Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
File:                     195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json)
Hash identifier:          qzDfbZSfFhOLoupNrNu4vdZzMPtBKuYLgBCe+Y1In4Q=
Subject key identifier:   62:C6:12:8F:07:33:47:C3:FD:58:B1:C8:C9:66:D5:9F:B1:3B:5F:10
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       036C
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 02:27:35 +0000
ROA not before:           Sat 11 Jul 2026 02:27:35 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        103.188.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Jul 11 02:27:35 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51aa17-68cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:9c:c7:61:f1:00:91:de:42:96:ad:b9:16:
                    86:0d:26:08:c5:c9:57:ca:1b:c0:8e:51:0e:4d:4d:
                    22:4e:4f:ba:d9:a5:34:f4:4f:bc:92:d2:08:85:68:
                    8f:51:97:de:b7:11:2b:55:24:2a:e8:66:e3:ac:c7:
                    a8:b0:99:6c:bf:80:1b:a5:99:4b:80:96:a1:61:13:
                    54:2a:b2:c6:2d:58:a7:c2:69:89:49:83:ce:a3:ef:
                    94:d3:d8:78:21:7a:57:55:02:33:0a:bc:56:f1:40:
                    aa:17:5c:43:6d:3e:e6:74:8d:03:b8:81:bf:36:46:
                    da:0f:c3:3b:df:c8:b9:58:d3:a2:ac:e2:cd:46:d8:
                    4b:cf:be:c8:10:30:a2:61:e6:25:e7:e3:bd:99:86:
                    91:f7:1e:5a:2f:3f:8c:61:fa:cc:48:50:1d:0a:33:
                    4b:c2:4a:5a:14:ac:06:07:51:c4:15:94:51:c6:4d:
                    77:19:e0:37:18:82:11:05:9a:85:36:c1:c8:68:af:
                    9b:4b:be:21:f9:f7:74:da:51:af:88:86:a8:b3:5d:
                    bd:86:09:c6:67:4d:e6:ef:f3:55:23:ec:b1:92:09:
                    20:33:51:56:fc:4b:9f:f0:36:f8:fb:d0:8d:d8:4e:
                    4a:1d:bc:53:d5:8e:4c:00:f3:84:0d:3b:0a:f0:fd:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:12:8F:07:33:47:C3:FD:58:B1:C8:C9:66:D5:9F:B1:3B:5F:10
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:bf:84:af:17:96:c2:5a:07:25:a4:01:45:c1:12:53:4d:
         df:6f:f2:c4:bf:dc:36:00:22:5c:42:c8:66:0d:92:93:65:29:
         81:12:7b:16:5f:d4:58:73:70:f3:b7:f1:61:8c:9d:e0:d4:db:
         8f:c4:be:ef:30:e7:2f:c7:60:c3:a4:29:b8:1e:d1:fe:a8:51:
         c0:4a:d7:66:83:7e:5a:f4:b4:8e:4b:77:86:1a:ca:1d:8a:bd:
         80:1b:35:63:de:85:78:05:74:77:af:1a:c5:36:d7:2d:87:93:
         d7:80:5c:fa:a8:5e:aa:23:0c:83:c5:33:0a:42:1b:95:c4:8e:
         47:48:6d:6f:2c:d3:f9:58:08:5d:c6:76:2e:47:65:a5:40:62:
         50:99:f1:01:87:5f:79:6f:f8:b6:e0:11:35:47:ec:53:8b:b0:
         f3:84:9f:dc:3d:a3:e9:aa:a2:bc:38:07:38:3f:fa:13:39:68:
         a6:57:1c:d9:11:6d:d2:48:d9:bd:ac:cd:0e:64:f7:89:49:e1:
         ee:d3:a7:8a:10:7b:40:4f:78:1e:c5:35:af:ce:98:17:33:1e:
         34:be:e9:77:06:6e:6c:ef:2a:b3:f5:f1:2e:5f:07:0a:58:ee:
         0d:ab:b5:7d:9f:d8:0c:e2:b2:bc:ac:4c:ca:76:c9:69:79:74:
         a1:ad:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:43 2026 by rpki-client