Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/9DF59BFADA1611ED87B4D357C4F9AE02.roa
File:                     9DF59BFADA1611ED87B4D357C4F9AE02.roa (raw, json)
Hash identifier:          pK5FZXPjDd+TKj14dtLaTi8ME4/aS4fDTZjurF0aAOg=
Subject key identifier:   AB:72:5F:DF:CD:46:B5:BD:9A:5A:C4:3A:63:6A:94:00:37:80:3F:1C
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D25
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/9DF59BFADA1611ED87B4D357C4F9AE02.roa
Signing time:             Wed 08 Jul 2026 19:19:34 +0000
ROA not before:           Wed 08 Jul 2026 19:19:34 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136563
IP address blocks:        103.92.234.0/24 maxlen: 24
                          103.96.89.0/24 maxlen: 24
                          103.96.90.0/23 maxlen: 24
                          123.253.214.0/24 maxlen: 24
                          123.253.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Jul  8 19:19:34 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4ea2c6-c44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:ed:d4:fa:22:dd:20:7c:f4:be:92:ee:17:
                    d0:a1:c2:c0:e7:58:1e:78:65:fb:f1:d7:6a:bc:ce:
                    22:e8:21:c6:b9:f4:02:2d:fa:ac:24:4b:93:24:4e:
                    ed:b8:d2:ff:b7:02:0b:1c:40:e4:88:fe:04:fc:e8:
                    60:2f:a2:7f:8d:ff:03:44:97:31:6c:25:13:a3:65:
                    e5:cb:ec:dc:ed:ad:31:55:24:71:5b:73:6a:dd:c7:
                    5a:96:0b:9c:80:61:5d:0f:b0:fd:d8:d0:3e:26:b0:
                    30:2b:e0:58:04:5f:12:6a:5b:f4:01:f2:a0:8e:02:
                    6f:1c:16:7e:81:19:a8:68:55:bc:de:f3:68:12:29:
                    08:91:12:08:bb:e6:36:54:8f:15:c5:01:5e:24:73:
                    b7:51:82:1b:35:25:6e:29:7b:60:93:7c:63:e2:e8:
                    f0:15:aa:2e:aa:d3:09:08:c5:79:09:dd:0b:4d:09:
                    30:7f:a7:c7:f5:74:72:eb:a4:2a:5d:51:f8:91:cb:
                    07:75:72:b2:7a:3c:c2:b2:a4:df:97:d5:5b:c1:62:
                    9a:52:c9:91:0a:8b:1e:8d:79:77:8b:af:79:04:41:
                    ca:48:43:db:b8:86:7f:76:1a:4e:73:a9:24:f7:0c:
                    7e:34:0b:c2:03:7a:56:9f:02:d4:69:b6:18:5c:bd:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:5F:DF:CD:46:B5:BD:9A:5A:C4:3A:63:6A:94:00:37:80:3F:1C
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/9DF59BFADA1611ED87B4D357C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.234.0/24
                  103.96.89.0-103.96.91.255
                  123.253.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:7b:8e:8e:12:f0:ef:c3:2a:ee:8e:8c:d3:01:38:6a:16:76:
         d9:5a:d2:e9:a9:a4:83:7a:a5:af:62:92:20:33:df:2d:39:e3:
         dc:d6:89:8a:e3:8b:e7:ed:29:f1:d9:34:ac:b1:28:59:0c:2f:
         89:c8:42:4b:9b:64:ca:01:ad:10:2e:44:ef:e5:66:a7:74:84:
         12:dd:89:d1:9b:cd:af:e5:24:8c:a8:68:0d:ae:01:6d:47:03:
         27:56:90:a4:17:4d:ac:ad:f0:bb:14:73:22:6a:7b:3c:fb:99:
         54:56:62:8a:72:55:c9:d7:c6:3b:0e:2e:16:38:a4:a5:34:0b:
         ee:7a:0b:77:1a:4e:89:ee:9e:60:47:35:cd:91:c1:be:19:72:
         13:8e:be:ad:20:61:25:30:bb:43:3a:4e:67:76:c7:27:06:6d:
         2b:7c:d3:7f:6e:62:89:ba:80:38:01:eb:8e:b9:ea:79:29:5f:
         cb:a5:71:f4:9b:34:3a:15:e8:09:00:ac:c4:50:62:d8:79:87:
         53:47:45:c0:f4:d7:31:18:5d:b2:18:7f:3a:ad:db:d9:ab:55:
         ad:bc:0f:a2:53:44:c2:c5:0b:77:70:69:33:1b:59:7f:a2:d8:
         8f:15:d9:1d:02:ba:5f:b6:47:ad:80:39:16:e3:c5:4f:f4:79:
         e7:fa:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:57 2026 by rpki-client