Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
File:                     7E8E2302014811F1B68E82C6516F56BC.roa (raw, json)
Hash identifier:          JyYTZPQTpKVQMGLvtLCu1teNQOIfxLpgwbO6jQC+5uU=
Subject key identifier:   4D:E1:CF:9A:9A:58:A7:5A:5D:C4:FB:A0:16:9B:42:1C:A3:88:C8:1E
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       03B6
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
Signing time:             Mon 29 Jun 2026 01:31:07 +0000
ROA not before:           Mon 29 Jun 2026 01:31:07 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152600
IP address blocks:        203.98.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Jun 29 01:31:07 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a41cadb-0d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:75:11:bd:08:db:f6:6b:b3:99:23:6f:7b:
                    9d:00:66:51:a9:77:34:37:b2:5e:9b:86:a4:7c:7e:
                    c3:55:97:70:3b:57:66:46:83:2b:3e:c0:06:91:54:
                    07:c6:16:c3:65:cb:ed:cc:fb:19:fa:b1:4e:8a:05:
                    9b:57:7f:8e:dd:9b:a7:ee:da:41:43:3f:38:e5:dc:
                    d3:8e:08:24:79:63:50:f6:a2:61:9a:2f:7f:de:d5:
                    fb:2c:02:c6:13:fe:c6:21:1c:c9:04:02:27:e8:da:
                    e1:f6:c1:8e:9c:23:a5:43:a0:85:a2:38:3e:00:b8:
                    06:f3:ac:43:d7:11:42:03:b0:b1:eb:ee:fa:af:da:
                    06:29:bd:f4:24:7d:d3:e9:cc:24:ed:b8:aa:da:08:
                    83:af:75:86:fc:2f:8f:cb:86:be:7a:66:b4:9b:1c:
                    86:bf:48:57:b6:0b:35:f8:08:3d:bc:bd:a1:99:43:
                    95:21:57:7a:6e:c0:b2:08:80:c6:1d:4f:0c:f6:cb:
                    c0:7b:6d:1f:b0:3a:e3:23:06:f2:b7:94:9c:f0:05:
                    5e:5f:5e:54:51:5f:66:91:97:ab:2e:22:37:92:7a:
                    06:49:98:f9:3e:6f:4c:90:a4:bd:b7:63:7e:c5:e6:
                    15:ac:7f:c3:bd:6c:09:6c:c2:39:25:40:6f:ad:ed:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:CF:9A:9A:58:A7:5A:5D:C4:FB:A0:16:9B:42:1C:A3:88:C8:1E
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:5f:da:7d:a1:68:48:14:e0:8f:56:c5:82:e8:91:8b:07:
         45:34:d0:86:04:27:98:7f:c0:e9:15:09:c2:e0:d5:e1:f4:9c:
         0b:9e:85:f1:01:d2:cf:6c:a2:af:b3:23:18:95:d6:c9:40:be:
         55:55:df:82:a4:ee:32:fe:87:ca:0f:ab:90:7e:37:12:06:be:
         e2:f4:ed:e7:e1:27:a9:00:3d:3f:9f:e2:ad:a7:76:53:69:7a:
         65:a4:21:e7:4d:fe:67:f7:8f:8c:12:6e:f4:4d:bd:39:ac:fd:
         e5:5c:6a:97:71:eb:37:60:ec:b1:2c:af:ad:5d:94:de:7d:1d:
         92:d2:a6:c1:fc:97:f4:3f:73:f3:eb:94:d9:c2:2c:ac:16:a7:
         87:85:40:1e:db:bb:40:9a:3b:a9:67:e7:47:1e:b3:6f:51:fb:
         3b:d2:3e:57:0c:3d:b3:e5:89:c3:84:62:68:7f:1d:63:41:2a:
         67:22:79:e3:d1:94:35:ac:23:bf:8c:69:4e:a3:7a:2c:39:97:
         1e:a9:6c:e8:a1:f7:99:03:d4:89:08:95:8c:96:26:f3:06:c6:
         1f:26:c8:88:e9:04:a1:f1:b2:1a:af:40:ab:8c:47:a5:91:f8:
         5b:e5:e9:2f:0a:35:cc:b1:6c:6b:db:a6:4c:0c:05:8f:b3:c0:
         b1:9d:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:24 2026 by rpki-client