Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa
File:                     730B201A81E911EEAEFE7735C4F9AE02.roa (raw, json)
Hash identifier:          n9a6GC1PPfM4Od1umHXXBpOit75pzAoxltMx72LHRVk=
Subject key identifier:   33:54:6D:69:0B:D4:A8:D5:57:CE:AC:86:F1:7E:F6:A7:77:40:CD:26
Certificate issuer:       /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Certificate serial:       0201
Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 05:29:55 +0000
ROA not before:           Wed 01 Jul 2026 05:29:55 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     15353
IP address blocks:        103.186.159.0/24 maxlen: 24
                          2400:72e0:9f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl
                          rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
        Validity
            Not Before: Jul  1 05:29:55 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44a5d3-15bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:14:7b:70:5d:30:85:a4:b5:92:a4:07:46:
                    b4:7e:c8:d1:d7:fd:b0:e2:70:06:ad:cd:ba:6f:f8:
                    d9:7d:e4:ce:72:68:ab:c9:cb:ef:93:c8:40:de:9e:
                    bc:00:23:c1:42:7b:9a:59:db:22:dc:46:05:14:46:
                    e9:13:cd:60:f5:2d:2d:d0:ff:30:77:1d:7b:b1:d1:
                    3b:7a:5b:d2:71:84:31:aa:48:a2:ff:75:34:e5:ac:
                    72:ec:3f:5c:d5:5c:05:4b:a9:b8:88:97:42:b7:70:
                    09:40:e4:01:e3:5e:72:cd:ca:a7:58:c8:55:b3:7d:
                    9e:07:7f:2b:c1:7c:13:d9:89:fa:4a:a1:94:d5:5e:
                    f2:26:9f:9e:4a:23:1a:2d:df:e6:16:f6:b6:e2:ea:
                    14:45:3e:8f:39:50:2c:26:2d:4c:d8:85:09:27:be:
                    98:7b:80:de:16:58:f3:f9:9b:12:28:ed:0b:20:25:
                    7f:8f:1f:57:be:99:c8:97:fb:71:03:73:ef:0a:67:
                    a1:bf:f8:6e:2d:2f:3f:50:87:a8:81:0c:ac:7d:3c:
                    c8:ec:7a:42:59:1a:42:e9:6f:f7:7e:a9:42:6b:25:
                    d6:25:2f:ef:5a:26:04:2e:56:f8:d7:47:f4:4f:37:
                    99:78:56:9b:0c:55:7d:fc:f8:e9:31:31:08:d6:70:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:6D:69:0B:D4:A8:D5:57:CE:AC:86:F1:7E:F6:A7:77:40:CD:26
            X509v3 Authority Key Identifier:
                keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.159.0/24
                IPv6:
                  2400:72e0:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:2f:52:ea:30:89:7e:df:1f:0c:94:50:4d:01:97:78:3e:
         0a:54:ac:8c:4d:e8:83:eb:6d:f6:28:6c:4b:ef:8f:b1:0d:93:
         6a:be:f3:25:81:dc:88:86:57:e7:39:14:73:56:73:26:aa:c4:
         e0:60:74:29:f2:5d:fa:27:cb:2f:76:7d:97:7d:83:bd:93:7f:
         7a:ef:0c:39:fd:d7:68:b5:b3:4d:b9:25:2c:e7:79:07:a2:50:
         36:a6:13:96:7e:3c:d2:77:c6:91:ed:d6:14:4a:d3:47:96:24:
         fc:26:46:e3:58:31:7d:f6:bd:50:d9:8c:d1:aa:32:de:db:c6:
         6f:09:ab:a2:66:01:68:75:78:17:15:1a:72:8b:42:39:d2:e9:
         8e:c8:bb:17:ff:eb:ec:5f:78:fa:9e:71:09:77:82:6c:e4:e6:
         b4:97:6a:7a:38:de:31:78:88:99:07:4f:b8:be:84:4e:34:cd:
         0c:7e:1f:90:e4:05:72:f9:fb:1a:bd:c3:b9:97:67:d0:1e:d1:
         4a:ec:c1:75:ee:7d:2f:0e:ef:b4:b0:cc:d4:d7:79:39:b9:b5:
         df:33:67:1f:79:28:72:aa:88:23:2a:00:65:f6:73:7f:4e:8e:
         b3:0b:75:e2:a6:8d:6d:ec:6b:b0:b5:3d:44:cb:ac:4e:b7:2b:
         52:85:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:16 2026 by rpki-client