Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/724543648A2311F187384F3F6A11F970.roa
File:                     724543648A2311F187384F3F6A11F970.roa (raw, json)
Hash identifier:          D66quyR1bQNbhI57Y/JKPXB9cl9F0VyVuzBoZx7JEzA=
Subject key identifier:   6C:C7:41:2F:8B:CA:48:9A:2F:45:55:36:37:64:BD:2F:88:13:A2:C5
Certificate issuer:       /CN=A9195B3B/serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD
Certificate serial:       02
Authority key identifier: BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/724543648A2311F187384F3F6A11F970.roa
Signing time:             Tue 28 Jul 2026 01:27:07 +0000
ROA not before:           Tue 28 Jul 2026 01:27:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131904
IP address blocks:        103.5.64.0/24 maxlen: 24
                          103.5.65.0/24 maxlen: 24
                          103.204.64.0/24 maxlen: 24
                          103.204.65.0/24 maxlen: 24
                          103.204.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl
                          rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 01:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195B3B, serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD
        Validity
            Not Before: Jul 28 01:27:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a68056b-7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bc:2b:23:dd:57:ef:46:a9:b0:48:ca:3f:3f:
                    a1:73:58:52:68:46:00:45:b6:84:ae:2e:9b:97:52:
                    51:1d:ac:cb:9a:e7:e6:ea:e5:64:2d:65:4f:28:7d:
                    cf:4e:ef:6f:9d:58:ab:e5:4b:e2:a0:d2:6e:bd:7f:
                    63:be:21:67:9b:d3:57:22:ae:97:a6:21:2f:48:ab:
                    95:07:47:a5:25:a1:47:fd:a6:d5:24:46:a1:c6:b5:
                    57:01:fc:4a:fa:5d:a8:c4:5b:d4:35:c1:60:70:43:
                    2d:91:3a:61:56:25:ec:b6:e0:f3:93:63:e0:97:bb:
                    4d:8c:ee:96:1c:2a:ac:f3:b4:4c:15:79:c8:9b:ca:
                    49:41:aa:cb:7d:ee:97:00:64:06:34:ba:b5:35:f2:
                    46:7b:a6:23:56:6f:3a:ee:3e:09:f0:b4:d6:2f:ae:
                    15:3a:98:ff:a6:7b:32:99:45:e3:31:5a:6f:21:e3:
                    dd:a5:83:3d:90:b7:40:f6:05:d7:c1:95:0e:1d:56:
                    52:7d:44:0f:5d:eb:ee:52:18:34:8e:92:b5:2f:d0:
                    cd:d3:82:b0:f3:37:b9:86:c3:2c:a1:fb:79:8e:07:
                    46:87:d6:9c:49:6c:7f:d6:5a:0b:c7:ba:58:de:d5:
                    b3:fc:3f:32:ef:22:0e:03:fa:4e:f0:98:0b:b4:17:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:41:2F:8B:CA:48:9A:2F:45:55:36:37:64:BD:2F:88:13:A2:C5
            X509v3 Authority Key Identifier:
                keyid:BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/724543648A2311F187384F3F6A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.64.0/23
                  103.204.64.0-103.204.66.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:69:90:e8:d2:cc:37:e0:62:7e:f8:a7:d0:02:01:bb:94:
         62:82:c6:b2:34:29:39:38:aa:78:04:a7:6e:1f:55:f5:5e:26:
         e8:96:03:54:00:f6:2b:85:54:48:f9:bb:01:94:24:d6:01:2f:
         7b:2b:3f:15:ee:78:ba:53:b7:4d:e3:34:d8:e7:30:cd:c3:a9:
         5e:2d:ed:56:d8:78:ea:73:46:14:64:62:d6:c1:b2:d7:f1:48:
         e4:ef:d5:82:6a:7e:1f:8b:da:71:86:f5:be:4e:7b:56:17:13:
         00:23:4b:36:5e:19:a5:34:6c:b3:bf:eb:0e:62:e8:e1:27:98:
         8d:bb:67:0c:ac:3a:1d:43:f1:23:c8:5c:fe:0a:d3:61:50:fe:
         c4:c2:32:7b:f3:56:1b:0a:cd:7a:08:df:0f:2d:b4:d0:d8:fe:
         29:43:f1:d7:dd:5d:66:6d:f8:da:61:d7:87:27:b0:c2:57:02:
         6b:2e:6f:45:d2:cd:94:55:9a:1e:df:15:87:90:59:f2:9a:4d:
         bb:fb:0b:f4:aa:91:82:00:c9:04:20:be:ed:aa:6d:cd:51:4d:
         45:63:dc:fb:f7:96:62:52:59:b3:e4:77:42:7d:ca:83:65:39:
         0a:b2:92:0b:d1:c8:62:42:0f:92:41:90:7e:d6:86:a3:d0:3d:
         34:65:a9:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NUIzQjExMC8GA1UEBRMoQkE2NkYyNjVCODkxMUJEMjJEQTExNkFFOTcwRDcwOUQz
MjA2NDBBRDAeFw0yNjA3MjgwMTI3MDdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjgwNTZiLTdiMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDovCsj3VfvRqmwSMo/P6FzWFJoRgBFtoSuLpuXUlEdrMua5+bq5WQtZU8ofc9O
72+dWKvlS+Kg0m69f2O+IWeb01cirpemIS9Iq5UHR6UloUf9ptUkRqHGtVcB/Er6
XajEW9Q1wWBwQy2ROmFWJey24POTY+CXu02M7pYcKqzztEwVecibyklBqst97pcA
ZAY0urU18kZ7piNWbzruPgnwtNYvrhU6mP+mezKZReMxWm8h492lgz2Qt0D2BdfB
lQ4dVlJ9RA9d6+5SGDSOkrUv0M3TgrDzN7mGwyyh+3mOB0aH1pxJbH/WWgvHulje
1bP8PzLvIg4D+k7wmAu0FxS/AgMBAAGjggJuMIICajAdBgNVHQ4EFgQUbMdBL4vK
SJovRVU2N2S9L4gTosUwHwYDVR0jBBgwFoAUumbyZbiRG9ItoRaulw1wnTIGQK0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1QjNCLzUyRDFGNDBDOEEy
MTExRjFBMENCQkZGRDY5MTFGOTcwL3VtYnlaYmlSRzlJdG9SYXVsdzF3blRJR1FL
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdW1ieVpiaVJHOUl0b1JhdWx3MXduVElHUUswLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUIzQi81MkQxRjQwQzhBMjExMUYxQTBDQkJGRkQ2OTExRjk3MC83MjQ1NDM2NDhB
MjMxMUYxODczODRGM0Y2QTExRjk3MC5yb2EwLQYIKwYBBQUHAQcBAf8EHjAcMBoE
AgABMBQDBAFnBUAwDAMEBmfMQAMEAGfMQjANBgkqhkiG9w0BAQsFAAOCAQEAXGBp
kOjSzDfgYn74p9ACAbuUYoLGsjQpOTiqeASnbh9V9V4m6JYDVAD2K4VUSPm7AZQk
1gEveys/Fe54ulO3TeM02OcwzcOpXi3tVth46nNGFGRi1sGy1/FI5O/Vgmp+H4va
cYb1vk57VhcTACNLNl4ZpTRss7/rDmLo4SeYjbtnDKw6HUPxI8hc/grTYVD+xMIy
e/NWGwrNegjfDy200Nj+KUPx191dZm342mHXhyewwlcCay5vRdLNlFWaHt8Vh5BZ
8ppNu/sL9KqRggDJBCC+7aptzVFNRWPc+/eWYlJZs+R3Qn3Kg2U5CrKSC9HIYkIP
kkGQftaGo9A9NGWpCA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:45 2026 by rpki-client