Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa
File:                     2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa (raw, json)
Hash identifier:          mThaE6azTaJlK8m+JlQB8urfdWJIwLDnL6muVe85O0c=
Subject key identifier:   C0:5D:F4:69:96:41:AF:F6:29:4C:46:23:8F:70:A6:8B:20:F2:0D:B9
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       0288
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 04:29:06 +0000
ROA not before:           Wed 01 Jul 2026 04:29:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.92.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jul  1 04:29:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a449791-3bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:be:ac:c6:eb:69:56:40:6c:38:e9:a0:46:
                    08:42:12:81:5a:fd:b6:37:60:60:00:48:f7:9f:cb:
                    06:42:02:59:e5:5d:d3:7a:64:df:1b:5c:cc:8f:5b:
                    f4:88:1b:ad:fe:12:1b:d6:35:61:1c:1b:13:ca:b3:
                    e9:da:13:28:d8:86:27:44:47:c5:7d:8d:00:c0:de:
                    8b:f0:dc:5e:9f:79:d1:95:c1:ce:cb:f7:ab:86:1c:
                    7c:d7:77:d4:f2:ea:43:96:ba:d8:5b:f8:8d:0c:b4:
                    a1:a2:3a:f9:1f:c1:84:7d:0a:15:60:95:a7:70:13:
                    11:45:2b:69:12:cc:b2:bd:31:e5:03:14:43:b7:4d:
                    28:69:01:7d:c0:44:67:d6:7a:32:20:79:16:0b:12:
                    1d:36:f3:ff:ba:9a:a1:19:f6:1d:20:bb:66:44:15:
                    60:19:6a:7f:59:e8:72:6b:d3:c8:78:79:68:29:64:
                    8a:9b:63:98:3d:51:a6:c5:66:17:3c:69:6c:e6:15:
                    73:de:a7:a9:b0:b4:f5:4d:c3:13:1c:16:c6:59:94:
                    35:f5:30:3e:03:55:22:89:8f:bc:e9:d4:2e:bd:0a:
                    6a:a9:34:cc:18:c3:72:d0:6c:70:ba:99:09:5e:0b:
                    d2:05:e7:bd:05:2c:cd:96:7d:00:09:a3:d7:69:a4:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5D:F4:69:96:41:AF:F6:29:4C:46:23:8F:70:A6:8B:20:F2:0D:B9
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:68:9a:77:e9:a3:d0:33:46:b6:56:04:19:7f:d3:4e:bb:
         21:1e:b0:53:e7:19:13:b6:54:d7:d5:18:28:81:89:68:e3:d3:
         d6:c5:a8:1f:bc:18:19:2c:dd:9c:30:07:58:8d:84:15:2e:06:
         ca:38:3f:be:5a:b8:a1:1d:9e:e7:ef:73:b6:58:21:5f:20:09:
         75:fe:c8:34:57:de:6c:90:45:05:bc:c8:51:70:8f:d6:b0:20:
         a0:af:e4:27:15:14:ea:65:18:7d:30:90:aa:a6:8d:39:e5:19:
         1a:cc:fd:8e:07:b4:33:e8:00:f0:6d:95:e4:21:a6:98:ba:99:
         87:aa:18:c3:3c:81:77:47:da:fe:60:88:e3:9d:82:1d:7d:80:
         5e:36:0f:f6:cd:40:55:74:25:8f:fc:e8:70:2f:2e:0f:11:94:
         ff:c2:0f:50:c5:84:1b:b5:74:aa:dc:26:9c:71:95:b1:7f:52:
         60:de:26:74:64:bb:34:d6:78:66:50:94:65:8b:65:14:8a:36:
         db:78:6c:c5:b6:08:6d:b2:7b:ef:1e:ba:4b:83:b7:86:0e:ff:
         9e:2d:cd:dc:a2:b7:7b:f8:31:e8:07:65:46:76:7f:4b:c2:30:
         73:6b:09:f3:86:58:24:2a:65:d9:ff:8b:b6:10:d9:d5:92:1a:
         85:50:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 20:52:02 2026 by rpki-client