Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
File:                     1BCA5982656311ECA4E81323C4F9AE02.roa (raw, json)
Hash identifier:          sBJRcb1jeiSo6W9iH/QWFKlKGnbO+XkPqf2UK7Z9wiI=
Subject key identifier:   E0:D3:4C:5A:C6:81:CA:41:84:41:6D:06:2F:27:E4:A7:BF:79:88:0B
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       10EB
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 18:18:00 +0000
ROA not before:           Wed 22 Jul 2026 18:18:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     59382
IP address blocks:        103.237.36.0/22 maxlen: 24
                          160.202.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4331 (0x10eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Jul 22 18:18:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a610958-7fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:1b:c1:c9:32:60:5c:30:4d:3a:28:85:a3:
                    46:23:c3:f4:90:82:19:d0:e7:81:65:af:be:c2:3e:
                    5a:94:57:82:6b:2e:db:fa:d9:a5:c6:95:1c:9d:44:
                    21:4c:53:31:ab:a0:56:1b:58:af:73:8f:cd:96:71:
                    3d:92:cc:e6:e9:d1:f6:23:25:97:1d:04:c1:88:e5:
                    f8:dc:51:b3:ee:d8:9d:0c:80:a5:26:16:c3:3b:43:
                    4a:80:16:a1:0b:e1:4d:df:cb:67:ea:d3:14:78:75:
                    24:b3:ba:ce:82:06:a2:3e:ce:68:93:c4:f1:5d:e4:
                    92:2f:b7:45:e4:c0:73:51:2f:85:81:ed:87:b2:42:
                    3a:53:04:a6:0d:9f:2f:58:15:fb:84:73:a4:fa:03:
                    ce:1f:35:92:72:0c:e9:a9:78:e0:41:4b:a2:dc:a2:
                    16:17:3e:66:42:7a:80:92:3c:81:9d:be:3d:bc:be:
                    89:b6:ea:c5:8e:83:e8:ad:25:e3:8b:06:cd:6d:fa:
                    bd:2d:4a:c9:9b:d3:95:cf:df:79:38:d8:20:06:49:
                    f3:98:10:22:85:b9:a3:6d:16:2a:94:e5:db:54:c9:
                    3e:79:87:df:c6:44:f0:4e:3d:b5:2d:99:71:f5:d4:
                    df:b4:1c:2f:dd:0e:02:9d:32:81:d6:8a:6d:33:30:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:4C:5A:C6:81:CA:41:84:41:6D:06:2F:27:E4:A7:BF:79:88:0B
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.36.0/22
                  160.202.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:8a:e5:20:c3:b0:38:d5:3d:79:9d:db:c8:1a:e7:22:d2:
         01:b6:30:d0:24:52:b3:a4:83:17:f9:d3:90:49:12:ae:37:ea:
         85:28:7e:1d:a5:71:8b:10:bc:d0:9e:ca:6a:58:9c:ca:7b:ff:
         1a:15:50:b1:68:b5:e6:a8:88:50:a0:75:18:8b:09:0c:24:76:
         44:62:31:03:03:20:0c:f3:e0:ef:4c:e4:ac:a5:41:30:94:9a:
         79:75:41:f7:07:af:5c:2c:98:a5:05:08:5e:b4:dd:5e:96:02:
         5b:9f:a7:b0:9c:a2:b2:50:25:42:4c:32:6c:a6:7f:1d:02:b6:
         4f:35:09:45:24:9b:91:e2:af:ab:1b:5b:cf:26:92:f7:0b:e6:
         f3:14:20:0f:12:b3:42:7b:35:af:a2:29:b9:ac:f6:9e:15:63:
         9f:e8:3b:63:f2:0f:03:ef:b0:59:bb:92:b1:73:f7:85:cd:2c:
         27:02:fa:45:60:bc:33:bb:65:ef:5e:92:e8:fe:92:8d:26:b9:
         fd:c3:e8:4d:83:d0:ce:b8:d6:c7:70:8f:5b:58:ec:01:f6:70:
         56:16:50:b9:15:28:73:03:a6:11:6d:64:a1:32:1d:1a:a4:69:
         9d:cc:85:8a:e4:37:81:7d:58:5f:0a:d2:03:19:67:91:fe:d8:
         d1:05:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:46 2026 by rpki-client