Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/8C19B3A21EFD11F0B822DF56C4F9AE02.roa
File:                     8C19B3A21EFD11F0B822DF56C4F9AE02.roa (raw, json)
Hash identifier:          yKxrhbVq68nAZx/GDf1Jc98enqiDWq6UT6EAblS/IXU=
Subject key identifier:   C5:11:BF:03:D5:EB:EC:78:1A:22:9E:AE:31:3D:9A:31:A6:8E:09:75
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       0114
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/8C19B3A21EFD11F0B822DF56C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 06:56:24 +0000
ROA not before:           Thu 03 Sep 2026 06:56:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     46484
IP address blocks:        103.245.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Sep  3 06:56:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a991a18-ca33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:2d:13:d8:3c:0e:5a:36:a9:a1:8b:a7:47:
                    ae:91:cd:73:0c:74:4f:52:6f:7f:91:a0:47:a2:83:
                    8b:6f:e9:2a:76:b6:4e:0e:18:a6:2e:41:12:5b:f3:
                    8b:e4:1e:c7:66:41:a0:5d:72:00:19:5d:b6:fd:02:
                    48:cf:be:5f:2c:c8:b6:84:0f:24:5a:e9:a3:85:ae:
                    bd:ca:94:7e:bc:23:4d:9a:3a:54:89:a1:dc:bf:88:
                    e8:63:b1:fe:f8:c1:65:d9:9d:14:a4:d2:5b:8f:8f:
                    b6:80:87:62:20:a5:c7:b6:16:47:64:78:69:06:b5:
                    ab:6b:bb:d1:a5:93:b9:51:fa:ef:cb:8a:7a:a5:fc:
                    ac:94:f2:56:49:d8:60:ec:65:02:7f:cd:2d:ec:f2:
                    ea:c9:9d:23:94:27:9b:1d:18:1e:9e:0b:b1:f1:f7:
                    c8:62:3a:ce:a0:9f:e6:1d:c1:41:21:58:4f:c4:af:
                    94:94:28:fb:df:bd:ef:d1:47:bb:cc:ab:26:f1:d2:
                    0e:7a:88:e3:c8:01:39:b3:f1:3e:40:15:fa:71:b9:
                    b4:a6:e3:3b:62:5a:3e:8d:b4:58:d0:f7:ef:d0:f6:
                    98:1b:e9:d5:fd:7a:b9:6c:13:45:73:b0:d0:92:36:
                    c1:14:76:cb:02:99:af:4a:57:83:51:34:26:9c:6a:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:BF:03:D5:EB:EC:78:1A:22:9E:AE:31:3D:9A:31:A6:8E:09:75
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/8C19B3A21EFD11F0B822DF56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:86:99:de:07:e4:57:d3:8b:ff:2f:98:da:65:75:cb:4c:
         15:6e:c6:33:64:87:e2:c3:cc:08:31:2d:ba:2d:4f:21:d0:de:
         14:29:d2:2d:7e:de:df:9c:f5:db:0a:37:73:bd:e1:55:96:8c:
         ec:fe:2b:29:b8:d7:96:bd:51:7e:ea:19:22:e0:83:21:f8:cc:
         5a:a9:07:7c:a0:40:f4:dc:bf:e6:81:56:84:7a:a1:c4:9f:0f:
         56:fe:a4:86:94:a3:77:69:63:c7:14:a9:c8:10:1d:7b:2b:11:
         c3:3c:74:63:0d:c7:b2:c7:be:cb:8c:9c:56:e0:0d:ed:85:99:
         9f:8b:50:48:3e:32:3d:83:75:2b:4d:ac:3f:6c:bd:4c:64:28:
         c1:86:82:e0:86:64:0b:3d:d0:b3:7f:8a:99:06:92:60:f3:13:
         f1:bf:fd:09:16:05:44:3c:f8:41:fd:c9:71:8f:29:49:e9:cc:
         e4:44:3c:c8:09:fe:9f:15:99:53:d8:68:89:af:6b:49:e5:0b:
         b1:b1:1c:7b:99:c3:d7:9e:7d:15:57:7d:5e:fb:77:be:e5:b3:
         24:63:57:26:2e:48:c2:ec:25:7a:f1:ee:0a:c9:c0:d6:3a:72:
         91:09:06:82:eb:9a:2d:4a:13:d4:66:54:2e:d9:1b:33:ca:cd:
         78:a7:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:44:39 2026 by rpki-client