Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
File:                     D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (raw, json)
Hash identifier:          UCNF/+cnABTD85PoG8PeW2eILLMlqsvNQmJ6SLeeMQI=
Subject key identifier:   91:17:2C:68:7B:8F:66:BC:D8:7C:8E:12:90:C3:C5:49:23:0A:6D:37
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       03A4
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa
Signing time:             Wed 15 Jul 2026 02:27:08 +0000
ROA not before:           Wed 15 Jul 2026 02:27:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139029
IP address blocks:        103.191.163.0/24 maxlen: 24
                          2400:96e0:2000::/36 maxlen: 36
                          2400:96e0:2000::/40 maxlen: 40
                          2400:96e0:2001::/48 maxlen: 48
                          2400:96e0:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: Jul 15 02:27:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56effc-dc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:14:51:15:4b:90:5d:3b:af:b2:72:3f:59:
                    13:1e:2c:c5:29:e4:ad:72:7a:00:f9:5a:d6:c0:af:
                    15:aa:51:ad:66:07:0b:ab:80:ad:44:99:c8:7b:8f:
                    34:cb:d6:8b:58:62:2e:45:8d:c9:de:17:79:a3:44:
                    15:76:a6:7a:88:d4:66:b2:a3:ae:ed:71:34:10:8c:
                    52:0d:83:e5:c0:94:2b:47:c8:e8:c4:bf:a1:a6:52:
                    dd:b7:7b:13:33:9e:dd:20:54:b2:e1:d9:59:dd:d6:
                    2f:a7:54:68:40:8f:4a:d9:19:9d:19:cc:cc:44:39:
                    f6:63:5b:4b:d6:be:ed:18:aa:e3:a2:8a:40:3c:99:
                    c4:bc:02:f2:e5:f1:39:fc:56:40:fd:f4:75:a6:fe:
                    0a:fb:3b:27:2c:dc:37:d0:fe:af:e6:3a:27:7c:65:
                    2a:37:7d:a8:a5:42:00:6a:fc:a2:ee:91:28:45:f6:
                    1f:04:26:d5:4f:d6:79:67:3e:f3:05:04:65:fa:76:
                    eb:5e:86:e4:55:fa:3a:8d:3e:87:75:1c:32:21:bb:
                    f7:7a:94:4b:6c:9f:59:64:82:7c:b6:50:93:3f:b7:
                    8d:aa:81:62:7b:24:47:d5:08:0c:90:fc:15:5f:27:
                    1d:70:e5:1a:d9:fc:15:ea:2e:bf:26:33:db:09:22:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:17:2C:68:7B:8F:66:BC:D8:7C:8E:12:90:C3:C5:49:23:0A:6D:37
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/D08FF4F0BB7111EFACA16B1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.163.0/24
                IPv6:
                  2400:96e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:78:26:28:ac:82:93:34:4a:6f:f7:b7:b6:23:b8:4a:b5:34:
         59:73:0c:3a:c7:4e:c6:5e:fd:88:36:2f:cd:7f:63:e9:b1:ce:
         ff:49:5f:f6:98:30:00:5f:0a:a7:ad:05:64:37:68:7a:ad:37:
         ab:e3:3a:2d:24:f4:ad:a9:b3:85:19:c2:6f:71:18:04:51:e7:
         58:3d:89:ca:75:c0:45:69:bf:91:0c:b4:fd:4e:6f:87:2d:e8:
         44:ff:2c:ab:cd:54:2b:45:41:1f:a6:d8:64:3a:a2:f8:f8:bb:
         32:8f:f8:c2:a6:36:4c:d4:fb:15:db:7b:a9:82:b8:e1:7a:6f:
         ed:d4:5c:f0:6f:a5:b1:ed:2b:44:e5:61:30:8c:95:fc:73:c1:
         3f:cc:8e:df:f2:ca:9b:93:14:7b:70:44:a2:68:22:04:ad:e3:
         a6:78:ea:3c:e4:9b:84:c4:8d:0e:d4:f1:25:10:20:d4:27:20:
         4d:ca:9b:df:04:ad:36:36:7e:71:65:ef:9d:80:93:16:46:c5:
         20:78:4a:16:bd:f5:5d:11:c9:21:5b:93:90:11:77:3f:bd:ac:
         44:f6:3a:76:4e:d8:c7:f6:91:60:01:40:c7:20:d3:22:c1:1a:
         b5:e4:0f:d8:8c:04:da:68:4c:01:9d:27:9b:60:35:4c:8c:a0:
         b7:10:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:10 2026 by rpki-client