Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
File:                     B50ECD32A57E11EEB4533738C4F9AE02.roa (raw, json)
Hash identifier:          l91Dssw8/pmNPl0UZ8Pj4iGcNrigdX9iHQBJ3R2+iqI=
Subject key identifier:   FF:9D:E3:EE:D9:B3:E4:1C:FC:0A:AA:2B:26:A7:DE:95:B9:0D:62:C9
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       0249
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 04:29:33 +0000
ROA not before:           Thu 23 Jul 2026 04:29:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23688
IP address blocks:        103.230.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Jul 23 04:29:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6198ad-b080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:c5:6b:38:39:9b:5e:62:a8:b8:8e:ee:b3:
                    38:de:fe:d0:41:69:1f:60:44:e2:21:bc:4f:3e:e8:
                    b4:ba:c1:75:8d:fc:05:75:87:86:5e:c0:49:0e:7e:
                    39:8c:12:44:db:38:cc:84:30:50:57:39:ec:4a:0c:
                    cf:f2:7d:0f:bb:4a:34:48:64:3f:6b:f7:4c:1e:3e:
                    60:9f:40:b0:b0:30:06:4a:21:02:8e:ff:32:7c:e8:
                    b3:78:8b:f0:1e:33:4f:af:2b:0c:f8:f5:85:c2:68:
                    5a:a7:2c:83:1c:85:b7:ac:c3:85:e1:e0:9a:8c:d1:
                    ca:ae:5c:fa:e3:d0:ae:1a:35:fd:c3:2a:07:de:2c:
                    78:77:75:d2:c2:3e:eb:78:82:76:29:10:2c:97:a8:
                    78:35:c5:d5:53:d4:b5:4e:2a:76:d6:0a:5d:5a:64:
                    59:8e:9e:f1:f2:2a:7d:68:ff:70:a3:81:37:f0:f0:
                    98:c9:ce:18:ec:46:7d:42:e4:b8:ff:57:14:3b:d6:
                    60:93:0a:68:b9:cd:81:35:a9:95:d3:7d:f1:93:02:
                    19:96:66:c7:05:fa:53:87:35:b9:82:b0:b0:18:75:
                    1f:2a:92:a7:e1:9d:8c:d8:bc:68:56:2a:8c:ec:01:
                    3d:00:78:04:a2:fe:b3:c0:dd:a9:9d:c5:e9:44:39:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:E3:EE:D9:B3:E4:1C:FC:0A:AA:2B:26:A7:DE:95:B9:0D:62:C9
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/B50ECD32A57E11EEB4533738C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:04:d2:97:19:cb:7a:8d:e3:11:08:a0:50:f4:b3:05:8e:
         70:4a:40:51:60:53:06:43:9c:03:94:f2:c9:f8:2c:1e:52:0c:
         48:1a:a3:00:60:9b:0c:88:70:79:ba:5f:40:42:38:31:bf:45:
         13:50:a2:fc:e5:ee:26:34:8f:78:10:66:8b:e8:e4:91:64:e3:
         00:e5:12:e6:7d:c0:5f:ec:7b:ac:9d:bd:9c:ac:47:94:5b:bd:
         c1:38:3f:f8:42:4e:c4:e7:2a:dc:7d:d5:57:4f:e9:c1:b0:56:
         8c:b9:c9:06:1a:94:f7:5f:8d:10:20:c1:98:75:82:d2:8e:64:
         3a:6e:0a:8b:b6:96:1a:3e:85:97:d4:bb:c3:7b:4c:8a:d3:cb:
         da:5c:da:54:bc:20:f1:ef:38:28:48:d6:c3:af:cc:b5:74:6e:
         1c:fd:23:54:38:a7:3d:6e:7e:58:e2:51:67:12:b1:48:20:de:
         76:05:a5:c9:bd:7c:6a:5d:41:da:5a:93:63:9f:8f:23:9a:c1:
         4a:49:d3:bf:9f:c9:21:ee:c1:f7:45:be:ed:b6:40:2a:da:d3:
         73:97:56:b1:41:b5:66:a5:a9:f9:a6:2d:b1:3a:98:fb:9e:f5:
         2c:d8:cd:42:e4:bc:0f:fa:90:ba:26:93:ad:ac:0e:b9:87:7b:
         93:69:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:20 2026 by rpki-client