Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
File:                     B188CE748E7011F08CF3B91AC4F9AE02.roa (raw, json)
Hash identifier:          JhTmh8+spCzAKkyjoFK2bfRg9TC7jy1oAEEezsAdacA=
Subject key identifier:   81:B6:A9:A9:60:35:3F:0D:07:D4:BB:DA:9C:93:04:55:69:00:9B:05
Certificate issuer:       /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial:       0261
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 04:28:37 +0000
ROA not before:           Wed 01 Jul 2026 04:28:37 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     137259
IP address blocks:        103.31.222.0/23 maxlen: 24
                          2001:df2:50c0::/48 maxlen: 50
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
                          rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
        Validity
            Not Before: Jul  1 04:28:37 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a449775-6be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:55:1d:32:69:bc:ea:b0:99:4f:bd:b1:0f:
                    9f:6e:11:93:ed:7f:bd:f5:d2:6b:07:5c:23:46:d9:
                    b9:e0:50:3b:c6:87:0a:48:53:7e:27:b4:c8:69:0f:
                    1d:64:2f:1a:9e:f4:27:d9:9b:7d:1f:72:50:44:7e:
                    58:92:fd:fb:5f:0e:0b:4c:5c:ee:cb:26:bc:48:8a:
                    89:ab:57:fc:c1:33:7a:f0:57:6b:f5:8b:d1:ed:71:
                    84:00:b5:06:80:d0:7d:b3:9c:e7:29:88:ee:5b:17:
                    ca:03:ae:f1:ff:97:5e:29:d8:e8:88:0d:5e:0a:2f:
                    f0:20:62:d0:09:b6:d0:2c:8e:d5:e4:c9:c3:ab:bb:
                    b9:b1:57:15:8a:0f:30:70:12:da:cc:5f:93:b4:bb:
                    9a:48:ac:b4:b0:47:1e:62:57:a4:df:a4:a5:9b:48:
                    f6:07:f3:6d:6c:a0:82:03:f0:be:4c:c3:34:f8:4e:
                    ce:37:f0:7d:90:9d:9a:9c:13:64:d5:2e:c0:6e:a8:
                    5c:dc:d0:b0:9f:e1:e7:36:f7:d5:3e:94:e0:46:9a:
                    a0:73:66:ab:42:5e:dc:ba:b0:2a:8d:04:1c:0c:eb:
                    9c:65:89:ff:85:1e:88:3b:ae:cb:50:ac:99:b7:91:
                    c4:d0:d2:a7:a1:47:92:cc:a7:7f:e0:0f:6f:ab:a9:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:A9:A9:60:35:3F:0D:07:D4:BB:DA:9C:93:04:55:69:00:9B:05
            X509v3 Authority Key Identifier:
                keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.222.0/23
                IPv6:
                  2001:df2:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:3b:c5:25:ea:b7:95:fe:c7:9b:76:67:8e:05:9d:38:b6:
         ac:12:ee:02:e1:ab:25:c0:58:6e:4a:b2:ef:09:2f:de:a2:18:
         ec:ed:da:c9:17:f9:84:c3:4e:f0:2e:c8:3b:90:c7:7b:6d:d5:
         25:4e:da:52:36:22:57:a5:cd:2e:1f:ef:9c:29:09:77:95:7f:
         8a:e8:61:e6:33:ed:e9:c6:b2:5d:9c:46:06:83:6a:a0:c8:4b:
         2e:8e:15:4d:cb:1a:af:e4:f9:42:fb:62:5c:a9:80:79:4c:67:
         52:fa:13:9c:2a:20:81:c1:81:46:f8:d4:62:0f:69:d4:da:8b:
         97:72:58:23:64:62:35:16:a7:ff:0b:59:84:44:55:00:d8:98:
         7a:de:6d:f7:ca:16:da:23:f4:d9:f5:79:53:83:55:1a:db:c8:
         a3:cf:90:a1:1e:6b:99:13:73:27:2f:c9:27:28:1d:46:5c:a3:
         72:6f:05:ea:8f:93:a4:d7:02:48:ae:3e:37:09:4a:d6:d3:37:
         b6:ac:2e:5c:c2:80:61:cc:f3:55:99:2e:eb:98:bf:f6:35:42:
         23:51:16:3c:60:e7:df:83:ef:b0:d9:75:7c:57:24:58:95:cc:
         38:99:b4:7c:19:55:47:69:ca:e5:b8:d5:9d:14:bf:28:ea:9d:
         1d:15:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:24 2026 by rpki-client