Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa
File:                     8D176BFAF65011ED90F79C33C4F9AE02.roa (raw, json)
Hash identifier:          uA3cRTnm0nh69G6nHVUfrJqxaulMue0OOyc7I/1E8Kc=
Subject key identifier:   DC:18:6F:5B:A0:2A:05:82:78:76:25:1D:AB:91:E2:4A:40:7E:A1:2C
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       025D
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa
Signing time:             Sat 25 Jul 2026 03:51:50 +0000
ROA not before:           Sat 25 Jul 2026 03:51:50 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135548
IP address blocks:        103.65.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Jul 25 03:51:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6432d6-a6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:f8:cc:25:36:55:fb:92:4e:e8:54:8f:d3:
                    03:75:4d:13:78:ec:11:2e:91:8f:79:19:a1:71:07:
                    19:fb:e0:30:92:0b:8f:2b:ca:24:ee:45:4e:b2:52:
                    98:32:b6:50:6c:a8:17:19:b6:fd:d9:08:8e:95:43:
                    9d:62:9b:82:f8:b5:34:8d:77:f2:48:eb:1a:b1:12:
                    6b:3b:44:fc:da:bf:91:06:39:c8:a1:01:ee:bc:8c:
                    ba:91:9e:39:dc:23:d6:7b:37:97:cf:d8:94:2e:4a:
                    2d:ae:85:6d:77:85:79:c4:e9:ff:6c:2f:9e:16:b3:
                    40:dd:5e:97:c0:75:34:12:c1:02:12:c2:2a:36:70:
                    f9:8e:87:86:5e:ac:9f:8c:b4:a3:ef:da:fc:3d:72:
                    57:fe:ed:f9:5a:4d:07:77:59:0e:3b:b0:f2:27:19:
                    e5:f3:bb:69:06:87:52:02:7e:6e:c1:f0:28:1f:e8:
                    0f:fb:05:4d:67:fd:83:e3:6c:53:0f:b4:ce:e6:7c:
                    d0:b0:99:7b:b9:44:80:a7:45:3f:61:5a:39:2c:c4:
                    e5:92:e8:fd:0d:db:94:fe:d5:1a:bf:e1:ba:a7:bd:
                    de:bb:29:e4:cc:7b:26:87:22:2f:57:62:df:23:1b:
                    cf:a6:ed:91:66:fd:3b:b6:be:3f:4a:00:f7:93:2e:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:6F:5B:A0:2A:05:82:78:76:25:1D:AB:91:E2:4A:40:7E:A1:2C
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/8D176BFAF65011ED90F79C33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c1:8b:45:a8:7d:41:2b:6b:06:ce:f9:9d:2e:31:31:fa:f3:
         c5:dc:b0:f7:02:f5:6f:bb:cb:16:e5:df:d0:d2:4a:c8:1a:4a:
         74:1c:9c:81:26:05:56:e8:dc:3f:8e:d5:45:7c:3a:bd:7a:6e:
         aa:1c:49:67:e8:81:9b:ff:f4:ac:35:9a:f3:91:64:68:ff:4b:
         4f:60:9b:ef:58:22:f9:ff:68:89:50:59:de:d8:d0:d4:aa:f0:
         20:13:0c:3b:f4:77:01:75:17:e1:c1:ba:4e:39:9e:18:b5:c3:
         37:a9:41:1e:ab:ac:ba:a7:31:70:2b:61:10:aa:f1:7d:01:4c:
         e2:07:af:9b:a4:87:ea:46:a0:4b:8a:0a:d3:3b:28:3c:94:b5:
         10:00:cf:c4:7e:81:ae:45:90:cb:ac:b8:a4:a8:8f:91:27:8d:
         cd:78:9b:c2:6d:93:82:e0:99:f2:47:83:8a:aa:f6:15:3d:39:
         01:4b:f0:50:e2:89:31:0f:75:c8:6a:b2:0e:c4:01:31:12:25:
         e1:10:2a:0f:8c:48:53:16:79:bc:09:52:c4:0f:36:5a:bf:6d:
         6f:28:b8:ed:41:8e:2b:6e:7b:25:7d:f5:4b:e7:32:3b:30:60:
         21:b7:d3:30:47:3e:c5:97:69:d1:12:32:c8:20:00:56:17:bb:
         87:0d:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:22 2026 by rpki-client