Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
File:                     4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json)
Hash identifier:          /PARiH5eaZ2ETFC2Zi05FfcP/mxQcmCWaQAj9q8kZlY=
Subject key identifier:   8C:17:3F:F3:93:C9:DE:D1:29:45:BF:5A:2B:21:D3:46:C3:5F:BE:5A
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0BBA
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 19:41:44 +0000
ROA not before:           Tue 28 Jul 2026 19:41:44 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     140091
IP address blocks:        103.5.120.0/23 maxlen: 23
                          103.5.120.0/24 maxlen: 24
                          103.5.121.0/24 maxlen: 24
                          103.148.104.0/24 maxlen: 24
                          103.153.202.0/24 maxlen: 24
                          2001:df2:ce80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3002 (0xbba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Jul 28 19:41:44 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6905f8-53af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:bf:ce:a5:8c:03:e8:97:82:1e:d7:95:24:
                    83:21:04:1a:04:47:ed:ea:fb:0d:02:03:c5:71:9e:
                    90:21:f1:82:a8:f3:e1:e9:d9:68:de:0c:a3:c7:13:
                    74:90:13:13:3c:2e:39:53:9c:8c:a9:8c:8a:52:38:
                    9f:31:68:56:cc:cb:7f:82:18:a4:b2:13:9c:e2:f8:
                    39:20:af:88:94:b7:d0:54:0a:b8:e0:04:e5:9e:de:
                    9c:9a:d3:c3:59:21:ed:19:6b:ec:54:f5:c4:99:fe:
                    b7:91:a6:01:77:61:0b:d8:55:6b:a6:07:9b:de:18:
                    d3:5a:a1:2a:e2:29:f1:a4:ef:02:43:2a:61:6b:d6:
                    20:2c:68:45:f4:18:29:1b:1c:ef:e7:62:0e:91:13:
                    a6:00:3e:85:81:a2:56:ec:fc:65:e4:11:cb:03:50:
                    70:2f:f1:85:3f:20:4b:c2:67:fa:89:ec:9f:53:23:
                    6a:ad:c3:62:b9:21:23:48:ad:7d:7a:4c:25:02:ab:
                    60:33:21:f7:a1:d2:66:1d:9c:bb:d0:ff:88:d4:da:
                    a9:c0:fb:09:d9:dc:89:43:df:49:d4:28:56:34:f8:
                    d1:30:a6:04:95:5d:e1:85:28:a7:6b:15:92:fb:06:
                    90:d6:78:14:7a:8c:eb:21:b5:ea:f1:73:ab:ed:1e:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:3F:F3:93:C9:DE:D1:29:45:BF:5A:2B:21:D3:46:C3:5F:BE:5A
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.120.0/23
                  103.148.104.0/24
                  103.153.202.0/24
                IPv6:
                  2001:df2:ce80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:54:69:21:01:3b:00:15:cf:38:a3:30:90:d9:6b:97:7a:
         60:93:1d:98:d7:0c:31:ef:a2:b7:df:00:1d:5c:f2:52:c2:a2:
         e5:71:25:ea:a0:a8:e7:43:2c:d9:a5:89:dd:8b:72:ce:ad:11:
         bc:5b:94:63:2c:8f:bd:a4:b5:16:e6:b5:f0:58:bb:70:2b:91:
         e5:ea:b4:bd:89:21:75:fc:67:63:82:e1:8d:ec:58:cc:18:15:
         5f:0d:f7:f4:42:18:2b:2a:bf:e1:a7:22:91:30:38:98:1e:6f:
         24:6c:e3:b0:de:6c:90:39:ee:a3:b1:3d:11:49:78:1b:9b:fd:
         25:80:a8:d6:20:74:ca:f7:1f:90:22:8a:3e:83:c6:aa:4c:a4:
         09:c5:3c:8d:98:04:30:3b:6b:76:01:a1:0f:94:b4:ac:34:2b:
         bf:b1:38:68:b1:76:4e:b5:8d:8e:a6:8f:67:46:3d:0e:ed:c1:
         87:d0:7e:79:06:ea:09:c4:8c:50:5c:56:66:ea:49:ea:4b:c2:
         8a:bc:66:44:d4:06:f7:a8:da:cc:a1:3d:a5:c2:11:4e:bd:ed:
         df:1f:c4:50:10:98:b9:7c:3e:d4:6b:9b:63:b8:2e:1c:90:8f:
         32:d7:c4:ea:8f:3b:9b:a2:5e:e4:a2:bc:79:b7:40:82:d4:76:
         40:29:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:16 2026 by rpki-client