Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
File:                     985276043B6D11F0AFFFDD4DC4F9AE02.roa (raw, json)
Hash identifier:          58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=
Subject key identifier:   5F:5B:DE:6C:83:79:BF:6D:93:69:F2:68:E2:45:28:4B:AA:0B:F1:3D
Certificate issuer:       /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial:       04A0
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
Signing time:             Fri 17 Jul 2026 01:25:45 +0000
ROA not before:           Fri 17 Jul 2026 01:25:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        103.63.102.0/24 maxlen: 24
                          103.207.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
                          rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
        Validity
            Not Before: Jul 17 01:25:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a598499-01a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:38:b2:2e:5c:86:ba:c6:87:ac:7a:ad:f4:
                    f2:8e:89:f5:f2:b2:b5:0d:96:3e:6f:b0:a0:6a:6d:
                    66:ed:b9:3d:ba:93:a0:49:e7:82:67:a0:2d:dd:eb:
                    bd:e2:79:fa:f3:cc:68:8f:bf:60:ea:a0:f4:ab:79:
                    47:aa:94:76:e3:1a:3f:ec:b1:0b:ce:30:41:a9:90:
                    8b:ec:27:43:19:4a:cc:28:2b:3d:9c:95:0f:b4:09:
                    09:a4:7b:7e:d8:a9:6c:07:37:c9:55:b4:ae:48:12:
                    29:e2:7e:3e:a8:0b:15:23:d0:7f:77:19:47:e7:25:
                    e6:3d:4a:bb:2b:e9:b3:80:2a:d5:ca:75:ee:78:f3:
                    15:93:32:ce:26:3b:ab:05:92:97:11:f6:db:c8:18:
                    fe:4c:7b:6e:12:88:ce:50:1d:92:5b:f7:38:58:e1:
                    c2:4d:80:39:34:36:c8:48:71:2d:2b:4a:c7:da:4d:
                    ce:56:43:8b:8c:6c:d4:b8:92:f9:82:d8:0a:70:72:
                    b9:05:0d:1e:36:b9:17:17:94:88:b3:d0:e7:f8:b7:
                    0d:d4:16:d3:3c:62:20:20:7e:68:2a:ec:f0:28:d8:
                    a2:b9:0c:b1:19:4b:e7:90:36:79:d6:f1:eb:b6:d7:
                    28:18:8f:d7:7b:32:cf:97:8d:6d:8b:89:89:15:0e:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5B:DE:6C:83:79:BF:6D:93:69:F2:68:E2:45:28:4B:AA:0B:F1:3D
            X509v3 Authority Key Identifier:
                keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.102.0/24
                  103.207.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f4:74:e5:40:19:48:93:7a:ee:de:e6:78:45:48:da:d8:07:
         2c:c3:54:e5:09:4d:c1:96:0f:69:e8:dc:36:8e:64:45:65:74:
         6f:dd:d6:4d:0c:24:a1:19:d7:e2:cd:4f:a9:ff:95:1c:e6:68:
         b8:c0:4f:9d:57:40:cb:5b:a2:e3:6f:a4:c7:d5:e4:57:d1:21:
         05:69:ed:de:4c:3c:d3:5d:34:b6:1e:e9:ed:1a:72:b5:57:3f:
         cf:7f:a0:18:26:04:23:a4:e3:c1:40:51:ed:3b:0d:04:ad:93:
         85:85:4f:1f:22:23:5c:66:d7:0c:ba:50:1d:d3:b3:8c:e7:9b:
         a1:9d:4a:57:2a:c8:46:ac:f4:50:5b:dc:fb:b8:38:70:77:2f:
         92:a2:e2:47:cd:d3:75:8a:24:56:85:96:9d:cc:50:e9:a4:c6:
         f9:8d:c6:ae:3e:d3:3f:df:61:4c:24:e5:a6:8e:2a:78:67:ec:
         c3:75:aa:cb:80:f7:96:c5:74:c4:fc:a1:a6:d1:57:76:a0:22:
         9c:4b:8b:08:2a:88:0c:6f:83:8a:f5:b9:ec:6e:35:b1:4b:78:
         9a:6e:a4:b9:16:95:ae:03:d7:b3:7c:6e:83:c8:1e:bf:58:d4:
         90:e3:0b:9c:a2:d2:7f:30:b1:09:34:ca:c3:a2:0e:21:3b:5a:
         da:6f:a4:88
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG
QjlBQkU5OTMwHhcNMjYwNzE3MDEyNTQ1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5ODQ5OS0wMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw44si5chrrGh6x6rfTyjon18rK1DZY+b7Cgam1m7bk9upOgSeeCZ6At3eu9
4nn688xoj79g6qD0q3lHqpR24xo/7LELzjBBqZCL7CdDGUrMKCs9nJUPtAkJpHt+
2KlsBzfJVbSuSBIp4n4+qAsVI9B/dxlH5yXmPUq7K+mzgCrVynXuePMVkzLOJjur
BZKXEfbbyBj+THtuEojOUB2SW/c4WOHCTYA5NDbISHEtK0rH2k3OVkOLjGzUuJL5
gtgKcHK5BQ0eNrkXF5SIs9Dn+LcN1BbTPGIgIH5oKuzwKNiiuQyxGUvnkDZ51vHr
ttcoGI/XezLPl41ti4mJFQ7x1QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF9b3myD
eb9tk2nyaOJFKEuqC/E9MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG
OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUUyRDIvQkMwMzU1MkM4RjlCMTFFQzgyNjAzRDE2QzRGOUFFMDIvOTg1Mjc2MDQz
QjZEMTFGMEFGRkZERDREQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZz9mAwQAZ8+eMA0GCSqGSIb3DQEBCwUAA4IBAQCm9HTlQBlIk3ru
3uZ4RUja2Acsw1TlCU3Blg9p6Nw2jmRFZXRv3dZNDCShGdfizU+p/5Uc5mi4wE+d
V0DLW6Ljb6TH1eRX0SEFae3eTDzTXTS2HuntGnK1Vz/Pf6AYJgQjpOPBQFHtOw0E
rZOFhU8fIiNcZtcMulAd07OM55uhnUpXKshGrPRQW9z7uDhwdy+SouJHzdN1iiRW
hZadzFDppMb5jcauPtM/32FMJOWmjip4Z+zDdarLgPeWxXTE/KGm0Vd2oCKcS4sI
KogMb4OK9bnsbjWxS3iabqS5FpWuA9ezfG6DyB6/WNSQ4wucotJ/MLEJNMrDog4h
O1rab6SI
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:05 2026 by rpki-client