Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa
File:                     D479653E5F2911EDB481A53EC4F9AE02.roa (raw, json)
Hash identifier:          wIOi13R4/dA4DTHTJMojbNkaTsZfB7lqp2vrNL+3Iok=
Subject key identifier:   78:25:81:D3:32:A9:90:3F:DB:62:1E:4C:3C:95:53:47:27:4A:26:0F
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       02E4
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa
Signing time:             Thu 01 Oct 2026 01:50:43 +0000
ROA not before:           Thu 01 Oct 2026 01:50:43 +0000
ROA not after:            Sat 30 Jan 2027 00:00:00 +0000
asID:                     135405
IP address blocks:        103.217.156.0/24 maxlen: 24
                          103.217.157.0/24 maxlen: 24
                          103.217.158.0/24 maxlen: 24
                          103.217.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Oct  1 01:50:43 2026 GMT
            Not After : Jan 30 00:00:00 2027 GMT
        Subject: CN=6abdbc73-d38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:0b:91:48:77:31:ca:96:ba:4c:52:aa:13:
                    b6:a7:31:9b:d9:67:c3:e6:36:0c:88:0e:9f:a8:1a:
                    d5:ad:89:93:7d:99:fc:16:d9:88:9f:09:17:30:60:
                    bb:37:8f:43:a2:a4:71:21:98:d7:bc:2d:aa:af:72:
                    9a:4d:7c:e2:b1:cc:1c:d0:f3:7c:51:06:77:cd:12:
                    a2:37:5e:97:52:dd:3b:6e:c8:29:e4:91:ac:e9:45:
                    72:77:a4:c3:8c:fd:e9:e6:46:0b:8e:0b:1e:09:8d:
                    ce:c2:eb:15:0e:3e:e1:58:fe:70:86:a0:fa:f3:ca:
                    4a:f0:6e:2a:94:2a:50:c8:d7:ab:23:4e:7e:61:96:
                    2c:21:b2:f7:71:6b:fe:77:a2:ab:71:d6:4e:a4:3f:
                    17:50:1c:ab:52:cc:eb:10:c9:a3:f9:3a:59:ea:79:
                    45:35:1e:6a:a2:cb:b9:fb:46:05:05:59:16:54:5e:
                    c1:90:f8:14:40:a6:0d:19:44:60:20:7d:8d:9d:06:
                    99:10:92:62:eb:e9:70:4b:a7:7b:b0:1d:a9:49:9d:
                    eb:e1:4b:5a:d0:f1:2f:8a:81:23:39:8e:a1:ce:26:
                    f6:84:aa:bb:56:cc:dd:f2:00:1e:79:53:97:53:90:
                    e4:7d:3d:ac:4c:70:5d:24:2f:d4:1e:87:c3:ea:43:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:81:D3:32:A9:90:3F:DB:62:1E:4C:3C:95:53:47:27:4A:26:0F
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:f3:e1:3b:8a:3c:b2:15:71:60:cb:60:02:dc:24:ad:5e:
         f8:1b:52:f2:e0:bf:8b:22:b2:c1:87:91:3c:13:ef:e1:3a:57:
         9a:9f:de:70:41:1a:a8:4d:e1:d7:5a:07:5d:1c:01:06:ef:11:
         0c:6c:ea:5e:89:eb:45:ca:0f:b2:63:d6:18:81:ee:ef:f0:d8:
         89:83:a1:22:7f:46:81:25:d0:03:af:e5:e4:97:cb:1f:41:93:
         36:a5:f9:1d:40:18:d7:61:83:49:04:af:d9:8e:ad:2a:b7:62:
         84:10:08:a2:e9:04:3b:de:95:2f:5d:de:ae:66:fe:ee:b7:1e:
         78:10:ae:63:35:55:ae:02:fd:92:7c:35:a5:2b:d2:8d:89:c2:
         12:a2:83:f7:08:0d:6b:ae:00:b8:7e:70:bd:c9:6f:ad:80:f0:
         7d:c1:9f:f6:61:05:06:be:c8:8c:1d:fb:52:ae:2e:79:6c:19:
         4f:df:57:ce:fd:7e:5d:75:0a:34:fd:7c:54:69:21:d6:2a:74:
         96:2b:ea:d9:ad:ed:60:92:4b:fc:65:a6:3e:38:ea:a7:e4:a4:
         b2:e2:aa:f5:2d:16:28:e7:e6:54:90:e7:68:5d:29:05:00:58:
         21:ea:4e:cc:82:c9:5f:d1:13:dd:f9:d3:ca:85:ae:4d:66:59:
         47:94:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 04:01:56 2026 by rpki-client