Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
File:                     658CF9F2721411EEAC707910C4F9AE02.roa (raw, json)
Hash identifier:          Uq2HpSv3F80zWwHJM5Iy2Qx5noXEmcrVO1BmBcMyXEk=
Subject key identifier:   BD:45:FC:09:92:5A:0B:80:77:DA:8B:BD:4D:E7:D5:76:54:BC:FF:B9
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       01E7
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
Signing time:             Mon 11 May 2026 03:35:12 +0000
ROA not before:           Mon 11 May 2026 03:35:12 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        103.138.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: May 11 03:35:12 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a014e70-13ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:87:01:76:a9:3c:af:8b:a2:e2:66:94:77:
                    96:17:2f:5b:59:76:41:f2:ca:85:72:f2:0d:59:e4:
                    01:53:ab:1e:b6:57:4e:15:63:6d:95:30:c1:7f:c8:
                    e8:da:f9:b7:66:cd:59:1e:ff:9e:ca:0d:89:db:38:
                    b0:89:d5:2a:00:79:04:1b:9b:6c:ea:f7:00:8f:7d:
                    45:c8:bc:09:8e:db:3f:49:43:b8:0b:34:fa:33:e3:
                    c8:35:5d:24:d4:6b:d5:5e:65:0f:ab:7f:ba:9b:72:
                    84:63:ef:9e:6e:3a:f7:4d:a0:fa:3e:97:df:e6:d8:
                    78:8c:06:38:fa:4e:07:3a:1b:90:9e:e7:1f:52:d4:
                    ef:2f:41:ad:49:0f:a8:1c:f1:fb:4c:0b:45:c6:fa:
                    28:3e:6b:23:49:08:45:f0:1b:2a:eb:14:76:5f:2d:
                    9c:5e:47:26:fa:5b:89:2b:ef:b2:51:ff:75:3e:a6:
                    9d:b5:96:10:b2:8d:2f:0b:58:12:66:3c:ba:96:2c:
                    85:1e:ad:cc:bb:fa:f5:cd:85:89:4b:d6:0e:6c:57:
                    df:8c:51:8a:04:c1:ae:1a:eb:c8:38:6a:b9:79:8a:
                    cd:06:30:bc:81:33:2b:48:71:9e:04:36:95:2c:85:
                    6f:3b:bb:31:2a:ac:02:ea:58:ec:38:12:46:8c:43:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:FC:09:92:5A:0B:80:77:DA:8B:BD:4D:E7:D5:76:54:BC:FF:B9
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:c5:89:8d:6b:91:70:12:4c:32:51:4d:b1:35:c5:6b:38:
         ab:b6:f2:d3:dd:84:a0:31:8c:a5:25:de:8f:5b:cd:cc:d4:67:
         b2:69:79:21:3d:7c:ac:1f:7b:e4:b7:79:ec:66:67:b5:a1:a0:
         fa:0e:64:59:d4:39:31:36:fd:62:0f:3b:fd:6c:9d:e0:3f:3b:
         b9:34:12:98:e4:9a:d8:27:6a:22:19:fc:f9:4e:1b:ca:c6:be:
         23:75:23:26:e5:56:e2:42:51:c6:b9:a8:04:5a:5e:90:03:4d:
         13:7e:45:26:87:6b:ab:86:1f:a9:00:44:a5:07:74:0e:52:99:
         da:10:3f:15:fc:5c:f9:29:6a:85:91:1f:78:55:5d:dd:92:61:
         97:5a:b7:b5:ab:85:6f:14:4e:d2:27:ef:8e:80:9c:cb:fd:a0:
         9e:96:70:01:68:7f:7a:00:6a:df:10:3d:32:38:da:5e:2b:75:
         06:36:d9:b6:a8:80:8f:d4:80:30:cb:f1:ce:9f:42:03:5a:49:
         6a:24:bb:e0:3c:f4:11:d5:40:61:e7:6d:9c:c5:a2:ab:ea:5e:
         52:1a:ec:06:f6:3b:c5:62:38:b1:c1:a9:6a:cc:16:28:9d:50:
         2d:c2:8d:9f:05:05:37:a5:2f:49:9b:6e:70:c6:72:01:db:ff:
         0d:8d:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:18 2026 by rpki-client