Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa
File:                     D6883996DABE11EAB12A5209C4F9AE02.roa (raw, json)
Hash identifier:          zBlokYSAqztcyso1tQzNpvjPasNfqNMnXVvr4E7ZFzc=
Subject key identifier:   2B:A6:23:56:A7:C5:89:98:C3:87:74:FD:FC:EB:98:A1:44:92:35:94
Certificate issuer:       /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial:       08F8
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 21:40:45 +0000
ROA not before:           Fri 31 Jul 2026 21:40:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132435
IP address blocks:        103.234.100.0/22 maxlen: 22
                          103.234.100.0/24 maxlen: 24
                          103.234.101.0/24 maxlen: 24
                          103.234.102.0/24 maxlen: 24
                          103.234.103.0/24 maxlen: 24
                          2401:d740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
                          rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
        Validity
            Not Before: Jul 31 21:40:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d165d-f47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:81:f2:10:d8:81:9f:4a:cb:ed:01:2c:2b:
                    f8:16:63:7d:a7:a2:39:88:b3:5c:3c:19:3a:4c:7e:
                    f4:aa:68:26:a3:9b:13:d5:00:44:8e:80:db:91:79:
                    07:0f:8f:d4:71:cc:2c:9b:57:c5:a4:76:83:87:29:
                    f8:bb:e7:c1:48:5f:89:29:28:3d:1e:bd:1c:05:c3:
                    ea:3d:b3:3f:91:0e:c3:90:c6:29:ba:12:46:33:8a:
                    8b:da:67:cf:3f:15:47:2f:de:63:32:73:b1:2e:a5:
                    31:52:7a:8a:01:d0:8c:6b:68:35:25:fd:80:99:1f:
                    50:1a:e3:5b:3f:ee:56:72:59:5f:16:18:bd:32:01:
                    13:96:bd:32:41:9f:99:12:e9:04:05:47:6a:84:34:
                    88:b2:0a:75:7a:de:4b:46:c6:9c:e7:be:ff:62:ad:
                    46:52:e1:03:f4:27:72:ef:48:bd:22:de:30:9a:71:
                    31:b8:95:17:bc:5d:83:24:c9:40:48:9e:97:5c:f8:
                    14:9b:ce:de:f1:0d:bf:a0:dd:bc:bf:78:7f:07:dd:
                    77:04:ee:87:4b:9a:b8:14:62:3e:fc:f5:c1:87:22:
                    da:99:73:eb:3e:2a:8a:10:51:a4:0e:d4:6f:3b:b0:
                    a6:9f:f8:20:2b:5d:34:12:e4:55:4c:77:37:15:aa:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:23:56:A7:C5:89:98:C3:87:74:FD:FC:EB:98:A1:44:92:35:94
            X509v3 Authority Key Identifier:
                keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.100.0/22
                IPv6:
                  2401:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:72:e0:51:a5:97:93:72:22:48:f7:76:0f:f3:f4:77:3b:
         31:cd:71:c8:dd:d3:b9:62:87:ab:18:ef:81:18:aa:85:db:52:
         74:ce:d8:c7:16:3e:b8:8d:9a:8e:0a:a6:c8:ae:e7:50:48:aa:
         a0:c8:36:25:b9:c2:d0:3f:32:b4:ce:be:14:a0:c1:4b:ed:4b:
         62:0f:b7:3c:1b:b6:07:c1:3a:ef:1d:cf:70:b5:6c:93:3e:64:
         01:e6:60:4c:7e:25:ab:ab:3f:59:b8:ad:16:40:13:39:ce:78:
         5d:88:9d:f0:79:93:2e:b9:b6:b3:31:e8:b0:9f:df:a5:fc:88:
         5c:ca:fd:f5:db:11:0e:5d:56:14:60:37:45:ec:6d:76:82:ee:
         d9:d8:9a:41:32:ba:25:a7:54:8b:76:e9:9f:3b:cb:92:71:2e:
         b2:0e:da:73:1d:d0:63:86:16:e6:db:e8:7f:05:68:d4:6f:8c:
         4c:a3:f6:9b:2d:ed:33:1e:96:0b:06:6c:9c:64:16:7c:af:bb:
         a1:80:21:01:d5:29:f5:97:f4:17:f2:ee:c9:bf:a0:50:ad:a9:
         57:f6:db:3b:62:8f:96:95:2e:7c:d3:34:6a:24:01:6e:f4:5b:
         62:3a:60:18:f1:03:56:0c:84:63:8b:7c:07:1b:73:6f:fd:1f:
         5f:4d:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:39 2026 by rpki-client