Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa
File:                     187A04506A4811F196588EF18047A888.roa (raw, json)
Hash identifier:          9Vl60CRqTbNKjmwUBuv8hbLXU5x8RNm9UnwDK+OnXww=
Subject key identifier:   BF:08:C0:C9:37:66:B8:E7:8F:88:56:5A:FF:5A:0A:A0:7B:81:A1:6B
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       1A49
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa
Signing time:             Wed 17 Jun 2026 12:28:51 +0000
ROA not before:           Wed 17 Jun 2026 12:28:51 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136479
IP address blocks:        103.89.152.0/24 maxlen: 24
                          103.89.153.0/24 maxlen: 24
                          103.126.4.0/24 maxlen: 24
                          103.126.5.0/24 maxlen: 24
                          2001:df0:d500::/48 maxlen: 51
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
                          rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6729 (0x1a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: Jun 17 12:28:51 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a329302-c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:49:e0:82:d5:b1:43:66:b0:68:9e:93:a8:
                    83:42:82:39:a1:60:e7:ab:64:70:db:66:21:a6:f5:
                    65:3d:57:55:3a:2c:d3:40:c4:81:f2:cf:30:b2:8e:
                    0a:60:3e:38:7e:e1:71:50:3b:f6:0b:57:b3:30:a7:
                    36:b1:d9:69:b9:ae:a8:01:41:23:22:4c:60:54:d7:
                    c1:95:c9:f7:7e:7d:51:18:80:e5:19:37:94:02:80:
                    cd:5e:15:c5:9f:cc:ea:a8:a2:d7:63:f7:07:35:dc:
                    55:85:0f:b8:0d:45:ee:8f:fa:2d:d9:0f:ee:b1:13:
                    dd:66:c6:9a:73:21:32:b6:c6:1e:df:2f:26:09:8b:
                    3f:33:d8:8c:53:a6:e6:25:9c:18:c5:e3:e0:66:89:
                    b2:a8:b3:22:9c:2d:76:31:bb:1b:ee:80:49:55:67:
                    96:a4:2a:57:3f:ef:07:90:61:8c:80:d3:66:07:39:
                    80:8a:e8:54:57:cc:b2:d7:91:be:93:a5:ad:7c:75:
                    cf:f3:d3:12:8f:67:59:b1:f9:7b:60:a3:0a:26:77:
                    5c:eb:26:f1:b5:96:91:e5:b3:cb:5a:d0:43:ec:ce:
                    08:96:19:e8:c6:54:91:c6:eb:0e:00:8f:d8:57:fa:
                    28:34:c3:ce:52:94:48:7d:e3:c4:50:85:8c:15:ac:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:08:C0:C9:37:66:B8:E7:8F:88:56:5A:FF:5A:0A:A0:7B:81:A1:6B
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.152.0/23
                  103.126.4.0/23
                IPv6:
                  2001:df0:d500::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:0d:e1:de:73:f7:0f:26:c7:fa:6d:fe:7d:8e:0f:3b:d2:
         9e:ee:45:5c:c3:f6:37:0c:6e:d8:78:34:0c:51:38:27:b6:ae:
         ab:54:36:6f:2f:b8:6d:7d:64:ec:b6:5b:c5:97:3e:44:79:b4:
         26:51:94:f0:60:95:64:a6:32:6b:05:7d:10:d1:e2:81:05:d6:
         b6:d5:8f:20:70:00:16:73:45:fd:8f:a1:16:af:ce:2a:49:f7:
         9a:ec:8b:75:c5:c5:99:a3:28:2a:53:80:06:b7:d6:59:76:3d:
         da:52:95:f4:99:7d:9d:ac:39:62:21:ab:ed:a1:68:57:4c:0d:
         d1:bd:36:3d:e0:71:a1:33:e1:74:85:02:20:91:e3:83:82:a9:
         9e:de:f9:b3:0c:48:e2:dd:3e:17:78:b2:f3:09:0a:c3:81:99:
         a5:61:f2:16:33:42:4d:7f:47:05:5e:78:e7:22:58:36:bc:23:
         e2:62:cf:29:90:dd:0b:4d:41:c9:5e:05:3d:2a:05:0b:18:e4:
         14:01:d9:05:11:cf:a3:f7:6c:32:af:67:5e:15:c5:7a:23:06:
         f2:15:b2:58:5e:e8:38:c1:c1:c4:e9:18:c0:f2:b0:81:51:92:
         fa:93:da:6c:2f:83:49:a0:57:b1:ca:3d:55:99:70:97:cc:ba:
         40:a2:d4:a9
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICGkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw
QTA0NzNCNDMwHhcNMjYwNjE3MTIyODUxWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMyOTMwMi1jOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAss5J4ILVsUNmsGiek6iDQoI5oWDnq2Rw22YhpvVlPVdVOizTQMSB8s8wso4K
YD44fuFxUDv2C1ezMKc2sdlpua6oAUEjIkxgVNfBlcn3fn1RGIDlGTeUAoDNXhXF
n8zqqKLXY/cHNdxVhQ+4DUXuj/ot2Q/usRPdZsaacyEytsYe3y8mCYs/M9iMU6bm
JZwYxePgZomyqLMinC12Mbsb7oBJVWeWpCpXP+8HkGGMgNNmBzmAiuhUV8yy15G+
k6WtfHXP89MSj2dZsfl7YKMKJndc6ybxtZaR5bPLWtBD7M4IlhnoxlSRxusOAI/Y
V/ooNMPOUpRIfePEUIWMFayYhQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFL8IwMk3
Zrjnj4hWWv9aCqB7gaFrMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD
QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZCN0YvMUJBRTI2NTQ3Q0M5MTFFNzkyQ0JBOTQ0QzRGOUFFMDIvMTg3QTA0NTA2
QTQ4MTFGMTk2NTg4RUYxODA0N0E4ODgucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ1mYAwQBZ34EMA8EAgACMAkDBwAgAQ3w1QAwDQYJKoZIhvcNAQEL
BQADggEBAIzpDeHec/cPJsf6bf59jg870p7uRVzD9jcMbth4NAxROCe2rqtUNm8v
uG19ZOy2W8WXPkR5tCZRlPBglWSmMmsFfRDR4oEF1rbVjyBwABZzRf2PoRavzipJ
95rsi3XFxZmjKCpTgAa31ll2PdpSlfSZfZ2sOWIhq+2haFdMDdG9Nj3gcaEz4XSF
AiCR44OCqZ7e+bMMSOLdPhd4svMJCsOBmaVh8hYzQk1/RwVeeOciWDa8I+JizymQ
3QtNQcleBT0qBQsY5BQB2QURz6P3bDKvZ14VxXojBvIVslhe6DjBwcTpGMDysIFR
kvqT2mwvg0mgV7HKPVWZcJfMukCi1Kk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:58 2026 by rpki-client