Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
File:                     4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json)
Hash identifier:          v4CW92nKKjR4N5nAx8mvTdZBK8rztBKfOKYHOWpOwjg=
Subject key identifier:   1E:A5:69:09:BC:2D:0F:3C:87:BD:73:ED:5A:F8:14:97:2D:91:33:7F
Certificate issuer:       /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial:       01F6
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 04:30:56 +0000
ROA not before:           Fri 03 Jul 2026 04:30:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45177
IP address blocks:        103.68.58.0/24 maxlen: 24
                          103.68.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
                          rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
        Validity
            Not Before: Jul  3 04:30:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a473b00-3c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:a4:c9:f7:5b:15:b3:4f:25:d6:dc:ad:ca:
                    00:2b:ab:00:87:6b:1f:f9:00:7b:e1:70:29:41:d8:
                    58:6e:ce:15:bf:36:98:ab:8a:8a:61:66:90:9f:7e:
                    ba:37:c0:96:48:56:88:a1:57:1b:b4:8a:a7:3e:b7:
                    4e:d6:c6:ef:2e:a1:77:7f:9f:fe:48:db:f5:aa:30:
                    cc:4f:70:47:22:fe:3b:64:17:89:82:0b:3d:41:61:
                    e7:47:f1:dc:a4:31:7a:cc:04:14:7b:af:ed:50:04:
                    f9:2f:45:71:97:35:d0:78:b5:d4:f8:31:8e:1d:37:
                    a0:0f:ab:8f:dc:ff:0c:69:73:da:d2:f9:4f:d3:0c:
                    f9:49:af:d9:35:cc:ce:3b:83:3e:e8:26:ce:db:f7:
                    1f:72:91:f7:f9:84:f4:39:e1:c1:ef:15:84:3e:1a:
                    2e:30:3c:a8:cc:4b:5f:69:3a:d2:14:8e:02:c8:de:
                    d4:64:93:42:13:18:0e:2e:04:1e:fe:5a:5f:3d:a7:
                    8a:78:d9:78:fd:9b:68:48:44:26:ea:43:6b:16:8d:
                    3f:11:ed:77:92:1e:fa:5e:00:00:06:8e:d0:49:1b:
                    f8:a6:47:5e:8b:9e:1a:2a:59:b3:d0:aa:2f:b4:00:
                    fc:75:3a:76:04:d8:40:78:fe:37:67:82:c6:07:29:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:69:09:BC:2D:0F:3C:87:BD:73:ED:5A:F8:14:97:2D:91:33:7F
            X509v3 Authority Key Identifier:
                keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:68:34:95:1d:85:94:ad:6e:82:9c:72:b7:db:a8:24:d5:
         1c:b9:d2:87:da:78:ab:b4:f4:c4:8c:a0:b9:de:66:84:56:e8:
         1f:16:d0:45:c7:11:5b:88:29:ac:c0:24:be:61:02:86:d6:a9:
         71:2e:3b:47:09:e9:17:b8:bf:9a:81:0b:18:6d:31:dc:cd:0e:
         71:45:f6:b2:d7:1a:d1:c9:d4:a7:78:11:2c:db:ec:a1:1c:3b:
         b6:0d:8b:f8:97:3a:1f:6d:97:34:4b:fb:92:06:50:57:0f:40:
         85:1f:79:53:c6:18:98:61:a3:a9:82:b9:0e:c6:4a:17:59:d0:
         54:66:16:42:f7:ed:bd:1a:22:c5:09:72:a9:65:0d:3b:d2:2a:
         23:71:e4:c0:fd:53:a4:92:03:47:ac:32:26:33:39:81:bf:f7:
         e7:f7:e2:85:77:de:f1:dc:70:4b:01:ea:f7:de:58:8a:8b:ae:
         b5:7c:d6:91:4c:94:4d:ce:3f:27:aa:cf:b5:6e:3d:fa:fe:2f:
         f9:83:ec:7f:05:58:2b:08:b6:22:c4:c3:db:57:d0:10:54:6c:
         19:9c:40:7a:42:fd:ff:0a:f2:27:0d:a9:f1:5d:90:44:38:08:
         b8:2d:7d:6c:01:75:0d:84:c8:6b:38:e5:c1:30:46:9a:88:33:
         65:88:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:54 2026 by rpki-client