Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa
File:                     E4C0040A8C8C11EBB81BA228C4F9AE02.roa (raw, json)
Hash identifier:          Y61Wa0P+shzkpnMlqsX6TttdoSi4Cg9Z5BPs5CO0c6c=
Subject key identifier:   1D:7A:A7:FE:48:02:8C:95:FA:79:3A:2A:B8:9B:49:BA:EE:A3:44:D2
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       07A9
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 21:42:20 +0000
ROA not before:           Wed 12 Aug 2026 21:42:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     1273
IP address blocks:        103.23.192.0/22 maxlen: 22
                          202.89.16.0/21 maxlen: 21
                          202.89.16.0/22 maxlen: 22
                          203.169.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 21:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Aug 12 21:42:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7ce8bc-b981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:a9:5a:b6:dc:e6:83:af:30:7e:03:1c:e3:
                    e1:b5:0b:aa:21:a0:8c:64:1d:c2:b6:0f:cc:ce:74:
                    7d:dc:f6:91:88:64:19:ec:09:75:54:8a:1a:73:c3:
                    c8:6f:76:f3:46:9e:12:49:a4:79:b4:56:80:9c:19:
                    f9:98:81:b1:ff:2a:3c:cd:03:8f:b8:48:76:3b:9e:
                    93:2e:f5:b4:d9:3a:17:68:8c:f9:84:c8:4a:09:b8:
                    8e:42:47:35:01:a4:dc:3e:78:14:bf:a3:16:40:98:
                    16:7d:63:6c:fc:d4:5f:63:7e:57:f9:6a:45:5e:d1:
                    db:15:32:72:5b:e4:d6:99:40:b1:3b:e2:03:89:ea:
                    79:2f:9a:b0:21:ee:74:e2:22:da:49:95:76:05:d2:
                    1c:78:c6:4c:f1:f0:71:a1:80:e3:49:67:d7:e2:b0:
                    e2:b2:a1:8c:96:29:3b:9a:da:7f:f2:28:88:82:21:
                    e8:81:ca:f8:a2:ed:e7:39:bf:ee:25:3a:94:1d:59:
                    7c:c7:3c:41:8b:72:2d:e6:4f:fc:72:da:cc:bf:a6:
                    50:69:0e:74:08:e5:65:93:76:03:15:bf:a2:e3:e3:
                    32:26:4a:33:bd:1a:fe:4a:1b:6f:44:44:a7:23:25:
                    64:1e:3a:24:fa:b9:98:a9:70:3a:87:a2:b1:e7:ad:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7A:A7:FE:48:02:8C:95:FA:79:3A:2A:B8:9B:49:BA:EE:A3:44:D2
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.192.0/22
                  202.89.16.0/21
                  203.169.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:5d:ca:64:83:c3:8e:1c:c9:7b:10:37:c7:7c:bd:f2:c4:
         6a:cf:53:e8:71:66:bb:7e:00:51:db:bb:45:b1:6a:67:4d:d5:
         11:9f:57:b4:f4:d8:3e:59:df:bb:a2:5a:ea:f9:14:53:3d:65:
         e0:4b:07:d1:9e:8f:20:93:da:6d:99:80:b9:af:cc:0e:14:71:
         fb:71:6f:83:3b:37:71:7a:19:f0:85:8d:91:7e:6f:76:4e:2e:
         ad:4c:77:ca:17:7d:cc:00:76:c7:c7:3a:a7:da:3d:8c:27:84:
         91:c5:44:2a:e3:98:2f:19:01:ac:d0:8e:f9:39:ae:fd:98:94:
         57:44:2f:77:a0:cf:7a:60:74:ba:1c:b9:80:d3:e2:c0:7b:b1:
         51:a0:04:1d:02:a1:d1:04:1f:bc:50:ff:79:bf:bd:f2:1a:16:
         f1:f6:02:5b:46:72:9f:14:e9:ab:e9:31:0e:0a:7a:2e:f1:c6:
         77:85:7b:b5:86:2c:71:9d:89:81:f4:b1:fa:fd:a1:92:7d:b8:
         49:8c:a1:a6:ff:7b:a6:56:b3:4d:f3:5f:8c:23:61:2e:85:7a:
         ff:62:b7:a0:a7:b1:b0:82:c0:41:08:cb:da:40:48:95:f7:1a:
         bc:09:a1:b0:21:75:5d:bd:ce:41:e9:d5:42:79:02:55:66:1b:
         ef:d2:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:53 2026 by rpki-client