Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
File:                     DE95A942581611EE878B2E54C4F9AE02.roa (raw, json)
Hash identifier:          w+6KOPKF7OqR8NogCX5qW17+ARn7zv6tlxxb0zjTuqA=
Subject key identifier:   62:7C:DF:A4:3F:39:45:89:2D:E8:91:C7:0F:B5:53:09:52:FD:66:B8
Certificate issuer:       /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial:       1EA2
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
Signing time:             Mon 22 Jun 2026 16:18:45 +0000
ROA not before:           Mon 22 Jun 2026 16:18:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135408
IP address blocks:        103.217.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
                          rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7842 (0x1ea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
        Validity
            Not Before: Jun 22 16:18:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a396065-994f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:ea:a0:e6:04:09:59:09:bd:f1:e3:73:2a:
                    fc:59:4b:38:e4:d0:c1:46:78:49:89:03:d1:91:89:
                    1f:e1:87:6a:e9:95:76:31:60:c5:0d:be:12:b3:96:
                    f9:06:93:4c:97:de:c4:b8:90:5a:21:0d:88:3a:c5:
                    53:b3:19:8d:fe:80:ab:ac:4a:cb:11:12:45:6b:ae:
                    3c:ea:eb:65:e5:20:05:77:eb:57:1d:3d:b5:44:b6:
                    30:f6:d3:1f:47:9f:9f:2f:b8:83:f0:b6:c2:1e:42:
                    e6:27:c9:2f:5b:a2:1f:8d:8a:17:9b:a2:f7:97:bf:
                    63:8e:1e:c3:d0:18:4a:8d:58:74:d7:c8:39:99:b6:
                    d3:d7:dc:08:5e:9f:f4:b5:b7:f3:77:42:5a:50:18:
                    db:e0:39:bb:b9:47:02:60:83:bd:67:57:07:6a:48:
                    d7:e7:c3:17:20:da:57:41:4d:5b:01:d8:88:ef:72:
                    d0:02:5e:a8:97:27:e4:6b:0f:e2:c0:23:d4:57:36:
                    51:30:f0:51:16:42:54:b2:0d:26:0f:da:23:7f:97:
                    fa:26:aa:20:f9:ef:51:09:bc:8e:46:f1:2b:88:47:
                    1e:6e:84:db:8f:3c:10:20:0e:48:34:8d:52:96:32:
                    20:cf:a4:e3:fb:98:db:83:14:8f:32:d1:45:05:90:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7C:DF:A4:3F:39:45:89:2D:E8:91:C7:0F:B5:53:09:52:FD:66:B8
            X509v3 Authority Key Identifier:
                keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:f2:89:fe:67:38:1c:0e:c5:6b:b1:f4:58:a2:e3:75:04:
         4e:2f:8a:fd:67:b8:d8:46:d2:d3:cd:e9:87:e3:dc:37:ce:e0:
         b1:20:4b:61:e7:a8:8c:b3:a2:10:66:44:d2:f9:fd:7c:9a:42:
         6f:18:ad:98:0c:49:fa:ba:59:e5:5e:79:40:be:f1:09:99:bd:
         8d:7c:47:1c:16:b6:71:5c:ae:11:48:74:da:b9:e3:3f:8a:bf:
         65:66:65:a3:7a:e9:e1:2f:db:b8:79:33:b5:99:be:42:71:a6:
         f2:9f:c1:bc:ab:14:7b:72:70:6c:b1:8f:ab:08:b0:00:9c:20:
         10:45:61:72:c1:42:56:18:20:9b:49:75:da:ed:94:c5:23:ce:
         29:6a:e0:d8:e7:dc:49:59:6c:32:cf:c1:0e:05:7f:22:c9:0b:
         b3:e3:e1:2b:1e:3a:5e:d1:78:1b:7d:0e:13:da:37:91:87:3b:
         23:00:64:3c:e0:3a:66:77:f5:b6:74:d3:25:74:d3:01:ea:95:
         40:01:49:09:ca:b4:2c:06:c8:26:d9:24:5f:53:c0:fa:93:27:
         12:9b:fe:d5:09:b2:93:65:09:46:ef:bb:37:77:20:31:41:f7:
         7c:37:19:5d:2b:c9:83:81:6c:d9:67:5e:31:10:ef:45:84:2c:
         fe:7c:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:36:47 2026 by rpki-client