Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/ED7EF624B2C311F188E07D2B4C11F970.roa
File:                     ED7EF624B2C311F188E07D2B4C11F970.roa (raw, json)
Hash identifier:          uc1S2stm9Uhx3B+XK2xoEACktNTcIYwoUDOw85kBtAU=
Subject key identifier:   D6:41:59:BF:45:5D:28:FB:C3:F6:F1:D8:DD:01:7B:EE:44:C2:3D:55
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D4B
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/ED7EF624B2C311F188E07D2B4C11F970.roa
Signing time:             Thu 17 Sep 2026 18:16:40 +0000
ROA not before:           Thu 17 Sep 2026 18:16:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136563
IP address blocks:        103.92.234.0/24 maxlen: 24
                          103.96.89.0/24 maxlen: 24
                          103.96.90.0/23 maxlen: 24
                          123.253.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3403 (0xd4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Sep 17 18:16:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aac2e88-f872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:36:97:de:55:9c:68:c3:d6:de:f9:37:af:
                    7e:46:e1:0f:e3:77:d0:ce:26:00:9a:51:d7:0b:78:
                    ee:d4:98:05:c3:82:78:92:53:32:56:21:a9:c4:eb:
                    ab:93:1f:08:b6:02:35:d0:7a:fb:59:7a:c2:76:f4:
                    76:8c:40:0b:6a:80:10:95:46:82:f4:0c:94:a7:a6:
                    17:3f:32:96:44:60:a5:05:ce:47:64:5c:17:4e:f3:
                    e1:ed:6f:12:2b:59:8a:6c:cd:a1:ba:92:85:1e:0a:
                    6e:5c:60:db:ad:53:0d:13:21:31:ae:32:75:9f:cf:
                    9f:03:13:76:24:7e:90:55:ef:1b:0e:1b:a3:7f:91:
                    7d:5f:f3:85:ea:f7:d7:4b:60:85:f2:9a:9c:95:6c:
                    80:db:71:4c:db:53:46:38:28:c3:fd:c0:a0:85:47:
                    95:95:96:89:bd:34:2e:2f:04:28:59:df:fd:90:31:
                    a0:55:f8:37:af:25:c8:d1:95:94:6a:64:9d:50:b5:
                    85:f5:75:6d:15:69:33:ce:47:be:4c:30:e8:ef:cf:
                    c5:59:5a:7e:e6:18:8b:94:ad:21:1c:46:c5:c7:dc:
                    0a:6d:ce:10:1c:7c:70:42:87:75:0c:69:f6:ec:41:
                    5d:4e:39:e4:5e:92:dc:76:ca:00:6c:20:8a:ae:e2:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:59:BF:45:5D:28:FB:C3:F6:F1:D8:DD:01:7B:EE:44:C2:3D:55
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/ED7EF624B2C311F188E07D2B4C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.234.0/24
                  103.96.89.0-103.96.91.255
                  123.253.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:3e:68:1c:3e:ef:fc:12:8e:69:6f:a9:35:24:86:8e:19:
         7e:a0:cf:2e:b3:4c:5a:aa:d5:d5:a3:d1:ae:29:d9:06:ee:a0:
         38:de:ca:5d:6b:9a:83:7c:ea:86:fb:75:6f:52:d5:52:a4:7d:
         7a:ff:6a:cc:de:58:7b:69:5c:17:d4:fa:01:b0:1d:03:e4:0b:
         96:b6:34:9b:1f:69:d6:60:8e:05:d6:b9:ac:43:cf:8e:b8:5c:
         c4:6b:c9:0c:70:e7:7b:5c:0f:32:e8:08:f9:9b:b4:3e:45:01:
         d1:38:3b:3a:fb:45:82:a9:f3:d3:ed:ce:8d:ab:da:f0:d1:1b:
         7e:2f:ca:c2:0d:a7:52:cb:5c:ba:e5:fa:32:5a:6b:99:bf:02:
         1e:56:42:db:1a:73:b2:8f:b1:15:f2:25:96:32:95:5f:b6:8c:
         98:b3:7b:c9:af:1c:93:cd:25:2b:0c:9e:c9:b2:36:0c:83:12:
         64:80:36:f7:08:97:18:8c:cc:23:b1:c7:85:b4:ce:50:7f:cf:
         c9:66:0c:a5:60:4e:a0:cc:d1:9c:fe:6e:f1:6e:81:df:9c:8e:
         c5:fc:62:65:97:18:b2:5c:b4:3c:3d:97:40:a1:15:87:c2:4c:
         69:a8:1c:78:89:52:46:81:e5:4d:8b:b1:38:a5:b2:10:aa:3c:
         5f:66:0e:04
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2MkYxMTAvBgNVBAUTKERGQjY3MjM2NzIxNTFFQzJDNDZDRDA0RTcxQzU5Rjkx
NjlDQUU2RjgwHhcNMjYwOTE3MTgxNjQwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFjMmU4OC1mODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAU2l95VnGjD1t75N69+RuEP43fQziYAmlHXC3ju1JgFw4J4klMyViGpxOur
kx8ItgI10Hr7WXrCdvR2jEALaoAQlUaC9AyUp6YXPzKWRGClBc5HZFwXTvPh7W8S
K1mKbM2hupKFHgpuXGDbrVMNEyExrjJ1n8+fAxN2JH6QVe8bDhujf5F9X/OF6vfX
S2CF8pqclWyA23FM21NGOCjD/cCghUeVlZaJvTQuLwQoWd/9kDGgVfg3ryXI0ZWU
amSdULWF9XVtFWkzzke+TDDo78/FWVp+5hiLlK0hHEbFx9wKbc4QHHxwQod1DGn2
7EFdTjnkXpLcdsoAbCCKruKuGwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFNZBWb9F
XSj7w/bx2N0Be+5Ewj1VMB8GA1UdIwQYMBaAFN+2cjZyFR7CxGzQTnHFn5Fpyub4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyRi8xQ0Y5ODcyNjA4
NTIxMUVBOERGNjczNDlDNEY5QUUwMi8zN1p5Tm5JVkhzTEViTkJPY2NXZmtXbks1
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM3WnlObklWSHNMRWJOQk9jY1dma1duSzV2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEE2MkYvMUNGOTg3MjYwODUyMTFFQThERjY3MzQ5QzRGOUFFMDIvRUQ3RUY2MjRC
MkMzMTFGMTg4RTA3RDJCNEMxMUY5NzAucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAZ1zqMAwDBABnYFkDBAJnYFgDBAB7/dYwDQYJKoZIhvcNAQELBQAD
ggEBALA/PmgcPu/8Eo5pb6k1JIaOGX6gzy6zTFqq1dWj0a4p2QbuoDjeyl1rmoN8
6ob7dW9S1VKkfXr/aszeWHtpXBfU+gGwHQPkC5a2NJsfadZgjgXWuaxDz464XMRr
yQxw53tcDzLoCPmbtD5FAdE4Ozr7RYKp89Ptzo2r2vDRG34vysINp1LLXLrl+jJa
a5m/Ah5WQtsac7KPsRXyJZYylV+2jJize8mvHJPNJSsMnsmyNgyDEmSANvcIlxiM
zCOxx4W0zlB/z8lmDKVgTqDM0Zz+bvFugd+cjsX8YmWXGLJctDw9l0ChFYfCTGmo
HHiJUkaB5U2LsTilshCqPF9mDgQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:06:22 2026 by rpki-client