Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa
File:                     0D22F748261A11EA83CE8D17C4F9AE02.roa (raw, json)
Hash identifier:          ahBHdBU7RHmaEg5k9uPLc0EPvyCfJjb3xG2kQztcg90=
Subject key identifier:   DA:BB:F8:03:CE:41:67:D3:B0:35:25:B4:7F:4A:B6:58:91:7C:3F:86
Certificate issuer:       /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial:       0CA9
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 19:36:03 +0000
ROA not before:           Wed 30 Sep 2026 19:36:03 +0000
ROA not after:            Sat 30 Jan 2027 00:00:00 +0000
asID:                     135307
IP address blocks:        103.76.179.0/24 maxlen: 24
                          103.76.184.0/24 maxlen: 24
                          103.76.185.0/24 maxlen: 24
                          103.213.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl
                          rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
        Validity
            Not Before: Sep 30 19:36:03 2026 GMT
            Not After : Jan 30 00:00:00 2027 GMT
        Subject: CN=6abd64a3-c613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:e1:43:3d:b2:3f:35:e2:2f:2e:23:d9:a6:
                    e8:28:6b:5d:68:93:ec:e2:92:7c:15:83:d1:63:b2:
                    db:fe:7c:9a:70:82:72:30:6e:cf:e9:e0:9e:b8:7e:
                    42:f3:9c:39:6c:da:5c:b0:74:db:89:82:9f:3d:f2:
                    8e:e0:42:92:d7:19:5b:c6:2f:43:19:f6:20:c0:e8:
                    3f:8a:22:cf:87:58:bd:9b:03:70:0c:2a:52:8c:44:
                    a4:bd:3d:60:34:de:e8:86:9a:ad:a1:1e:c9:9f:f7:
                    59:80:7d:12:23:5c:b9:2c:d0:6d:9d:c7:82:5d:80:
                    72:e0:2b:60:01:2f:d4:8f:50:0b:5e:db:f7:2b:f0:
                    28:ad:f7:98:68:69:be:76:a8:3a:52:3b:26:6c:15:
                    99:51:f2:54:f6:d8:0c:25:75:c1:1a:13:4d:44:97:
                    2b:15:c2:c3:78:b4:a5:70:ba:19:36:f8:26:13:52:
                    01:95:9f:e1:76:2a:7a:06:6a:9d:a4:99:30:49:7c:
                    1f:fd:9a:6c:51:50:39:2d:0e:8f:9d:1a:fd:26:3c:
                    f1:ce:86:b6:f4:db:2c:4d:74:64:8e:5e:96:4c:04:
                    cd:2c:f7:2b:27:6c:fd:32:09:38:fe:bd:b6:e4:cf:
                    28:72:e7:d4:3f:4d:4e:5f:36:a2:16:e0:d9:80:35:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BB:F8:03:CE:41:67:D3:B0:35:25:B4:7F:4A:B6:58:91:7C:3F:86
            X509v3 Authority Key Identifier:
                keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.179.0/24
                  103.76.184.0/23
                  103.213.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:dd:8e:de:05:f4:0e:8c:5e:6e:bc:0e:4d:4a:0e:53:3e:
         34:c0:2c:8e:e9:98:0c:27:20:0f:4f:c8:bb:be:78:c0:ce:3e:
         0f:5d:b1:db:61:a1:2b:01:eb:ce:76:66:7b:5a:2e:d2:6e:27:
         66:95:5d:40:86:67:15:7c:da:4b:05:df:c7:81:74:a2:a7:5d:
         e5:2b:cd:8c:2b:4a:0b:8b:2f:d9:d1:1a:7e:24:8d:7d:ff:e0:
         d4:35:58:95:da:22:7d:59:ba:7d:f1:d6:d0:f0:fb:e8:cd:f3:
         5b:69:f7:6e:f2:79:1c:00:af:75:8f:bb:0d:c8:68:b1:db:34:
         f5:d9:77:cc:9b:11:c5:b4:93:c1:4b:73:d1:55:3e:37:1a:0e:
         31:92:84:a5:b4:76:11:9d:48:67:94:d5:bb:c7:07:da:5e:6d:
         a1:18:b7:0c:d4:f4:2f:98:b6:e6:c9:a7:9a:bc:00:85:32:d4:
         b3:62:f7:59:58:3e:12:0c:04:5a:99:d8:f1:3b:48:bf:6e:47:
         38:e0:ab:04:91:7d:70:11:8e:28:4d:02:ba:f6:a4:34:14:6e:
         df:ee:55:2b:f9:86:47:4d:d4:d2:c4:bd:dd:a3:68:d2:5d:6f:
         54:3e:0e:2a:e0:95:3b:6e:29:71:83:6d:15:e9:cc:ba:46:5d:
         40:0c:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:34 2026 by rpki-client