Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa
File:                     B409E49CA39D11F1B4F7754D4411F970.roa (raw, json)
Hash identifier:          GzaCZWp1dndFD7g7emTXpIICurmoortE6hD0cpGMniI=
Subject key identifier:   D0:F3:E9:CC:76:1F:E2:A8:37:20:FD:D3:C7:D2:56:BE:C2:DA:63:86
Certificate issuer:       /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial:       0332
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa
Signing time:             Sat 29 Aug 2026 11:35:15 +0000
ROA not before:           Sat 29 Aug 2026 11:35:15 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17639
IP address blocks:        103.219.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
                          rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 01:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
        Validity
            Not Before: Aug 29 11:35:15 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a92c3f3-e34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:27:a7:25:cf:a3:c2:a2:31:f2:d2:48:d9:
                    33:9e:ca:6c:91:e7:8a:43:73:c9:96:65:e2:92:15:
                    f4:51:5c:df:d1:5a:00:c4:ef:99:a5:1a:c3:92:64:
                    14:d5:a1:a3:94:e0:aa:48:73:7d:af:9d:fc:cf:ad:
                    02:30:93:0c:17:b9:74:40:0a:64:65:6a:f2:70:15:
                    77:bb:57:aa:34:7d:d6:f8:89:06:17:da:13:4e:e6:
                    c5:96:66:a8:b4:18:b1:e7:09:f7:cc:79:ba:09:56:
                    14:d7:cf:f4:5a:db:04:86:b2:4a:c6:1d:ef:14:9b:
                    fc:4a:13:99:b3:ee:c7:0e:b0:9c:3b:39:2d:fe:45:
                    ec:4b:3c:b8:d0:8a:06:0a:17:ac:a7:55:41:9a:39:
                    bf:b8:37:55:39:95:f3:37:e1:09:a6:75:40:1a:80:
                    0a:aa:aa:13:de:32:59:f2:3b:53:b1:13:ab:78:92:
                    49:81:df:ca:b6:a0:82:7d:9a:e3:b3:52:2c:ff:ac:
                    d7:ee:af:11:b6:9b:7e:c4:4e:90:0d:3a:87:b0:86:
                    ee:86:52:75:ad:57:c5:f6:b8:84:d7:0b:c4:4b:5c:
                    63:bc:05:2c:25:ba:bc:6e:6f:d6:4f:c2:0c:6c:9e:
                    c8:c7:41:2f:66:9a:fe:e2:55:dd:53:35:e0:cc:5f:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F3:E9:CC:76:1F:E2:A8:37:20:FD:D3:C7:D2:56:BE:C2:DA:63:86
            X509v3 Authority Key Identifier:
                keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:8e:11:46:05:2a:0f:86:11:dd:65:24:eb:5c:98:77:3c:
         75:7f:4f:f2:8f:a7:f8:a8:9c:90:24:9d:1c:e3:74:69:f7:9e:
         2e:4a:fa:d0:13:2f:b5:94:a7:6d:08:aa:fb:2a:16:61:1f:b9:
         e4:16:77:ba:60:fb:73:4a:16:d1:91:86:be:63:e4:2b:72:fa:
         a8:11:d6:45:07:80:c2:ea:05:f0:c3:60:a1:5c:67:7e:db:fc:
         ec:3d:35:b9:74:d7:a0:88:f2:41:d5:34:b6:2e:26:29:50:fa:
         33:5b:31:f9:d2:94:c0:22:8e:b7:7c:19:0c:1f:33:72:29:56:
         9c:1f:01:71:c0:e4:5a:3b:3e:3c:27:05:48:84:0f:51:9f:88:
         f5:e3:e8:99:4b:1a:5f:31:3d:8a:51:d8:9b:65:1d:a9:a8:a9:
         f1:9d:26:f6:da:94:8c:4f:03:1b:83:23:e6:6d:3a:0d:fe:a1:
         79:bd:bc:2f:08:c5:aa:05:0b:68:79:38:99:8f:77:b9:81:1b:
         0f:f9:cc:da:87:cd:44:f0:0c:58:a9:d7:69:aa:f7:ba:83:56:
         65:55:2b:27:07:b4:7b:8a:2f:e2:64:71:75:5e:f7:07:83:74:
         19:64:76:52:43:34:f8:f8:d7:8d:08:16:8f:3b:92:f1:b9:d5:
         79:b7:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:23 2026 by rpki-client