Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa
File:                     555E0D90B71F11EFBBE56410C4F9AE02.roa (raw, json)
Hash identifier:          w5rmWZZVBxC2/bAO599UhQgXvs8hWsiDzRokDXUEGU4=
Subject key identifier:   93:39:CD:1F:9C:9C:95:C2:AD:4F:22:84:2C:E7:37:34:99:A5:1B:C7
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01E3
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:22:02 +0000
ROA not before:           Fri 29 Aug 2025 05:25:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9400
IP address blocks:        103.118.40.0/22 maxlen: 22
                          103.118.40.0/24 maxlen: 24
                          103.118.41.0/24 maxlen: 24
                          103.118.42.0/24 maxlen: 24
                          103.118.43.0/24 maxlen: 24
                          103.236.224.0/24 maxlen: 24
                          103.236.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug 29 05:25:38 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59d0a-4539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:f6:e5:c0:3f:70:ed:c1:0a:e5:c3:c6:9a:
                    c7:5c:0f:7c:69:df:c0:91:cf:06:95:5c:0e:4a:6b:
                    07:33:74:33:f0:77:ca:1c:0f:0c:24:68:67:e2:5a:
                    a6:3b:c2:91:6b:88:82:50:0a:63:cf:55:51:71:ad:
                    49:97:53:aa:37:9e:63:52:ec:fb:f0:59:00:4d:c8:
                    07:a6:ef:b5:f4:0a:53:80:5d:17:a2:27:55:d8:ec:
                    2f:07:32:16:ef:d0:4d:8f:04:63:58:ce:c7:68:ef:
                    68:94:a2:8d:e8:9c:be:04:d8:6a:2b:13:be:54:02:
                    6d:8c:e1:0e:8e:29:85:7a:55:87:ef:62:b3:44:81:
                    ce:44:3e:6b:29:69:76:6b:c6:18:c0:40:88:d4:a1:
                    e9:05:cc:3a:4b:12:80:ce:9a:3c:1b:8d:97:c9:fc:
                    8f:9d:93:61:fd:58:89:16:b9:2b:57:33:37:d2:45:
                    87:e5:3b:29:23:3c:9e:d3:26:f9:06:2c:e6:a2:1d:
                    cb:a9:db:ca:b1:9a:52:aa:78:12:56:a4:be:b9:9a:
                    80:14:1b:40:a8:76:23:12:ab:99:6d:fd:4a:58:1e:
                    31:c7:83:ad:ea:36:fa:27:6c:ac:56:0f:2d:b5:d6:
                    c6:dc:25:62:3e:e7:47:e8:ef:1d:9d:f6:38:30:b6:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:CD:1F:9C:9C:95:C2:AD:4F:22:84:2C:E7:37:34:99:A5:1B:C7
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.40.0/22
                  103.236.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:93:d1:84:bc:86:79:eb:ff:00:49:6e:18:be:33:64:cd:
         a3:5b:25:bb:98:92:d9:6b:27:f4:66:ed:8c:64:ff:29:43:c6:
         9e:cb:a4:22:e1:18:84:18:52:2a:6e:30:77:65:3a:84:cf:6a:
         8e:0b:62:6c:11:9e:b5:83:3b:a9:c5:31:20:f3:38:50:c9:1b:
         9e:27:9d:45:96:c1:75:7b:27:6b:09:70:2b:5e:8b:92:f8:ca:
         3c:1c:4c:df:33:69:22:00:c2:21:f0:27:d5:a9:3f:86:12:ea:
         7e:dc:f7:35:70:69:cf:23:77:19:01:a2:b0:d3:0c:16:6a:c1:
         6a:18:1f:9a:10:6f:6d:91:f8:93:01:70:99:d5:61:68:ab:d9:
         06:73:a6:58:0c:a8:54:0d:f8:cf:7c:90:c2:ef:f3:85:16:23:
         27:fb:10:0d:e7:b6:3a:96:b7:89:4d:da:43:a0:3c:4b:da:89:
         31:42:73:51:85:b0:6f:c9:a2:e0:d4:d5:8b:c2:ba:10:0d:e5:
         38:6e:01:81:05:87:2f:af:cc:51:4c:32:38:fe:4b:00:1c:43:
         dd:43:c1:34:af:1e:e6:4c:a8:f9:b7:d8:5b:bd:7d:cb:4b:2b:
         f4:14:e8:7c:78:86:9e:26:99:1e:dc:01:d5:70:a8:6c:75:50:
         49:8b:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:02 2026 by rpki-client