Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/435A1DDA9E0611F1BC5E93D14A11F970.roa
File:                     435A1DDA9E0611F1BC5E93D14A11F970.roa (raw, json)
Hash identifier:          m6oDxt6Fo7Qvm1nr9s3HUZMAwYTL790EfhmOXKPIUvU=
Subject key identifier:   82:CE:A1:0D:E8:CA:75:E8:FC:6E:9F:4D:F3:F3:70:A7:73:8B:E0:AD
Certificate issuer:       /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial:       01C5
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/435A1DDA9E0611F1BC5E93D14A11F970.roa
Signing time:             Sat 22 Aug 2026 08:51:15 +0000
ROA not before:           Sat 22 Aug 2026 08:51:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139854
IP address blocks:        103.24.78.0/23 maxlen: 23
                          103.24.78.0/24 maxlen: 24
                          103.24.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
                          rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
        Validity
            Not Before: Aug 22 08:51:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a896303-d106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:0e:f4:69:5c:ef:6b:e3:87:9f:0b:3b:53:
                    3f:c0:94:3a:18:60:34:89:4c:92:d3:06:ad:b3:3a:
                    88:7a:87:d1:7b:61:38:ca:90:17:79:12:75:fa:48:
                    fa:ac:70:63:b7:e2:d8:03:86:c4:79:a5:70:c7:1f:
                    f3:a9:a5:75:f4:18:eb:29:d6:08:ce:fe:20:58:b4:
                    68:9d:e9:94:f8:14:77:45:63:14:aa:ce:f3:51:81:
                    48:5d:4f:07:d2:57:34:0e:1d:79:84:16:71:84:13:
                    e9:76:40:4d:11:e9:e0:e6:83:16:56:bd:36:19:c2:
                    12:cb:7f:d9:4f:c6:8f:7c:82:b9:dd:63:34:06:b1:
                    08:54:12:9f:18:f2:d8:80:26:61:f7:a9:64:08:db:
                    70:9a:28:70:f8:8f:25:cf:11:1a:14:0c:c9:89:23:
                    b4:d4:86:39:ab:15:23:a7:6b:6a:cf:30:a6:1b:10:
                    a1:2e:b4:fa:8b:ef:fe:24:13:91:84:2f:63:d6:c7:
                    dd:a7:36:1b:fb:de:32:6d:33:a3:93:dd:c0:87:6e:
                    cc:64:9c:fe:4c:a7:66:9c:d7:e4:c3:01:ec:ca:6e:
                    cf:14:aa:a0:0f:ee:fb:41:46:62:19:e5:1d:c2:89:
                    ab:f2:88:56:42:56:07:0a:73:2d:d7:ee:14:f2:2b:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:A1:0D:E8:CA:75:E8:FC:6E:9F:4D:F3:F3:70:A7:73:8B:E0:AD
            X509v3 Authority Key Identifier:
                keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/435A1DDA9E0611F1BC5E93D14A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:94:aa:a9:61:b2:0a:cb:9e:7e:b6:9a:f9:a5:0d:c2:53:
         e6:3e:62:e5:c9:ea:b2:93:46:c8:89:22:2e:00:c2:f0:96:31:
         03:0c:3a:09:15:dd:3b:4f:89:0c:95:0b:2b:c7:b7:a9:c8:80:
         f7:02:00:8a:f4:e0:28:65:27:f5:a6:4e:df:68:80:a8:94:5f:
         bc:96:79:4f:47:ce:c7:6f:ca:6c:ed:34:56:2f:2e:fb:8b:ee:
         79:fd:41:c0:a7:a9:17:13:0f:5a:81:e7:c4:22:04:9a:e4:9d:
         aa:e5:be:87:67:cf:85:e3:bc:53:70:f9:66:94:f8:fc:fc:1a:
         d4:85:26:dc:64:fb:09:1c:13:b6:30:1f:eb:f1:e0:18:34:e0:
         c0:02:9a:0e:95:e9:82:17:73:d1:b1:03:95:fb:a0:61:f8:30:
         24:0f:9e:f0:98:6f:7b:22:92:b9:ba:b9:03:13:06:1a:c1:37:
         3c:72:68:35:a8:c0:7d:ca:54:5e:58:39:23:a2:55:b5:af:1b:
         86:87:84:6a:a2:54:a6:28:f7:8e:e8:4c:5b:23:0d:1f:21:ab:
         92:2c:75:ee:18:47:d2:d1:65:ae:91:01:68:dd:ab:c4:be:21:
         5a:19:42:71:50:92:26:16:25:0c:a8:76:f3:38:3f:46:cb:90:
         e3:04:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:49:15 2026 by rpki-client