Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa
File:                     C22B92AA081011EDBC3C4374C4F9AE02.roa (raw, json)
Hash identifier:          WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=
Subject key identifier:   A4:04:FE:08:9F:6E:5C:55:28:4C:90:A1:71:FE:56:98:E7:91:E7:2D
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0E09
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa
Signing time:             Tue 14 Jul 2026 08:16:05 +0000
ROA not before:           Tue 14 Jul 2026 08:16:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.109.92.0/24 maxlen: 24
                          103.109.93.0/24 maxlen: 24
                          103.109.95.0/24 maxlen: 24
                          103.214.200.0/24 maxlen: 24
                          103.214.201.0/24 maxlen: 24
                          103.214.202.0/24 maxlen: 24
                          103.214.203.0/24 maxlen: 24
                          144.48.150.0/24 maxlen: 24
                          144.48.151.0/24 maxlen: 24
                          2001:df4:3100::/48 maxlen: 48
                          2404:4c0:10::/48 maxlen: 48
                          2404:4c0:3c::/48 maxlen: 48
                          2404:4c0:10a::/48 maxlen: 48
                          2404:4c0:150::/48 maxlen: 48
                          2404:4c0:151::/48 maxlen: 48
                          2404:4c0:152::/48 maxlen: 48
                          2404:4c0:153::/48 maxlen: 48
                          2404:4c0:154::/48 maxlen: 48
                          2404:4c0:155::/48 maxlen: 48
                          2404:4c0:156::/48 maxlen: 48
                          2404:4c0:157::/48 maxlen: 48
                          2404:4c0:158::/48 maxlen: 48
                          2404:4c0:159::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3593 (0xe09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Jul 14 08:16:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a55f045-44e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:2a:a3:5c:a1:25:c1:b8:e3:4e:01:08:55:
                    58:3e:b4:a3:27:6c:8d:8a:3b:72:dd:86:fc:e3:50:
                    bd:6f:34:e6:af:06:f4:55:b4:18:08:75:9b:bb:85:
                    ff:c1:1b:e8:c2:ee:50:77:c0:88:a7:c3:a2:a6:8c:
                    1f:25:fa:9f:26:f4:0f:b9:a7:94:ba:49:56:b8:ca:
                    8c:d1:bd:67:91:dd:41:70:02:10:80:b8:38:72:e4:
                    2a:bc:3f:9b:cb:ac:e5:d4:9f:84:c2:76:d2:6d:b2:
                    2e:3b:e3:9c:71:0a:88:e1:68:bf:a2:d5:0c:7b:85:
                    49:b9:cd:da:9e:23:56:17:a9:e6:dc:07:70:56:3a:
                    7d:9d:b7:cd:f5:43:b5:9a:a6:a7:3f:d3:1d:81:b2:
                    30:67:e6:68:1e:79:43:4b:58:53:f2:f2:db:62:2d:
                    da:04:53:8e:98:ca:7d:00:d3:39:67:37:d9:4e:2d:
                    7f:2e:e0:df:78:cf:02:61:83:30:94:9f:08:77:d9:
                    6e:87:7d:e0:8a:59:b2:b4:cf:f3:39:44:23:4a:14:
                    e0:33:dc:42:5b:49:a6:97:0c:35:6a:5f:e9:4d:df:
                    a1:71:a6:dd:b7:e7:b0:c8:63:0c:f7:a5:57:2b:a6:
                    42:84:d5:02:db:51:e3:f9:fd:fd:2c:2d:12:01:53:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:04:FE:08:9F:6E:5C:55:28:4C:90:A1:71:FE:56:98:E7:91:E7:2D
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.92.0/23
                  103.109.95.0/24
                  103.214.200.0/22
                  144.48.150.0/23
                IPv6:
                  2001:df4:3100::/48
                  2404:4c0:10::/48
                  2404:4c0:3c::/48
                  2404:4c0:10a::/48
                  2404:4c0:150::-2404:4c0:159:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         87:46:a0:fb:a5:06:5f:6f:c2:71:81:a5:a8:04:98:b7:5c:67:
         5c:0d:68:ae:9b:e5:1e:26:ec:36:fa:12:97:a2:37:bb:35:ac:
         a2:0f:9b:a3:e0:76:6a:71:de:cf:96:b9:69:ce:6f:4a:e5:fd:
         77:03:6d:a5:eb:62:34:aa:c6:d9:58:ed:5e:20:bf:38:fb:c0:
         af:08:de:81:1e:23:69:22:5f:b1:e3:bb:c6:d3:b9:5f:a9:e4:
         dd:38:86:18:c7:e6:be:01:e7:f8:66:eb:a4:72:cc:5d:97:c2:
         07:89:33:14:89:fc:75:a2:cb:1f:b0:72:77:72:c2:b1:dc:03:
         4a:7e:a0:af:72:ec:59:af:bc:59:14:d7:bc:7e:c8:e4:f5:6a:
         14:76:cc:ef:d8:0b:eb:ea:87:2a:b0:a6:6a:7f:48:ea:cd:8a:
         60:d0:af:11:30:d0:0a:27:62:c4:ae:b9:f8:31:8f:8e:65:d5:
         c4:06:1c:ea:ac:25:74:6e:b4:7f:43:4e:29:2d:af:c7:ee:d0:
         d3:6a:5d:31:54:bb:19:0d:51:88:8e:40:62:e9:2b:56:07:b5:
         54:d1:0c:83:4c:14:7d:74:a9:c7:c7:73:f8:78:0a:4e:3a:66:
         43:4b:a5:08:56:98:a2:73:4e:d7:8a:da:f6:8b:12:4f:89:73:
         90:8f:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:50 2026 by rpki-client