Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa
File:                     7D512C7EB0C611E5BDBA5065C4F9AE02.roa (raw, json)
Hash identifier:          6bA6+oTEJwdKjRMLs3DZDmUiHzIoGUQ6ClY8dXUWKgI=
Subject key identifier:   6B:89:B3:8E:1C:C4:24:E6:4A:B6:0D:FC:7A:9D:41:BD:8A:23:07:B8
Certificate issuer:       /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
Certificate serial:       3586
Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 15:10:05 +0000
ROA not before:           Tue 30 Jun 2026 15:10:05 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     38204
IP address blocks:        103.163.76.0/24 maxlen: 24
                          103.247.246.0/24 maxlen: 24
                          202.52.44.0/24 maxlen: 24
                          203.189.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl
                          rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE
        Validity
            Not Before: Jun 30 15:10:05 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a43dc4d-8b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:d1:a6:b7:91:52:f0:aa:c5:2c:fe:f4:19:
                    b8:e1:a3:dd:dc:d2:15:b5:bd:67:6a:1e:7a:48:cc:
                    0b:b0:e3:2f:d1:79:e0:4c:7b:ea:b8:a8:40:3a:c7:
                    b6:82:9d:f6:08:a1:aa:c2:ef:06:bd:8e:b2:05:89:
                    70:9e:82:2b:15:43:e4:4f:28:c0:1d:7f:6a:49:e6:
                    97:d4:51:6f:93:04:67:38:f7:a4:5f:74:60:cc:c0:
                    13:17:11:15:12:8a:c1:12:43:b2:26:60:a8:72:16:
                    0e:73:93:d6:da:21:8f:56:f5:32:bf:8d:c5:8b:2b:
                    37:45:20:93:09:3b:66:3f:73:b6:30:8f:0b:a0:e0:
                    f8:71:9f:8d:d1:20:aa:54:9d:3e:0d:b4:2d:8b:6e:
                    be:96:71:0f:d8:34:f8:e9:ef:93:86:4a:71:1e:88:
                    48:2f:85:52:52:dd:4e:4a:a6:ee:d5:42:7b:ce:0d:
                    84:82:a6:73:d5:c3:ab:c1:cf:fe:9e:43:9f:be:f8:
                    a5:5f:ee:d0:30:5f:49:64:07:53:00:25:58:db:f6:
                    a7:ac:b8:d1:47:68:f0:1a:51:52:fe:eb:c1:fe:17:
                    00:52:1b:e7:d9:8d:64:57:07:b1:9e:47:e6:4a:40:
                    5a:90:a4:22:69:dd:91:0e:a8:18:d0:ea:29:cf:67:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:B3:8E:1C:C4:24:E6:4A:B6:0D:FC:7A:9D:41:BD:8A:23:07:B8
            X509v3 Authority Key Identifier:
                keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/7D512C7EB0C611E5BDBA5065C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.76.0/24
                  103.247.246.0/24
                  202.52.44.0/24
                  203.189.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:1b:5f:9e:29:e7:97:13:33:e6:a3:5c:7b:47:36:eb:d2:
         fd:c5:79:fa:03:fe:23:1f:c1:e5:52:2f:48:20:1d:1e:d1:25:
         1b:1a:20:c9:0b:a6:b3:54:cb:ad:29:e9:81:8f:8d:be:2f:07:
         36:a0:d2:33:9e:ff:b1:be:f2:43:d2:28:10:cc:18:66:1d:04:
         3c:35:5d:91:1b:13:e8:b4:4b:22:7e:16:74:29:79:0b:23:0e:
         39:71:0a:d3:71:a3:b9:e6:cd:91:99:9d:e2:0e:bb:46:89:01:
         4b:34:14:b0:47:0a:4b:27:0d:8e:8f:4f:8e:d8:27:f1:67:d0:
         a8:1c:63:c2:38:b3:5f:ba:e4:12:d4:9e:0d:22:42:93:b1:95:
         ef:79:14:fe:6c:5d:66:2d:e4:07:f8:e0:20:4c:04:03:99:4c:
         f4:28:f6:6d:f1:d9:db:2e:38:26:91:2c:99:14:4b:4a:c8:9e:
         9f:b3:5b:ea:d3:3e:66:b8:e3:7f:86:b9:71:2d:51:8e:ff:be:
         cc:71:2c:aa:af:54:c5:de:54:9d:a9:42:3b:28:6b:83:e8:dc:
         8e:77:b5:d2:6d:83:a7:d5:8c:b1:e7:f5:81:67:15:f1:fa:41:
         6b:e2:b2:ee:85:7d:75:d8:38:56:48:f6:53:b5:2a:4d:b3:79:
         55:d4:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:39 2026 by rpki-client