Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/C79B240C249811EFABD23253C4F9AE02.roa
File:                     C79B240C249811EFABD23253C4F9AE02.roa (raw, json)
Hash identifier:          rWZyVImJENhLkpwUekVBIJ0NoPNQmBMZY21o7SUKBHk=
Subject key identifier:   51:46:6A:25:16:CF:D2:62:E6:30:FE:DA:39:4D:C2:2F:65:4D:23:73
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       03CF
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/C79B240C249811EFABD23253C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 00:50:37 +0000
ROA not before:           Thu 27 Aug 2026 00:50:37 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150748
IP address blocks:        103.190.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
                          rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Aug 27 00:50:37 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f89dd-5ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:eb:37:47:25:57:80:c0:07:e4:eb:ad:a0:
                    13:b3:60:59:02:5e:d8:98:3e:08:24:54:69:41:94:
                    f1:44:bd:2c:be:12:85:70:4e:d3:df:05:c1:99:bf:
                    52:d7:e1:32:db:54:e3:6d:08:ef:66:fb:47:70:9b:
                    b4:7f:ac:a0:09:30:5c:db:b9:ac:7e:4a:c6:8b:3c:
                    a0:1c:36:38:7f:5a:19:c2:d3:93:55:54:4a:c4:b7:
                    8a:90:1d:42:5c:cb:2d:1f:c0:d0:41:d6:c4:64:65:
                    b8:03:82:44:1b:32:c6:6e:11:68:c6:0c:32:89:d6:
                    7f:30:9d:98:ce:62:3a:be:44:85:c1:cb:11:4d:d2:
                    7e:d0:e7:e9:f1:0e:be:63:10:1f:13:47:c2:57:a1:
                    46:a2:32:15:45:f0:01:56:87:98:6b:97:2d:6f:5d:
                    e4:cb:cb:0e:aa:ff:ca:d1:db:89:0b:ff:64:ad:eb:
                    09:d9:a2:c4:06:e9:c6:4a:57:75:f2:c3:47:49:3b:
                    15:23:c4:01:5e:24:1b:00:fd:c8:74:de:7f:10:41:
                    c7:77:d7:71:93:b5:ee:dd:17:b9:a9:dd:34:98:a3:
                    6e:3c:3e:d1:22:5b:ab:6f:bc:03:55:74:c9:e2:84:
                    ff:02:0e:2c:ee:b1:93:3b:c0:16:76:d3:54:cd:3d:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:6A:25:16:CF:D2:62:E6:30:FE:DA:39:4D:C2:2F:65:4D:23:73
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/C79B240C249811EFABD23253C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:3b:6f:68:61:d3:28:ad:ec:42:8c:8e:01:df:7a:00:50:
         6c:18:48:5f:41:57:fc:fc:97:5d:06:45:b8:05:5f:76:a7:96:
         e8:15:82:ad:79:55:6a:34:7c:35:98:dc:89:a3:5e:ed:25:c7:
         fa:2d:35:5b:e8:ff:a2:7a:e8:c8:98:07:52:35:fb:d6:1c:8c:
         d5:0e:9d:8c:11:8e:e8:c9:ed:66:f9:e6:14:6d:39:4d:c6:15:
         d7:dc:57:c4:10:a5:8c:f6:cf:63:4c:0d:a2:1a:bc:f3:7c:9d:
         5c:05:dd:e9:b7:26:8b:e6:11:c4:0d:ad:cc:72:b6:d4:01:7c:
         cf:35:51:94:ea:c0:bc:95:fc:91:23:3d:2d:b1:3f:70:ac:82:
         af:65:f0:18:9c:4b:48:30:e5:cd:b6:8f:b9:cc:b7:a5:f5:e8:
         42:2f:94:61:ff:b7:82:9a:d7:79:d8:02:f7:bf:1d:7d:4b:cd:
         ec:3e:92:15:3c:e1:3f:fa:e0:73:8a:43:4e:a3:10:5f:fe:4b:
         7c:00:b1:39:d4:11:c1:00:6f:75:19:53:e9:f3:92:b7:7e:82:
         7b:80:81:5f:60:ef:90:ef:59:6e:df:e9:07:a3:d7:76:88:82:
         ce:93:96:d5:42:dc:c5:50:44:5a:77:19:89:a3:be:a5:f3:79:
         c6:67:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:34:57 2026 by rpki-client