Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2E8444BC742B11F180F80ED362A30FBC.roa
File:                     2E8444BC742B11F180F80ED362A30FBC.roa (raw, json)
Hash identifier:          ZrWUPKe3Mej22hm056d7Ja0t9qzU9I3SwMSuTI+ic6U=
Subject key identifier:   8E:14:68:54:BA:10:2E:50:63:E5:DD:BC:0B:6A:DA:2D:FF:91:15:42
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       0287
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2E8444BC742B11F180F80ED362A30FBC.roa
Signing time:             Wed 01 Jul 2026 04:29:04 +0000
ROA not before:           Wed 01 Jul 2026 04:29:04 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     215748
IP address blocks:        103.92.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jul  1 04:29:04 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44978f-dc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:ad:7d:c0:68:df:b9:0a:fd:b3:0b:0e:8b:
                    71:f2:9e:b8:37:79:a6:59:84:26:47:76:82:f6:97:
                    f9:c3:f0:1f:58:c2:6b:4d:9f:bc:ff:07:4d:84:c8:
                    df:48:3b:c9:d7:51:8d:e5:a4:2f:81:0e:55:2d:1c:
                    30:ab:c4:f5:68:50:02:c3:ba:23:20:e0:a0:90:af:
                    23:31:86:6d:41:3d:6d:b2:68:c7:4f:4c:1a:71:e3:
                    ac:74:d3:f6:73:de:8b:c2:ca:fd:61:81:a0:5e:83:
                    ce:66:df:61:a7:90:0a:45:66:06:28:25:eb:86:b5:
                    65:b6:04:48:59:df:fa:b6:1f:80:84:34:8c:97:11:
                    9f:eb:66:00:df:6b:ba:3a:cc:2c:cc:cd:2a:17:97:
                    ba:99:a2:a5:15:d6:96:58:8a:5d:6b:97:4a:3d:4f:
                    8c:1f:30:73:23:ce:b5:59:a7:ff:c4:b1:66:98:93:
                    fd:f3:d3:6f:6a:05:f7:be:9f:e7:e9:49:e0:b0:f2:
                    93:87:d4:5c:65:5f:5f:9e:92:75:dc:8b:12:d1:af:
                    bf:10:8f:cf:8a:e5:8d:9f:2a:1f:31:4c:13:ea:7e:
                    7a:75:33:6e:e3:c6:6a:ed:71:97:82:2a:73:f7:73:
                    f0:24:c0:5f:82:e9:e9:9b:1b:95:8b:41:da:52:3d:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:68:54:BA:10:2E:50:63:E5:DD:BC:0B:6A:DA:2D:FF:91:15:42
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2E8444BC742B11F180F80ED362A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:da:38:84:2b:46:d1:22:d9:ea:18:96:ea:76:18:b8:8a:
         f6:1b:67:05:e4:1c:b4:3c:d8:66:06:17:c0:ce:a2:04:9c:e2:
         b3:ac:e4:cb:c1:8b:85:3e:a1:15:03:5a:37:3f:e9:d8:ea:6a:
         62:50:34:ef:03:89:f4:3c:57:55:63:46:00:02:fa:a5:3a:53:
         69:a2:41:d3:cb:fb:60:87:42:74:ec:95:ae:01:eb:8d:c5:8d:
         d6:31:84:9e:87:75:ea:21:48:d8:6b:c1:58:eb:21:3f:1e:82:
         d9:20:60:db:60:29:a1:5c:31:9c:f9:0d:35:96:4d:03:6e:6a:
         8e:78:89:bb:4b:d3:d1:11:a2:6c:30:c1:b2:a3:e3:e8:c1:da:
         bd:20:d4:c8:d4:34:81:9d:c9:39:9f:59:a7:4b:16:38:ed:57:
         a3:6b:fe:95:49:d7:19:00:36:eb:03:b6:68:03:a6:05:1e:09:
         f2:d7:08:dc:10:25:05:fa:c6:67:d4:92:5e:38:a9:5e:ed:a2:
         67:53:eb:df:fc:81:e3:98:43:46:8c:a6:33:4b:97:39:6d:50:
         16:5a:1c:6b:5b:5b:42:80:17:ec:50:d2:b9:04:72:71:66:59:
         d3:e9:5c:28:26:c2:9d:47:fe:80:02:af:32:fd:cc:62:d7:6a:
         a9:d5:36:df
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4
QzRGRjk4OTUwHhcNMjYwNzAxMDQyOTA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0OTc4Zi1kYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyN2tfcBo37kK/bMLDotx8p64N3mmWYQmR3aC9pf5w/AfWMJrTZ+8/wdNhMjf
SDvJ11GN5aQvgQ5VLRwwq8T1aFACw7ojIOCgkK8jMYZtQT1tsmjHT0waceOsdNP2
c96Lwsr9YYGgXoPOZt9hp5AKRWYGKCXrhrVltgRIWd/6th+AhDSMlxGf62YA32u6
OswszM0qF5e6maKlFdaWWIpda5dKPU+MHzBzI861Waf/xLFmmJP989NvagX3vp/n
6UngsPKTh9RcZV9fnpJ13IsS0a+/EI/PiuWNnyofMUwT6n56dTNu48Zq7XGXgipz
93PwJMBfgunpmxuVi0HaUj2y6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI4UaFS6
EC5QY+XdvAtq2i3/kRVCMB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB
NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkxMkYvMEEwNjc5MDgwQTUxMTFFRThENzVCNjZCQzRGOUFFMDIvMkU4NDQ0QkM3
NDJCMTFGMTgwRjgwRUQzNjJBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1yRMA0GCSqGSIb3DQEBCwUAA4IBAQBuPNo4hCtG0SLZ6hiW6nYY
uIr2G2cF5By0PNhmBhfAzqIEnOKzrOTLwYuFPqEVA1o3P+nY6mpiUDTvA4n0PFdV
Y0YAAvqlOlNpokHTy/tgh0J07JWuAeuNxY3WMYSeh3XqIUjYa8FY6yE/HoLZIGDb
YCmhXDGc+Q01lk0DbmqOeIm7S9PREaJsMMGyo+Powdq9INTI1DSBnck5n1mnSxY4
7Veja/6VSdcZADbrA7ZoA6YFHgny1wjcECUF+sZn1JJeOKle7aJnU+vf/IHjmENG
jKYzS5c5bVAWWhxrW1tCgBfsUNK5BHJxZlnT6VwoJsKdR/6AAq8y/cxi12qp1Tbf
-----END CERTIFICATE-----
Generated at Sun Jul 5 20:49:10 2026 by rpki-client