Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa
File:                     397504CA4DD211ED8314A659C4F9AE02.roa (raw, json)
Hash identifier:          eAxcov0DgHGZBASWqpE6ptDgQXViZK69/4voKNe06AY=
Subject key identifier:   1B:87:C8:FF:BE:EA:E8:1C:4B:A2:9A:B8:72:26:84:10:F5:2F:82:11
Certificate issuer:       /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
Certificate serial:       02C5
Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa
Signing time:             Sun 05 Jul 2026 02:27:37 +0000
ROA not before:           Sun 05 Jul 2026 02:27:37 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149834
IP address blocks:        103.187.192.0/23 maxlen: 23
                          103.187.192.0/24 maxlen: 24
                          103.187.193.0/24 maxlen: 24
                          2400:7ee0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl
                          rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACDD, serialNumber=3691533300ACC1E0105EE0317063507F87B4012D
        Validity
            Not Before: Jul  5 02:27:37 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a49c119-5758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:de:9d:87:7a:18:fd:ac:be:47:74:46:f0:
                    86:79:2d:2a:fd:cc:b1:1e:8d:b7:1c:7a:71:6b:68:
                    b0:a2:06:fc:eb:bd:e9:26:5c:d5:3a:8f:c7:4c:55:
                    ed:7f:8d:35:86:0e:07:96:a3:c4:0d:67:b6:ab:68:
                    1b:a2:fa:67:a9:d7:78:cc:2d:39:ac:ac:35:eb:cd:
                    06:7b:6d:b1:f2:ef:ca:24:68:c7:8d:9f:cb:11:93:
                    b3:60:6f:f9:2a:da:d8:59:0a:6c:95:13:78:da:80:
                    e4:b9:ef:33:3c:6a:8a:03:8f:9c:2c:d6:e3:bf:9a:
                    b4:72:0a:d9:c3:eb:84:53:57:eb:fd:2e:26:4c:f9:
                    08:d6:3c:17:8b:02:63:53:d5:ac:5c:78:ff:ba:30:
                    dd:13:17:97:81:ce:f4:be:c3:1d:28:fe:59:5a:be:
                    9d:2d:e7:2b:39:22:98:e1:f4:ae:cd:c4:24:ea:af:
                    2a:75:e7:a0:68:64:77:a6:df:3e:7a:bb:cd:24:33:
                    b3:72:32:81:c6:3b:09:82:2d:4a:53:58:2c:dd:0d:
                    a3:63:57:c6:e1:4c:04:df:e0:fb:13:75:80:61:ae:
                    cc:fe:92:43:95:c4:ad:ba:bd:cc:4c:d6:b1:38:9f:
                    b8:f6:40:48:1f:f8:6f:f1:d3:45:ab:35:13:4f:88:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:C8:FF:BE:EA:E8:1C:4B:A2:9A:B8:72:26:84:10:F5:2F:82:11
            X509v3 Authority Key Identifier:
                keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/397504CA4DD211ED8314A659C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.192.0/23
                IPv6:
                  2400:7ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:36:22:2e:51:8a:b0:18:49:6c:fc:59:a0:cf:40:df:26:
         81:72:5b:9b:ef:20:ca:4a:88:cf:3d:ed:a6:e1:5d:bb:d3:f6:
         27:95:dd:36:c5:f4:af:f6:b0:bb:f9:24:0b:a2:4b:1c:eb:57:
         31:f8:8e:b0:5e:5e:be:74:72:6d:c4:55:ab:c2:aa:8e:38:a5:
         42:b3:64:45:98:c3:27:97:1d:a4:4d:1a:ae:f2:1a:4c:9f:af:
         2c:02:e0:2a:b7:a3:7c:e1:ce:f3:dd:9f:55:91:0a:24:67:75:
         c4:db:60:81:f4:c0:ab:e2:d6:d6:5b:d4:8a:c7:48:05:79:d3:
         5c:f5:79:f8:56:af:90:21:e4:19:02:e5:ce:a0:45:83:23:cd:
         61:b1:eb:1b:1a:f4:f7:91:ac:be:1d:20:d6:01:95:05:f0:03:
         27:b0:b5:b6:0b:62:d2:e5:7e:14:86:28:53:04:a0:30:7d:c6:
         b4:54:85:52:e2:48:c7:cb:25:3b:38:2a:19:d6:7e:4e:1c:9b:
         10:5d:30:a4:8d:92:c8:2f:40:c8:e4:b3:aa:76:1f:64:aa:60:
         c6:ea:3e:d1:72:37:36:8c:c2:dd:fb:70:c9:11:6f:e6:24:5e:
         b2:ad:7d:1f:1f:49:94:ad:7a:4f:22:47:29:a2:37:8d:80:d3:
         4d:3a:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:55 2026 by rpki-client