Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa
File:                     E48C805A9A7D11EF99ECF636C4F9AE02.roa (raw, json)
Hash identifier:          7XZE+IKZBRrKqrGr1TDOGvqrZfzsrAMaTV6zeoCdboM=
Subject key identifier:   83:97:66:CA:94:D6:C8:DC:17:A8:0F:0B:90:78:BD:C7:17:48:BE:90
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       149F
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 17:21:25 +0000
ROA not before:           Tue 30 Jun 2026 17:21:25 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        103.116.45.0/24 maxlen: 24
                          103.116.47.0/24 maxlen: 24
                          103.129.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5279 (0x149f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jun 30 17:21:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a43fb15-4968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:a3:e8:8d:a5:86:a3:18:ba:d8:c8:c8:06:
                    8a:07:a4:f8:a9:9f:4f:a9:0b:89:d8:ed:11:d1:64:
                    e7:13:4b:b8:45:12:66:01:eb:ad:da:42:25:b0:83:
                    e0:6e:60:84:8b:66:51:35:0a:6e:62:7e:ad:6f:dc:
                    10:97:03:e5:71:d5:1d:22:c2:26:f8:0f:42:58:11:
                    37:8a:2c:d9:d6:50:69:63:3e:5f:db:9b:75:18:fc:
                    c5:d6:51:85:06:ee:26:2e:c3:25:45:53:64:8f:94:
                    9f:cc:35:98:3e:6b:fc:b5:12:f1:f9:08:91:1e:de:
                    8b:23:45:3e:25:7c:ac:4a:ed:ba:eb:97:67:4d:76:
                    30:23:a5:6e:8f:8f:89:0f:72:1c:96:87:76:2d:bf:
                    17:d2:a9:75:20:a8:d7:21:d9:5d:55:ad:15:cb:f4:
                    6b:20:d6:92:fa:69:63:86:3e:88:40:29:48:79:f0:
                    fd:03:55:ea:c1:03:17:78:3b:e7:dc:e5:ed:39:8d:
                    1d:af:89:99:3b:09:e7:09:9a:07:7b:c1:68:11:2e:
                    3a:bc:47:cd:e3:80:38:a4:f5:a7:d2:07:21:3a:a6:
                    df:81:b9:5a:e8:07:26:dc:54:62:58:af:a4:8e:52:
                    23:67:c1:b8:3c:37:e9:4c:5f:58:17:53:89:11:78:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:66:CA:94:D6:C8:DC:17:A8:0F:0B:90:78:BD:C7:17:48:BE:90
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24
                  103.116.47.0/24
                  103.129.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:4a:96:a1:d0:4c:62:d9:e6:88:97:cd:21:06:e5:fd:e9:
         ab:29:38:d4:0c:9b:42:95:11:e5:bb:84:c9:c8:3f:b5:28:bb:
         ce:da:ca:f2:1c:23:45:ab:48:32:89:dc:05:08:be:2f:af:d0:
         a5:0b:7e:c3:ca:31:5a:70:fa:ff:fc:24:36:f5:0a:23:8e:5a:
         0e:70:87:06:d3:ed:db:48:38:8d:40:92:88:ae:70:50:c6:4b:
         9c:f7:62:55:aa:be:a2:dc:40:ee:ec:f3:86:34:02:ca:cc:e3:
         7b:89:b5:ea:11:6a:47:2e:94:a7:1a:20:ab:58:de:fc:72:6e:
         c6:29:c9:98:ca:ea:83:38:1c:79:35:a1:93:15:e9:62:a7:e7:
         53:45:3b:81:73:c1:fe:b9:44:07:7d:97:b3:83:53:67:37:60:
         00:cf:69:c7:8d:1f:51:6a:6e:0f:1b:79:bc:25:d6:37:e1:b7:
         a8:81:f5:5f:80:09:e1:8a:ad:5c:f9:b1:cf:7c:9b:95:9d:86:
         3f:91:7f:4d:3b:2d:e4:cb:f1:38:b2:9b:91:6e:31:82:60:e9:
         6a:75:00:bd:5f:52:65:93:b4:eb:05:ee:52:c5:97:1c:4f:d2:
         a1:51:72:c4:32:d6:f1:44:5c:f5:4a:ef:af:1c:c6:15:83:2a:
         94:19:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:17:15 2026 by rpki-client