Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
File:                     E43CFABEB67611ECACB17C42C4F9AE02.roa (raw, json)
Hash identifier:          KdeYGK5nSNomoQ9gr6/vtsnM8bUXWd/KitZB2Il8sHs=
Subject key identifier:   21:4F:F7:B2:E7:2E:C0:B2:28:67:C6:46:51:E8:ED:A1:7C:7B:19:84
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       0A1A
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa
Signing time:             Sun 16 Aug 2026 20:40:07 +0000
ROA not before:           Sun 16 Aug 2026 20:40:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139009
IP address blocks:        103.152.147.0/24 maxlen: 24
                          103.153.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586 (0xa1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Aug 16 20:40:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a822027-fa21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:1d:c3:a9:58:b9:a2:e4:a8:3f:b4:af:5b:
                    a5:5f:fa:f5:8f:aa:28:ad:fb:48:20:e1:e9:13:e3:
                    01:e9:74:1f:39:51:68:45:e5:88:53:64:ac:db:1e:
                    d8:57:7b:db:63:ca:59:cd:fa:06:30:6d:71:df:0d:
                    e0:cd:34:3f:2c:c7:2f:b4:5a:9c:46:6e:56:63:4d:
                    43:16:50:2d:c5:0f:19:8e:4d:cd:fa:a9:40:a8:1b:
                    1d:e9:4c:ea:95:ba:2c:83:91:0b:e2:71:b2:f3:73:
                    a7:29:cb:dc:74:94:6d:08:66:b5:a7:af:eb:5e:1c:
                    86:7f:2b:22:18:88:14:7c:08:69:c1:9c:3b:da:7c:
                    1c:92:59:a5:31:72:03:af:2e:3f:c2:a1:58:55:0a:
                    de:39:38:ec:4f:37:e2:dc:98:79:cb:2f:ee:eb:4d:
                    4b:dd:df:37:f6:f8:60:42:11:cc:e2:ba:14:e3:10:
                    32:74:42:d1:bd:50:26:e2:f3:ae:9c:f4:e1:96:09:
                    8c:0c:a0:ac:ea:aa:b7:22:34:1c:62:86:b0:14:85:
                    94:85:4d:e3:09:7f:5c:ec:e9:63:1e:25:a2:b8:1a:
                    04:05:84:b4:0e:f6:6c:3c:03:45:af:1a:51:7d:66:
                    34:bb:98:1b:78:72:98:78:14:f7:d1:52:0b:6c:12:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:F7:B2:E7:2E:C0:B2:28:67:C6:46:51:E8:ED:A1:7C:7B:19:84
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/E43CFABEB67611ECACB17C42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.147.0/24
                  103.153.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:91:0a:1b:c9:94:8f:cf:fc:f1:f6:c2:40:42:b9:1f:e2:
         18:dd:e8:57:70:0c:07:1e:ca:44:3a:12:1e:e5:56:a0:c3:ae:
         c6:e4:f3:a4:99:e3:63:20:b0:32:8a:2c:4a:c3:e8:c6:7d:be:
         23:7f:32:b2:1e:7f:5a:54:0a:28:c7:57:b2:fd:1a:da:32:5a:
         ca:0e:11:76:22:cb:46:06:e1:97:5d:6a:02:7d:dc:b3:30:db:
         dd:3a:6e:c1:9d:65:0d:a7:cd:c0:0d:d1:c4:c6:2d:fc:ce:be:
         c4:a1:28:b0:36:fc:39:e7:44:4f:84:c4:78:9d:f4:a2:ed:24:
         46:0c:19:56:4a:bf:95:f5:e1:84:08:9a:0f:e9:13:7f:74:2c:
         c1:08:7b:1b:49:11:f5:77:3d:f5:d5:ff:e9:88:86:59:b9:5d:
         2b:b6:4d:0e:7e:e8:22:2e:c1:4d:7c:c9:55:70:f3:b9:e1:74:
         41:5e:ee:bc:19:01:32:42:10:c5:f8:57:0d:1b:36:e3:a2:10:
         51:40:6f:b4:10:84:ab:a0:5d:d7:bd:c1:e7:e1:40:b6:eb:62:
         b2:1e:3d:e3:2d:41:e7:07:bc:26:c6:38:fa:39:69:9a:e0:ff:
         cf:98:12:45:5d:6d:95:12:65:b1:a1:9e:fe:75:af:c0:f5:fc:
         80:40:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:27 2026 by rpki-client