Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa
File:                     A07DBC62B03911F083346261C4F9AE02.roa (raw, json)
Hash identifier:          oijzJtaHC22d6M3Z7VF4N+R16UOXXwfKY4ojgxyUPHk=
Subject key identifier:   9D:6C:10:78:4D:9A:2A:2E:BA:ED:1B:55:23:50:C2:71:D1:C1:5F:77
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       043C
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa
Signing time:             Sat 25 Jul 2026 01:50:00 +0000
ROA not before:           Sat 25 Jul 2026 01:50:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     138619
IP address blocks:        103.187.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jul 25 01:50:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a641648-0696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:43:e9:b2:2a:ce:62:af:20:ad:2f:d8:55:
                    83:14:8f:3f:77:b3:96:0e:72:c1:f0:92:ef:e7:83:
                    b1:fd:d1:e1:34:e3:2c:da:23:0d:c0:f8:78:b8:a6:
                    78:b1:c8:be:ea:92:f4:98:52:3a:c3:a3:18:e7:20:
                    ac:36:c8:75:48:65:37:c1:29:c7:23:e1:19:2c:ca:
                    38:82:57:d5:a0:9e:55:c6:49:7a:32:ef:6d:ac:72:
                    a4:0a:b2:e7:fb:b3:f9:89:b1:f6:47:6e:7b:20:94:
                    be:9e:b5:a3:be:94:f8:87:5d:fb:3b:d0:0f:6d:4f:
                    12:2c:01:33:66:7b:22:e8:45:e2:ac:75:a7:9a:6d:
                    a7:58:99:18:56:04:1e:6d:9b:40:5e:b6:46:86:39:
                    61:f8:2d:a6:25:6c:24:90:e3:d9:c2:34:38:49:f4:
                    6e:7a:a5:67:1a:bf:7c:cd:c8:fb:ad:3b:d6:d1:8d:
                    4f:73:83:f9:2a:20:03:3b:03:da:e3:a7:54:e7:3a:
                    17:62:ac:42:fa:97:42:02:d0:a0:f4:7a:93:8a:78:
                    84:e9:75:37:8b:59:2a:79:bd:15:51:7e:b0:73:be:
                    40:64:22:5f:d6:3e:a1:e4:5c:40:7a:2c:6f:75:8b:
                    47:80:5b:80:c3:e2:cf:0d:10:61:3e:83:9a:5b:8c:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:10:78:4D:9A:2A:2E:BA:ED:1B:55:23:50:C2:71:D1:C1:5F:77
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:3c:2a:bc:02:49:2a:e6:d0:17:df:16:c0:ac:e4:3b:34:
         b8:9f:ac:18:6f:fb:2a:b8:b2:98:b9:aa:09:0f:0f:a2:c3:96:
         79:43:5e:66:df:de:a8:03:cd:ed:96:28:c5:46:cc:e8:62:36:
         92:83:c0:8b:76:a7:27:aa:0a:08:1d:72:0b:5f:c9:f5:cc:7e:
         7a:e6:89:b3:b3:c9:07:cc:f8:5d:d2:07:32:f2:9e:81:26:00:
         fa:08:23:fc:f3:1a:d5:30:6f:e4:ed:38:fb:95:68:b1:34:ee:
         19:6f:ad:b8:14:2e:1a:eb:a4:c9:ef:4d:bb:2e:ef:85:0d:13:
         5c:57:eb:51:c3:d0:9e:d5:1b:76:bf:2e:c9:85:25:02:2b:fb:
         74:24:80:62:0b:50:d2:fb:c2:44:dd:30:80:a8:7e:e3:e8:76:
         c6:73:e0:5f:5a:45:17:e6:3c:8d:7f:c7:26:08:57:76:9d:17:
         0a:3b:c1:62:fe:fc:d7:2b:8a:f6:4e:34:fe:50:86:f1:14:94:
         f6:54:f4:66:49:e0:d5:5d:00:64:81:6d:f5:ca:a5:5d:36:21:
         ab:34:5e:fa:11:9d:69:17:1d:6b:e6:e5:f6:eb:63:f4:b7:97:
         9e:7f:da:d0:82:e0:30:e6:5e:3e:2a:4d:89:00:a7:96:c7:8e:
         75:dc:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:06 2026 by rpki-client