Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa
File:                     7F35DF3CB74E11F0B044DA80C4F9AE02.roa (raw, json)
Hash identifier:          eFLyDCdarX3BPuP+3Za6l81hsCe/zpHRVU46U5QQdqg=
Subject key identifier:   76:FA:84:C4:79:E4:F1:92:86:F3:09:D2:A9:D4:B0:64:8E:C2:A2:B9
Certificate issuer:       /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial:       1205
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa
Signing time:             Sun 23 Aug 2026 08:37:55 +0000
ROA not before:           Sun 23 Aug 2026 08:37:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135055
IP address blocks:        103.18.180.0/24 maxlen: 24
                          103.107.38.0/24 maxlen: 24
                          103.107.40.0/24 maxlen: 24
                          103.107.41.0/24 maxlen: 24
                          2406:eac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
                          rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4613 (0x1205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
        Validity
            Not Before: Aug 23 08:37:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a8ab163-f9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:17:f8:fc:e7:08:27:1e:7f:7e:a2:3d:04:
                    06:45:bb:25:ad:5a:7e:e6:b6:ac:2e:fd:f6:2d:fe:
                    74:e8:f8:c6:56:5f:8f:9f:6a:78:83:97:f7:65:1d:
                    97:65:ce:03:49:c2:f2:60:2f:8d:e4:d4:a6:3e:46:
                    8d:d3:f5:fc:96:79:68:2d:a2:19:29:1c:c8:41:86:
                    1b:b3:59:97:cf:69:5a:63:c0:4d:98:9f:3b:f5:16:
                    ad:5a:61:2c:5d:57:65:5f:10:95:4b:8d:67:55:f4:
                    f2:f2:b1:81:9f:3c:50:69:f4:40:e7:fc:f8:ef:3c:
                    26:ca:f3:03:11:80:dc:13:f4:a7:72:e7:41:e3:38:
                    11:cc:74:79:30:25:96:8e:f3:ed:8f:39:da:24:10:
                    34:b2:8f:19:d0:5f:a4:6e:1c:43:1f:ac:53:76:c1:
                    c6:95:5e:e6:a0:91:9b:c6:e5:c5:ef:e7:78:5a:43:
                    9b:e1:f5:cc:c3:3b:02:17:da:6a:10:3a:0b:b9:ea:
                    dc:5c:5a:0d:b3:5a:e1:d2:04:fb:5c:9d:91:69:69:
                    1a:b3:90:16:3d:7a:56:6a:51:07:66:20:ac:50:50:
                    79:2e:7e:0b:34:40:44:0b:e9:6f:7f:22:80:c9:b7:
                    7a:3e:69:8c:7d:cb:76:ce:e6:6e:09:9d:fd:b3:50:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:84:C4:79:E4:F1:92:86:F3:09:D2:A9:D4:B0:64:8E:C2:A2:B9
            X509v3 Authority Key Identifier:
                keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.180.0/24
                  103.107.38.0/24
                  103.107.40.0/23
                IPv6:
                  2406:eac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:53:13:6a:35:d0:ef:03:5a:9c:4d:ff:84:bd:66:9b:b2:8a:
         57:e7:19:92:25:22:5c:92:9a:3c:b6:d7:f1:de:0c:f8:59:cb:
         04:a6:57:f7:52:ca:5e:b3:45:64:b9:a3:11:54:a0:04:e1:d9:
         c7:d0:ab:33:2e:d3:5b:0c:54:3d:cd:10:eb:f3:86:f0:fd:87:
         c0:c9:c7:6e:b3:79:c2:a4:2a:cb:5a:f3:98:bd:1e:3a:0a:9e:
         71:39:b4:43:0f:cd:50:ea:86:99:a4:c9:73:16:68:b3:96:84:
         b1:34:d2:0d:83:24:63:ad:9e:1a:01:9a:f2:2f:aa:37:8c:5f:
         d4:1b:e4:54:32:ea:94:d8:27:08:0e:a8:91:35:8e:9d:52:7e:
         41:19:32:71:46:13:8e:ed:e5:b6:db:aa:eb:4a:b0:23:e8:3a:
         33:01:a9:1e:0a:c6:c3:47:fb:90:d3:87:74:78:e1:cb:c4:3a:
         f9:6a:21:4b:95:0b:8a:c7:0d:9e:95:f6:6c:ec:69:5b:d4:d6:
         09:fb:d9:6a:86:02:15:ee:c0:4a:f6:22:a6:47:5d:40:c1:81:
         65:4f:db:78:8c:e0:c4:74:80:16:6c:17:f8:6a:ba:36:21:18:
         40:17:c5:f0:90:a9:e5:82:1e:46:ba:af:1d:dd:21:1f:8d:ba:
         0a:10:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:24 2026 by rpki-client