cf:60:87:05:a6:2f:ff:60:2b:1f:eb:
                    89:fd:19:f0:3b:dd:3f:7e:e2:83:f5:22:bb:62:37:
                    3d:cf:df:c1:b2:94:7c:4d:9e:7e:27:42:95:9e:fa:
                    f0:d6:87:8f:d3:83:e9:81:7c:84:77:97:13:19:66:
                    97:f2:15:0f:64:c7:a9:e3:1a:b6:5c:34:66:c6:89:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:EA:EA:18:5F:4F:61:15:9A:FE:78:58:0B:D2:2C:21:1D:77:EA
            X509v3 Authority Key Identifier:
                keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:d1:45:5f:76:c6:3f:96:87:6d:72:46:24:09:3b:0b:7c:
         74:19:ba:7b:65:a9:c2:51:4a:15:c1:ec:bd:c3:31:71:94:33:
         13:35:88:56:13:39:33:e7:4e:34:f2:ff:40:2b:7d:f9:87:c2:
         85:13:63:6a:2e:38:d1:52:9f:70:1b:18:98:3c:2d:e1:07:b6:
         52:f4:15:8e:6b:e1:e5:b2:67:99:80:1e:bf:71:61:52:a9:77:
         0c:40:f0:30:4b:68:5e:64:13:9c:b6:45:b7:88:01:86:5b:b0:
         f6:71:95:1b:31:48:77:2e:82:a6:3a:20:87:d8:db:c4:2b:78:
         09:cb:6d:cc:6e:fa:e6:2b:45:d1:0b:b1:43:e3:80:b8:44:fb:
         c5:e2:41:d8:fb:af:b5:df:a7:e8:fa:00:a0:c9:cb:5f:60:01:
         64:db:ab:be:57:e8:86:53:46:38:78:a4:2d:4c:05:f4:30:2c:
         77:83:6f:09:71:25:69:6c:40:be:81:29:ad:fb:16:09:2b:f3:
         3b:bd:3c:71:2e:5c:70:9c:d9:fc:fc:4e:3c:01:ad:b4:d7:0d:
         40:61:bf:f0:01:3d:4d:03:04:53:85:81:eb:3a:24:90:c6:06:
         58:e1:23:d7:47:ff:04:40:74:57:8c:01:8e:f3:29:7e:96:b9:
         56:dc:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:00 2026 by rpki-client