Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
File:                     8E49B7320E8C11EDAB2A8680C4F9AE02.roa (raw, json)
Hash identifier:          GpCjD3oX95me8F3KVbM3lDq7JQFH/OuiwpmGXyp1+t0=
Subject key identifier:   C9:9B:F7:89:22:96:01:6D:1B:DC:8B:F7:83:C4:A8:F0:D5:56:B6:58
Certificate issuer:       /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
Certificate serial:       0BF1
Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 19:38:50 +0000
ROA not before:           Thu 10 Sep 2026 19:38:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140540
IP address blocks:        103.148.32.0/24 maxlen: 24
                          103.148.32.0/25 maxlen: 25
                          103.148.32.128/27 maxlen: 27
                          103.148.32.160/27 maxlen: 27
                          103.148.32.192/27 maxlen: 27
                          103.148.32.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl
                          rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166638, serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
        Validity
            Not Before: Sep 10 19:38:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aa3074a-1177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:20:57:d4:fa:83:7a:d6:61:d9:18:f3:ff:
                    87:b4:59:b7:1a:cc:6a:ca:84:a9:47:fb:09:8f:06:
                    5d:f2:1d:b9:1d:8d:b8:ac:e7:25:38:5d:24:ce:7a:
                    9f:82:19:a9:cd:42:84:e5:68:dc:cc:1c:fa:f5:d0:
                    46:df:5e:f4:be:a7:be:a7:45:3a:37:72:12:33:77:
                    f9:16:f1:4c:07:23:11:4a:72:7d:d3:09:d1:47:e6:
                    7e:b2:36:94:fd:a9:31:16:3b:7a:9e:38:c7:26:27:
                    75:62:e6:50:bd:88:8d:55:1c:a2:30:ea:e4:30:23:
                    32:17:8d:f2:0e:3e:2b:0c:77:33:b5:2c:36:73:bd:
                    32:7f:2a:9b:3c:ae:aa:ca:b9:34:90:ea:39:7d:fd:
                    40:2b:73:e5:74:04:45:65:0d:d4:50:e3:42:a1:91:
                    7f:f8:c4:12:ce:b6:a0:a0:9d:19:34:8b:88:09:89:
                    14:4b:57:1a:e0:14:eb:3e:4b:f5:b4:ba:68:e3:cd:
                    3c:25:31:63:96:e4:c9:ad:64:c9:9c:01:a7:c8:e0:
                    30:2c:83:7b:18:bb:0d:ce:81:f5:43:4d:85:ba:9f:
                    78:8a:aa:27:50:13:60:74:61:24:6f:8d:e0:4d:41:
                    ce:8f:79:6d:de:1f:c3:cb:69:11:d7:cc:7b:e7:cb:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9B:F7:89:22:96:01:6D:1B:DC:8B:F7:83:C4:A8:F0:D5:56:B6:58
            X509v3 Authority Key Identifier:
                keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:89:48:1c:85:dd:fd:78:b5:48:e5:a3:7c:14:ba:04:f9:
         ba:08:5b:7c:ce:18:f2:0d:3e:99:b5:fc:65:66:95:da:1b:38:
         c7:b5:85:72:9a:01:a7:cc:df:29:0d:d3:05:72:e8:df:02:74:
         cb:77:f8:ce:39:cc:d9:8f:8d:0e:4e:8d:0f:dd:1e:cd:d2:23:
         7d:e1:b9:20:2f:c7:74:03:68:ca:91:7b:a9:2c:e7:b9:57:3d:
         74:7a:7a:31:b1:c0:6f:32:62:0a:87:f7:07:05:dc:87:9d:da:
         2a:ca:49:30:3e:ac:36:b4:f6:be:94:da:1e:35:45:e7:d2:7d:
         5d:56:25:77:98:6e:68:4e:d3:56:57:be:3c:3f:39:ae:6a:7a:
         95:47:e8:df:20:29:22:ee:25:a4:f1:08:b5:f4:64:5d:f7:b5:
         ec:16:4a:0e:b4:02:5a:1f:34:4b:f6:28:5f:22:d8:ac:8c:b6:
         88:78:e8:d8:71:1e:99:0a:fd:21:c4:f1:90:c9:bf:70:5a:e9:
         c2:0c:8c:e1:a9:aa:ac:8a:48:1a:62:3d:70:91:0d:37:38:d8:
         6b:4c:5f:86:91:d8:7e:e5:b7:ab:8a:53:6a:0e:46:84:b8:a8:
         6a:7c:de:c5:a2:5f:b1:be:92:a7:39:c7:c8:75:11:d4:e6:bd:
         e4:6e:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:34:42 2026 by rpki-client