Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa
File:                     4E18682450A911EEA39AAE41C4F9AE02.roa (raw, json)
Hash identifier:          1TmegfXL7CHMVE3+A+CZbSuJIC3tkud4zJDxKyv9h1M=
Subject key identifier:   14:F7:03:E0:8D:48:A8:5D:1E:63:D0:D1:8E:29:BF:32:34:65:BD:9A
Certificate issuer:       /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Certificate serial:       0218
Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 04:29:31 +0000
ROA not before:           Sat 11 Jul 2026 04:29:30 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     135643
IP address blocks:        103.77.129.0/24 maxlen: 24
                          103.119.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl
                          rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
        Validity
            Not Before: Jul 11 04:29:30 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6a51c6aa-3528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:37:04:8b:e4:b5:72:8d:35:97:f8:ff:fb:
                    ac:ea:af:9c:0a:f6:b6:7a:83:db:af:08:aa:07:cb:
                    d6:63:25:89:23:c8:d7:6e:e6:10:b2:44:3d:7e:12:
                    ee:8b:8d:72:f8:12:0c:1c:57:09:90:90:39:2b:30:
                    23:3c:4a:16:b4:f3:32:62:8d:f2:a2:7a:6b:8f:08:
                    aa:5b:4e:aa:fe:d4:4c:90:13:d7:a3:66:2f:2c:17:
                    cc:d7:78:86:4a:a2:43:1f:af:96:60:93:be:11:c3:
                    51:01:e5:5b:3b:33:ea:28:90:fa:ee:9a:a3:7e:15:
                    3d:22:7f:bf:5b:94:ea:31:04:1f:59:a7:c1:fb:d2:
                    74:6b:1a:31:bc:c7:44:46:fb:04:e4:e4:58:b1:6b:
                    73:74:4d:f3:c7:01:9c:52:a0:34:a6:62:b5:cf:a0:
                    32:eb:a3:8e:42:24:e7:56:f5:4b:4a:ef:50:6d:3a:
                    42:6f:df:d6:7c:1b:a5:06:3e:12:22:2d:d9:eb:94:
                    0f:4a:04:99:34:c1:33:6a:a5:c4:ae:65:04:11:f2:
                    fd:39:85:10:24:c7:56:01:c5:cf:c6:03:64:59:42:
                    97:e3:29:a2:d0:dc:91:5e:e9:60:ba:cb:52:c4:ae:
                    23:07:7c:2d:12:e0:65:66:fc:31:7f:45:0e:2e:b7:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:03:E0:8D:48:A8:5D:1E:63:D0:D1:8E:29:BF:32:34:65:BD:9A
            X509v3 Authority Key Identifier:
                keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.129.0/24
                  103.119.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:da:eb:30:07:97:54:da:25:3c:00:e2:1e:02:7e:13:58:
         93:af:16:93:7e:71:e0:3b:a7:62:61:20:4b:1f:81:c9:bb:20:
         7b:9d:12:8e:69:30:4e:cd:91:18:d3:30:b3:00:35:ce:38:81:
         35:c1:69:ce:63:4f:2a:d9:03:32:a1:6a:e6:3c:8f:3f:ca:e6:
         48:05:cd:0c:6a:df:46:47:05:62:bb:91:ca:bb:5e:3f:f3:1c:
         20:a7:57:22:c8:b0:93:79:c1:b6:9d:cc:7e:6d:80:e0:e9:e5:
         67:84:e1:0f:35:1e:df:be:b3:da:8c:ee:0c:eb:ec:07:23:00:
         43:22:49:1a:f3:75:1f:0f:7e:ed:07:d9:21:d3:7e:9c:b2:6f:
         43:b1:d3:3a:3e:89:b6:25:cd:c6:16:7d:4b:66:09:84:6d:31:
         4c:8b:dc:40:f0:64:5c:82:d3:79:e3:55:2f:59:11:d4:e4:56:
         24:81:18:1a:af:d1:0c:ed:33:19:99:19:5d:2e:cd:d3:1a:41:
         cd:f2:13:02:05:c4:49:d8:b6:2d:ee:80:0a:fa:50:f2:06:72:
         7a:f7:e1:5e:16:a4:24:bd:0d:26:07:37:13:79:48:1e:1b:19:
         01:9e:10:32:a4:e1:bc:d0:a9:99:9c:3d:d6:33:1b:6b:49:d3:
         63:f5:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:39 2026 by rpki-client