Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa
File:                     A87AE518D2E011EDA1EF340FC4F9AE02.roa (raw, json)
Hash identifier:          dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=
Subject key identifier:   3F:D3:5B:84:0C:A1:CF:39:F1:5F:40:CF:49:0E:FA:2D:0D:D7:49:B7
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       0613
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa
Signing time:             Wed 24 Jun 2026 23:28:18 +0000
ROA not before:           Wed 24 Jun 2026 23:28:18 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     140344
IP address blocks:        103.230.56.0/24 maxlen: 24
                          103.230.57.0/24 maxlen: 24
                          103.230.58.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jun 24 23:28:18 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3c6812-1cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:5a:71:d2:4d:52:fd:e0:45:54:1d:91:66:
                    5e:ea:83:01:c4:5b:e1:f9:0f:90:39:aa:0c:7f:14:
                    4c:a1:9f:07:cb:ee:79:b7:46:5b:cf:82:07:ec:1d:
                    d5:cb:5c:4e:ef:02:b2:f4:4a:ec:e1:20:91:ff:43:
                    a5:50:8a:f6:53:b5:68:ef:e8:2a:21:e0:ac:2a:0d:
                    c0:30:2a:4e:16:78:33:f1:23:93:99:97:fa:6d:eb:
                    a3:98:b5:d3:b5:bb:6a:f5:c1:8c:ca:53:e8:fd:5a:
                    a5:7e:70:80:fe:b7:90:23:bb:e0:91:14:90:a2:4b:
                    7c:00:ed:22:5f:79:3c:83:f7:fd:9f:ad:af:1c:45:
                    13:9a:b3:f2:cd:af:39:b2:79:55:b9:3f:7a:6e:eb:
                    11:ad:d4:49:e2:62:02:f5:9d:bf:ae:bf:46:f5:08:
                    cb:96:66:33:01:26:1e:5c:dd:f4:3e:06:f5:14:a7:
                    95:f5:50:a4:51:84:e7:dd:69:b3:b0:af:51:12:25:
                    54:62:aa:45:b5:a8:35:fc:8e:4c:d0:ab:d3:d7:bf:
                    85:97:02:94:7c:1a:30:8e:4a:fd:53:83:5c:18:cf:
                    f8:e3:49:d1:bd:c1:1b:60:d1:f4:4f:05:02:e6:d3:
                    1c:0a:2c:71:d8:f4:24:29:1a:dd:05:d2:2b:93:76:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D3:5B:84:0C:A1:CF:39:F1:5F:40:CF:49:0E:FA:2D:0D:D7:49:B7
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/A87AE518D2E011EDA1EF340FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0-103.230.58.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:6d:a6:82:cb:f4:a8:b5:87:04:22:b7:07:f2:76:8d:68:
         4a:ff:02:44:7c:5d:10:1a:c1:51:cc:d5:4b:0a:71:3a:ba:28:
         39:c4:73:d0:9a:ac:2d:71:d1:b8:38:ad:a6:8a:a5:28:88:1c:
         a2:c5:e2:83:e1:99:03:1c:1a:4b:50:0c:d9:22:49:0a:a5:6c:
         b9:45:84:6e:ac:43:06:b7:a5:6b:b4:6d:6e:f9:ba:1f:3e:19:
         64:13:cd:ad:b1:11:14:29:24:24:44:a8:e5:f6:98:b2:ae:a0:
         16:f7:b4:8c:e3:04:85:f4:9d:54:96:8e:ac:6a:84:e1:94:78:
         b1:04:af:52:b3:72:cb:33:73:c3:a9:4e:a7:fd:6c:1c:c1:08:
         d5:f2:e4:ac:10:70:31:7c:e1:40:09:95:84:87:61:c1:2c:94:
         78:22:88:7b:a8:ed:d8:ee:71:ac:87:76:61:32:55:53:a5:a8:
         47:a4:0c:21:22:35:59:79:f9:a4:85:8a:d5:dc:7b:b2:cb:25:
         e0:74:74:4a:06:f9:be:bf:65:a1:6c:30:50:c2:9a:f9:2e:8c:
         47:73:a0:e5:82:d8:90:95:d1:f4:34:24:63:00:ea:a5:a8:ac:
         15:0c:fb:d6:8f:dc:f2:f9:d2:9e:4f:40:00:c8:8f:1f:9e:58:
         57:d0:4b:70
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1
NDI2QTFBMDMwHhcNMjYwNjI0MjMyODE4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNjNjgxMi0xY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx21acdJNUv3gRVQdkWZe6oMBxFvh+Q+QOaoMfxRMoZ8Hy+55t0Zbz4IH7B3V
y1xO7wKy9Ers4SCR/0OlUIr2U7Vo7+gqIeCsKg3AMCpOFngz8SOTmZf6beujmLXT
tbtq9cGMylPo/VqlfnCA/reQI7vgkRSQokt8AO0iX3k8g/f9n62vHEUTmrPyza85
snlVuT96busRrdRJ4mIC9Z2/rr9G9QjLlmYzASYeXN30Pgb1FKeV9VCkUYTn3Wmz
sK9REiVUYqpFtag1/I5M0KvT17+FlwKUfBowjkr9U4NcGM/440nRvcEbYNH0TwUC
5tMcCixx2PQkKRrdBdIrk3Zn7wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFD/TW4QM
oc858V9Az0kO+i0N10m3MB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF
NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTIzMjAvNkQ3MDVCQ0VGRTcwMTFFQjlDRkI5MDI5QzRGOUFFMDIvQTg3QUU1MThE
MkUwMTFFREExRUYzNDBGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBANn5jgDBABn5jowDQYJKoZIhvcNAQELBQADggEBAC/CbaaCy/So
tYcEIrcH8naNaEr/AkR8XRAawVHM1UsKcTq6KDnEc9CarC1x0bg4raaKpSiIHKLF
4oPhmQMcGktQDNkiSQqlbLlFhG6sQwa3pWu0bW75uh8+GWQTza2xERQpJCREqOX2
mLKuoBb3tIzjBIX0nVSWjqxqhOGUeLEEr1Kzcsszc8OpTqf9bBzBCNXy5KwQcDF8
4UAJlYSHYcEslHgiiHuo7djucayHdmEyVVOlqEekDCEiNVl5+aSFitXce7LLJeB0
dEoG+b6/ZaFsMFDCmvkujEdzoOWC2JCV0fQ0JGMA6qWorBUM+9aP3PL50p5PQADI
jx+eWFfQS3A=
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:23:00 2026 by rpki-client