Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa
File:                     C850F3BA89A511EEB6692E43C4F9AE02.roa (raw, json)
Hash identifier:          9/omkIpCPqIeBe3uMYLBYEVI2CH4WNDcld2XzAT23Mc=
Subject key identifier:   B2:2B:ED:B9:E0:0E:D6:20:85:16:8D:15:96:3F:44:89:43:32:E8:FB
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       06B3
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 00:25:20 +0000
ROA not before:           Thu 09 Jul 2026 00:25:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151822
IP address blocks:        103.203.245.0/24 maxlen: 24
                          203.19.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul  9 00:25:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4eea70-18ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:0e:81:dd:1c:fd:d1:92:cd:6b:81:15:86:
                    33:4b:bd:79:14:77:b4:38:73:db:e4:f0:2d:6f:ab:
                    a0:41:84:27:f8:ac:fe:5c:96:1f:15:3b:31:2b:fb:
                    36:a2:60:2e:81:fc:bc:c5:da:e3:7c:80:9d:0b:12:
                    5e:04:6f:66:81:cc:c7:c0:a4:dc:20:49:ca:99:71:
                    cd:dc:b8:0d:ac:e4:72:3d:bd:5b:2c:27:43:fc:7c:
                    00:95:f9:1f:2c:ef:31:05:5f:ee:2c:7b:ee:65:2a:
                    ce:c4:50:fe:bb:36:16:f5:73:f7:ac:31:65:10:04:
                    f1:ec:82:ae:6a:24:50:4f:ff:b1:a9:7e:b9:91:63:
                    a8:80:01:d5:f0:f3:63:50:20:5f:af:44:4f:3f:c2:
                    b7:a0:5d:24:1d:0b:8e:9a:00:f9:9b:69:64:2d:9f:
                    c3:c9:88:0e:5a:df:e2:20:f0:34:27:83:84:45:5c:
                    d4:ec:57:03:dc:79:94:2b:c6:9b:6f:f3:40:9f:a0:
                    b6:d1:ba:ea:5d:20:52:a0:61:16:a3:69:01:1d:83:
                    1d:d9:e0:90:87:4f:9d:b5:e2:03:b8:6e:65:20:53:
                    96:9a:e2:8f:eb:bb:b0:20:8b:d0:57:3a:37:8d:10:
                    a3:f0:6d:7e:fa:0f:14:03:7b:6f:01:9b:ce:f7:d1:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2B:ED:B9:E0:0E:D6:20:85:16:8D:15:96:3F:44:89:43:32:E8:FB
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C850F3BA89A511EEB6692E43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.245.0/24
                  203.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:a0:69:65:c8:32:4f:64:03:64:b0:2d:29:98:69:55:46:
         05:cc:13:3a:39:5a:6d:f7:16:1b:39:2d:3a:b2:71:ea:e4:7f:
         d3:75:58:f0:11:f3:71:4f:9f:2d:0b:38:ce:a0:ba:3b:85:63:
         e0:4d:38:b9:5f:af:45:14:c9:94:b9:13:e3:79:d4:f4:51:43:
         fb:ef:53:a4:88:36:8a:0a:9b:13:49:84:ca:bd:f0:d7:03:aa:
         4e:c7:62:df:4a:0f:30:9b:94:2a:63:0e:8b:78:7e:7f:75:2b:
         51:31:28:50:3d:e5:ea:ee:0b:02:4a:2d:5b:08:ee:ea:03:ee:
         23:e0:8c:a2:15:49:dc:31:b4:d4:0a:14:9e:d9:d9:9f:22:ca:
         db:bb:be:25:47:67:1b:85:53:75:0c:1e:bb:05:85:93:62:d5:
         7e:79:e1:78:0f:11:22:89:2a:af:12:3c:d7:88:b3:5b:ba:be:
         3d:58:05:60:67:0c:65:7c:7f:d2:a9:2d:53:e4:0c:cb:01:3a:
         d6:a9:77:0e:71:cc:99:7d:84:b7:98:b5:73:04:7e:96:85:cb:
         fc:9d:f1:dc:6d:0c:bc:df:79:4a:54:7d:ee:56:e8:fa:f8:ac:
         4b:a2:ff:17:6b:0d:70:7a:b0:41:a2:37:29:05:fc:e8:5b:7e:
         78:ac:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:20 2026 by rpki-client