Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa
File:                     E75A8B8095D011EFA2CE197BC4F9AE02.roa (raw, json)
Hash identifier:          kkOIjg6qoxuJ/Gjbd4gRj2XMV0e9Ga/KOtQLAeVKLPE=
Subject key identifier:   D6:33:C7:E1:DD:1D:E1:C1:C1:79:17:48:D4:55:CF:C2:49:60:10:D8
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       03B7
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa
Signing time:             Mon 29 Jun 2026 01:31:10 +0000
ROA not before:           Mon 29 Jun 2026 01:31:10 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152601
IP address blocks:        103.189.212.0/24 maxlen: 24
                          103.189.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Jun 29 01:31:10 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a41cadd-c3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:47:24:73:fb:62:2f:19:31:7e:ca:7b:8e:
                    21:9e:82:48:e1:c9:75:36:d0:bb:b0:aa:bb:10:92:
                    9f:56:0d:d8:5a:ef:06:07:37:3e:d2:a5:e5:2c:a1:
                    58:74:80:0a:50:1a:92:a7:a9:c5:c6:f3:fa:7b:9a:
                    25:54:d7:32:ca:b8:1d:a1:af:f5:31:b5:47:39:32:
                    5e:3e:53:1a:13:db:4b:db:2d:29:41:21:8d:9e:20:
                    5f:4f:4a:33:37:fe:bd:79:fb:1f:e7:fd:5e:8a:cd:
                    04:46:9b:9c:d0:50:86:fc:4a:3b:f9:ce:59:3d:fe:
                    ec:54:e0:fd:7a:f3:52:ef:2a:67:0b:08:53:bf:0e:
                    ce:fc:c8:3e:d7:38:d6:c4:00:47:ce:30:5d:18:bd:
                    c6:55:1c:fd:29:56:69:2a:3e:52:54:76:2d:f8:44:
                    6c:0e:de:b4:92:9c:c0:11:03:d4:29:ca:28:48:68:
                    0e:ad:8b:4a:db:47:af:52:de:9e:c8:87:00:b3:30:
                    c3:5c:28:59:78:75:8b:5e:bc:03:c2:cf:1e:46:89:
                    5c:4d:05:09:9a:34:0a:65:18:91:25:14:9f:a2:7f:
                    fa:75:28:c9:89:54:5f:26:72:60:60:9c:f9:8e:22:
                    a0:be:e2:95:a0:3a:c9:9f:95:93:21:62:22:f9:67:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:33:C7:E1:DD:1D:E1:C1:C1:79:17:48:D4:55:CF:C2:49:60:10:D8
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/E75A8B8095D011EFA2CE197BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:cf:0e:83:aa:08:02:23:bd:7b:ba:64:55:2b:33:b6:85:
         3a:f8:36:47:3a:98:2e:c4:56:08:9a:a8:4b:bc:54:ae:92:4a:
         d5:99:34:ac:7e:0c:da:f1:8c:71:a6:d6:df:ee:37:4f:58:aa:
         ef:4e:19:74:ad:99:d0:b3:5c:ab:0e:4f:a4:3a:a8:df:9b:99:
         8f:9b:35:12:8c:95:c8:fd:c3:8c:89:72:e1:03:23:5e:be:8d:
         2f:fc:10:37:f7:2e:67:e6:f0:63:b4:13:aa:db:ee:d8:cf:a1:
         e2:50:5c:73:35:d4:88:d3:bd:10:db:3a:3e:85:21:0b:ea:77:
         c7:b5:ef:07:1a:fa:17:8b:c5:2f:b6:2e:1a:36:58:07:9a:b1:
         f0:33:85:b1:12:cd:93:22:24:ac:c9:7d:8c:71:69:b5:19:4a:
         aa:aa:d9:b1:d6:f4:fb:bc:b8:58:86:62:4e:2b:b6:bf:b0:ca:
         ed:8d:d1:69:73:bf:2e:05:22:a8:be:fe:10:6a:a9:b5:cb:5f:
         7f:9e:d9:d3:d2:d6:45:95:f4:b3:65:34:6f:75:9a:d4:b3:41:
         4b:3d:9f:6a:8c:e9:86:75:c9:9f:be:f4:81:6a:b9:fc:5b:54:
         bc:1b:bc:7b:71:5b:e8:00:fa:a8:55:da:61:3a:a5:8d:a5:4c:
         68:35:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:26 2026 by rpki-client