Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa
File:                     58B04DD46F3C11EB924C4E2AC4F9AE02.roa (raw, json)
Hash identifier:          1ykJMGL6at4RQBXZd1ybx9+1UkR4f2L3m4pa6rsank8=
Subject key identifier:   8B:F4:4F:63:C8:42:2C:7A:B2:85:F2:74:BF:EB:71:61:75:80:0E:57
Certificate issuer:       /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial:       077E
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 21:42:33 +0000
ROA not before:           Wed 12 Aug 2026 21:42:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38333
IP address blocks:        103.153.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
                          rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
        Validity
            Not Before: Aug 12 21:42:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ce8c9-f8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:63:7c:2e:06:fe:2a:6d:73:89:1f:f2:da:
                    9c:9c:d4:5e:82:2a:c2:1f:3a:c2:8a:d2:db:be:25:
                    9a:2c:f4:21:b0:7d:c5:82:fa:c7:59:f5:f8:8f:6c:
                    4a:4f:2c:54:ed:72:5e:b8:80:13:03:ab:1b:22:00:
                    2f:c9:a0:df:8c:00:c3:c2:ab:79:0e:d1:06:d9:53:
                    86:97:2a:54:cb:35:c4:8d:e4:80:11:1c:38:a6:b0:
                    d2:e1:48:f9:1b:9f:10:4e:ca:36:27:91:4a:39:44:
                    80:6f:4b:94:2a:b0:9c:55:cb:7d:1b:8f:80:fb:81:
                    7a:94:6b:7b:b5:39:28:33:01:d8:c0:32:dd:83:c0:
                    5a:d7:72:02:99:ca:2b:d9:fe:be:fd:2e:71:84:91:
                    88:cd:8d:65:1b:db:ed:3a:c5:8b:b1:1b:29:8d:cb:
                    4c:2e:b3:ca:f4:11:dd:e5:10:16:b6:46:19:4d:52:
                    79:74:3c:e1:7d:e6:87:b0:0e:e9:c5:fa:76:2a:eb:
                    9d:52:b9:d6:fc:67:9c:a2:62:91:1c:af:d7:71:3c:
                    ee:f6:df:53:df:88:23:02:03:18:b5:9a:01:4c:8a:
                    d6:90:5c:a8:3a:98:70:61:75:09:28:dd:8f:8b:83:
                    21:96:7d:9d:1c:26:24:9e:a6:83:c2:24:9a:8e:f0:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:4F:63:C8:42:2C:7A:B2:85:F2:74:BF:EB:71:61:75:80:0E:57
            X509v3 Authority Key Identifier:
                keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/58B04DD46F3C11EB924C4E2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:99:38:aa:0e:68:dc:60:16:1d:37:79:5f:4d:a6:fa:e0:ab:
         4c:1b:7b:26:b1:11:2a:3f:9a:cc:8d:21:24:2d:52:c8:cb:5c:
         1c:ec:6a:cb:fb:ff:8b:34:f4:43:ad:21:63:14:d9:a4:a8:35:
         39:34:23:b9:7b:9b:13:06:0c:f2:b8:a3:3d:40:b7:82:0e:be:
         84:7e:f3:d3:a5:ab:74:46:d2:f9:1c:d6:2d:69:13:fa:82:23:
         ba:61:49:03:d4:97:78:4e:94:db:bd:ee:7e:30:de:bf:98:33:
         ee:54:1b:f5:9a:6a:74:ae:c4:b5:73:19:17:46:f6:a3:1c:42:
         4c:a1:a1:4c:64:68:1b:5a:bd:55:21:ac:1b:74:6d:8b:51:94:
         7d:d7:a8:bc:1e:ae:c0:4b:4e:ec:21:99:c2:07:47:b1:20:9a:
         21:39:57:25:b8:a5:db:7d:0c:2b:a9:ae:e4:de:56:94:89:85:
         d4:48:6a:4f:93:a6:4e:0d:e9:15:ad:c6:30:d9:72:e8:21:59:
         d7:05:5b:38:a1:4e:26:72:37:ae:b8:fb:22:e1:20:74:9e:14:
         bb:a0:9b:32:08:76:55:a7:6a:96:36:36:b5:80:84:94:98:22:
         72:49:2d:75:db:fb:bf:96:e6:72:e0:3a:9d:8b:53:52:f4:87:
         d4:0c:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:54:17 2026 by rpki-client