Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/A8386F1880BA11F199241D7E93A30FBC.roa
File:                     A8386F1880BA11F199241D7E93A30FBC.roa (raw, json)
Hash identifier:          X3b6yFfF3a4hrZ2AmVdCmz6pbLFnZ96Z+2HaXzQujlk=
Subject key identifier:   EF:13:FC:A6:57:6B:88:35:6F:3F:48:39:A2:3B:49:AE:A0:BF:83:3E
Certificate issuer:       /CN=A913BBCF/serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Certificate serial:       02
Authority key identifier: 36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/A8386F1880BA11F199241D7E93A30FBC.roa
Signing time:             Thu 16 Jul 2026 02:04:20 +0000
ROA not before:           Thu 16 Jul 2026 02:04:20 +0000
ROA not after:            Thu 31 Aug 2028 00:00:00 +0000
asID:                     133581
IP address blocks:        103.43.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
                          rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
        Validity
            Not Before: Jul 16 02:04:20 2026 GMT
            Not After : Aug 31 00:00:00 2028 GMT
        Subject: CN=6a583c24-0d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:d8:19:c2:2b:3b:60:fd:c6:03:aa:55:7b:
                    ee:d0:b0:ed:2a:bd:2a:f3:b6:8f:cd:c5:48:e2:6c:
                    0b:7a:94:34:9b:7a:b6:8e:c0:90:93:d6:e6:b4:0c:
                    43:97:df:a5:bc:0d:03:9e:99:9f:c1:b8:e5:4a:23:
                    e1:34:13:e0:6f:c4:a1:84:0d:49:ea:75:d5:8f:03:
                    49:b1:de:2e:e8:a0:0e:f2:af:e5:a3:29:6e:cd:6b:
                    22:4f:f3:91:bd:df:f0:9c:6a:c2:7c:ae:2f:fc:75:
                    c2:74:34:0d:7d:2e:ec:2c:5e:9f:21:8d:99:a2:7c:
                    16:0c:8c:90:84:7e:10:e2:7d:17:8a:fa:65:2b:d3:
                    fd:96:c9:4c:b2:64:e3:c1:f0:2c:ec:d0:58:85:76:
                    77:99:3a:01:b8:f3:87:d2:78:62:f2:4b:0a:c0:61:
                    d1:6c:17:14:af:71:2b:9e:74:2b:06:ae:c9:a8:d4:
                    fa:8e:8e:4b:36:2c:dc:d9:0a:f9:f6:10:3a:42:04:
                    18:1b:f9:c0:1d:8e:e1:d0:a9:b5:f0:7e:79:7e:a4:
                    e4:ea:4c:d2:9a:8a:62:d0:03:41:1b:67:85:9c:d3:
                    27:b2:97:ff:9b:31:8a:53:69:10:36:05:40:d5:d4:
                    da:5d:79:87:2f:d8:cf:6a:ae:9b:81:1a:46:58:b0:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:FC:A6:57:6B:88:35:6F:3F:48:39:A2:3B:49:AE:A0:BF:83:3E
            X509v3 Authority Key Identifier:
                keyid:36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/A8386F1880BA11F199241D7E93A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:ec:95:14:3b:ed:fd:e5:dd:62:34:77:42:ba:2e:b7:90:
         fc:14:ba:d3:64:9d:91:49:e8:f7:4a:32:0c:b1:d2:72:d9:b4:
         50:35:54:4d:0f:bb:da:ea:58:2f:a1:50:a6:d7:75:ec:a4:a6:
         71:24:9c:4b:d8:d5:b7:b3:36:b8:cf:bd:14:1a:14:9c:59:17:
         d7:cb:8e:a3:f0:e2:e0:8a:f9:0f:56:98:08:1d:5a:4a:12:f8:
         ce:18:39:cc:d1:df:bf:47:a4:3b:ad:9e:c6:ec:3b:6e:29:05:
         36:be:df:38:98:d5:77:1b:f7:8b:e1:7b:87:3d:f6:48:70:24:
         71:7f:8c:fe:ba:5f:38:2c:78:a0:7d:94:76:f0:32:30:9f:98:
         df:a1:6f:3d:68:88:e7:e0:9f:d4:9b:84:fa:9a:47:02:dc:27:
         d7:e0:81:6a:f6:97:ae:2b:36:d6:da:d8:9b:29:d5:2a:89:5c:
         1f:62:b3:18:ab:56:d0:82:3a:f1:a5:a3:75:70:ca:55:9b:a9:
         52:de:53:7b:64:e8:64:df:11:99:e7:10:87:86:69:75:84:57:
         bc:8d:e6:61:37:54:54:79:ab:80:41:80:03:3b:4d:c1:71:d6:
         ed:3e:c4:85:c2:82:38:12:30:4d:b1:b7:28:cf:7a:f2:34:91:
         35:5a:e9:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:22 2026 by rpki-client