Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
File:                     E188EE7A935711EFBE98944CC4F9AE02.roa (raw, json)
Hash identifier:          zQjdwBYrCmNJ6NC3Jbu/wsnNVtPFgbdvd9Z7ELK9Okw=
Subject key identifier:   98:9F:FD:D6:EB:F8:29:BD:F0:42:E0:EA:7D:D0:9D:36:57:7F:C5:51
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       0151
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa
Signing time:             Thu 25 Jun 2026 06:37:34 +0000
ROA not before:           Thu 25 Jun 2026 06:37:34 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     10096
IP address blocks:        203.104.68.0/23 maxlen: 23
                          203.104.71.0/24 maxlen: 24
                          203.104.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Jun 25 06:37:34 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3cccae-ebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:74:82:6f:82:31:4e:f6:dc:7a:98:54:2c:
                    2e:0a:de:55:6b:a7:51:fa:90:d1:32:4b:e3:86:e1:
                    cb:fa:84:cc:36:4e:16:7c:2c:d0:e1:65:9a:e2:d3:
                    fd:70:dc:b4:73:c9:c6:38:5f:2f:42:e3:06:1e:83:
                    60:a1:d1:dd:5f:86:28:42:50:75:33:92:84:b1:5e:
                    70:39:37:71:72:f4:4d:36:79:a3:f1:91:7a:62:14:
                    ff:c7:cf:0a:7e:48:f1:bd:4e:9c:29:d6:2c:97:2b:
                    0b:7c:81:66:57:5c:4f:0a:6f:46:91:f1:74:95:d2:
                    30:a3:a1:3e:66:9f:a4:1d:68:90:44:b0:81:4a:c2:
                    94:be:e8:71:e5:63:66:1b:26:0f:2d:3b:1f:ae:10:
                    84:d9:de:6b:b2:e5:77:69:50:79:76:f1:8e:43:e3:
                    e3:dd:1d:a5:33:49:e3:f3:42:18:51:ac:e7:40:7b:
                    7a:63:4d:e7:55:5a:1f:78:02:36:b4:66:46:3f:60:
                    b8:40:dc:65:4e:e0:dc:e5:90:46:14:8a:cd:21:01:
                    0e:15:15:0a:fa:14:54:41:d9:76:17:a1:de:9c:d4:
                    9f:f9:6a:20:92:79:80:12:f4:ad:70:6b:31:83:d9:
                    e1:d9:92:2e:84:bd:85:89:a0:1d:5e:62:6e:62:55:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9F:FD:D6:EB:F8:29:BD:F0:42:E0:EA:7D:D0:9D:36:57:7F:C5:51
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/E188EE7A935711EFBE98944CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.68.0/23
                  203.104.71.0-203.104.75.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:d3:b4:3b:bc:83:c7:2f:c4:f1:7a:b8:13:9d:bd:78:4f:
         9d:07:0e:d8:ed:5f:bb:f3:30:da:67:c7:34:d8:e1:9f:ea:fa:
         4a:16:f3:81:7d:29:96:20:47:48:5c:77:e3:96:e7:05:fe:ea:
         01:89:ea:47:f4:d0:e8:3f:42:0b:e0:bb:1b:9c:eb:56:0b:37:
         0b:02:f7:16:1f:9d:f5:13:fd:70:bd:72:c2:6c:fc:6f:34:b2:
         d4:5c:1c:23:4d:81:5e:ab:7a:ac:75:87:58:8d:50:d2:38:0d:
         5f:62:7e:9c:30:38:60:67:27:d2:0d:ec:32:cd:a3:9a:7b:9f:
         f6:b3:29:25:63:85:88:07:20:29:8e:bb:61:d8:7f:c3:7f:db:
         61:14:6c:e5:2e:91:d3:79:09:29:3f:18:5a:d6:8b:57:bb:20:
         e4:b5:a5:28:fe:b1:31:b5:00:87:08:b6:b6:5a:d9:b7:c0:f0:
         ee:1d:81:8c:94:14:fa:f9:32:09:fe:ef:70:7d:b7:6d:99:68:
         83:96:79:8d:43:9f:db:b8:af:2d:4e:c1:38:60:7d:5e:f5:8f:
         21:5d:5b:cd:78:e5:fd:fd:57:e0:a5:4e:ed:f8:15:22:64:57:
         3e:07:04:0b:4b:e4:e3:d9:6b:2b:c2:2a:f4:8d:a7:f4:c7:02:
         17:4f:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:18 2026 by rpki-client