Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa
File:                     7C5A543CBCB711F08806E909C4F9AE02.roa (raw, json)
Hash identifier:          Otxavzn9wqai7bz3j2wOAOhJHM7zPHSQjLLYM4IbP1Q=
Subject key identifier:   1F:BA:8B:21:56:4C:09:87:15:13:49:59:F7:23:24:27:E1:59:8F:38
Certificate issuer:       /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial:       0139
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 07:32:55 +0000
ROA not before:           Fri 03 Jul 2026 07:32:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     401696
IP address blocks:        103.212.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
                          rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
        Validity
            Not Before: Jul  3 07:32:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4765a7-897f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:73:75:7d:d7:a5:c0:d7:ed:ac:48:4e:bd:
                    86:be:1e:09:6b:26:30:96:32:08:e6:e1:b3:30:e9:
                    9b:ed:48:95:58:7e:09:9e:8b:2a:8c:29:5a:41:60:
                    7d:5d:46:63:c2:17:7d:12:75:7a:32:86:1a:20:7c:
                    80:e5:0e:42:53:1d:5b:d8:ca:c6:3f:fd:69:07:ca:
                    1a:00:03:eb:f8:ef:bc:72:7f:43:1e:65:18:10:06:
                    4b:3d:a6:a8:b0:b8:16:9e:9b:62:33:07:3b:a5:bb:
                    47:96:e6:68:33:e3:92:d5:f1:09:58:43:e1:48:8b:
                    bf:27:0f:cd:a6:1c:65:4c:09:52:10:0a:93:9a:9a:
                    24:2e:59:ab:05:9d:b5:5b:f1:35:e1:b0:ff:be:82:
                    5a:a0:54:ca:9b:6a:f7:32:3a:af:8a:97:c1:eb:8f:
                    32:59:f1:44:99:87:7a:c4:b8:bb:e3:c5:97:d8:f1:
                    12:80:e0:04:77:bd:09:2f:60:91:d4:24:3d:ab:71:
                    2d:bd:2e:79:dc:67:1e:f6:06:89:e1:e0:47:d3:22:
                    30:55:8e:bf:07:ad:bc:e2:8d:df:61:25:73:b9:e4:
                    7b:49:2c:26:bd:dc:ce:f5:1a:3e:cb:9f:6b:67:e3:
                    23:6f:46:7b:ca:d4:07:5c:d3:d2:2c:de:c5:cd:08:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:8B:21:56:4C:09:87:15:13:49:59:F7:23:24:27:E1:59:8F:38
            X509v3 Authority Key Identifier:
                keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:56:d0:6f:0b:e8:ed:cb:eb:db:6d:94:74:69:47:80:da:0f:
         e5:49:29:58:30:75:13:85:81:c1:54:86:a8:0c:9c:aa:1d:2c:
         11:18:67:d2:be:66:9f:c9:1c:29:8c:91:08:0f:83:d8:f2:d3:
         66:96:59:db:37:59:8b:a2:41:ae:cd:37:6c:a7:30:40:a7:30:
         f3:0c:b9:d5:b7:e2:f5:aa:94:5d:2d:0f:69:36:5f:7f:9f:03:
         11:98:fb:9e:34:f5:48:23:a6:a7:7b:3e:08:14:e4:c7:a4:9c:
         ba:a3:85:3d:9d:eb:55:e6:b8:46:88:4e:36:ed:33:9c:11:fa:
         13:5b:8a:ec:e2:87:c5:48:fc:7f:6e:50:15:42:6b:ad:f8:df:
         33:18:80:7f:6e:cc:a4:99:1a:08:4f:0f:a0:b6:83:b6:a4:bc:
         1a:7d:a1:ef:23:4a:be:e0:f4:b9:18:d4:d1:35:e8:af:db:2b:
         4d:79:01:db:40:53:c6:8c:3c:50:86:c1:f0:2f:d6:9e:31:18:
         62:f6:66:f0:2b:a3:d4:db:86:f0:7e:48:8d:bc:38:50:e3:4f:
         94:b5:74:eb:51:a9:1a:8f:2a:1c:13:b1:e7:d6:17:73:86:a7:
         96:fd:4b:74:34:e5:49:59:a2:31:62:d5:fd:04:35:eb:28:0e:
         6f:05:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:58 2026 by rpki-client