Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/4D94E0D6545211E6A367BC68C4F9AE02.roa
File:                     4D94E0D6545211E6A367BC68C4F9AE02.roa (raw, json)
Hash identifier:          /bT1hL6j0BNPqPFpwRAyuvsZxeDtNAbVDJWNalsZBQE=
Subject key identifier:   EF:27:B5:7A:5C:24:31:C1:F1:05:75:5B:FE:C6:AA:73:B7:B2:39:B3
Certificate issuer:       /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial:       1FF0
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/4D94E0D6545211E6A367BC68C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 16:19:00 +0000
ROA not before:           Tue 02 Jun 2026 16:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135290
IP address blocks:        103.212.180.0/22 maxlen: 22
                          103.212.180.0/24 maxlen: 24
                          103.212.181.0/24 maxlen: 24
                          103.212.182.0/24 maxlen: 24
                          103.212.183.0/24 maxlen: 24
                          2404:b680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
                          rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8176 (0x1ff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
        Validity
            Not Before: Jun  2 16:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1f0273-d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:8d:ca:da:5f:d2:2c:7e:dc:5e:29:64:f6:
                    f1:93:aa:be:a9:0c:2d:01:6f:f6:67:db:be:73:e4:
                    e4:9a:e0:f5:40:49:f5:e1:44:4a:5f:39:bb:13:25:
                    97:6c:15:05:75:58:88:98:0b:38:a2:66:28:55:63:
                    e2:9b:fd:55:a5:9e:90:18:f0:33:e6:cc:92:3b:3b:
                    dd:bb:ec:06:f8:c9:8a:19:57:7d:a8:14:75:a5:e9:
                    74:c0:fc:93:bb:01:69:f7:27:fd:25:0d:8c:7f:cc:
                    b9:63:5a:6b:db:d3:74:fd:40:41:8b:0b:7c:f0:cf:
                    2f:ec:ec:ee:4d:0e:ed:c6:35:ae:f5:70:4c:2f:cc:
                    e8:74:f7:4d:2a:2c:d9:55:dc:f0:7a:ae:94:50:6c:
                    be:39:0a:a9:cd:6e:3b:37:d5:84:41:4f:56:91:2e:
                    e3:19:d2:8b:db:2d:ab:8a:ee:c0:f8:90:bf:7b:e8:
                    34:10:c3:5d:c9:ba:2a:b6:85:6a:e3:2b:37:16:df:
                    c0:f4:1a:c9:76:d3:cf:0a:31:37:e4:06:45:67:2a:
                    50:11:06:b2:23:bf:b8:c3:e4:98:67:cb:99:56:91:
                    95:24:89:02:71:84:62:48:f3:a7:20:6c:68:56:64:
                    d2:c1:c6:e0:e1:a5:8e:bf:83:2c:6d:c3:55:4e:f3:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:B5:7A:5C:24:31:C1:F1:05:75:5B:FE:C6:AA:73:B7:B2:39:B3
            X509v3 Authority Key Identifier:
                keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/4D94E0D6545211E6A367BC68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.180.0/22
                IPv6:
                  2404:b680::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:e0:31:59:40:b8:98:eb:f4:a7:d5:a7:47:7f:16:5c:d8:
         45:0a:59:87:c7:92:56:59:cb:6c:62:a9:5c:1b:d2:ee:51:b6:
         0f:65:07:20:c0:41:37:ca:47:15:4a:50:4b:75:56:f0:c2:80:
         6d:f3:ae:33:6a:b5:35:69:2b:07:f3:d0:33:14:64:59:bb:ad:
         2d:bb:6b:9f:e2:77:76:ff:f4:8b:70:fa:eb:88:7d:81:b6:7b:
         38:44:09:6a:be:7e:1f:b9:44:bb:8b:ef:f2:0a:2d:57:94:80:
         69:aa:62:06:36:5b:b8:0d:b4:ad:2c:0d:d0:26:e7:62:3a:9f:
         bb:a8:50:d5:48:3a:b5:e1:ab:91:f9:2f:84:7d:10:b1:f3:06:
         d4:71:13:6e:5f:c8:36:ac:75:4c:32:a0:fd:ac:52:4c:d2:81:
         01:f4:9f:97:7e:22:e7:f5:66:8c:3a:2d:d1:04:fe:f1:e2:ee:
         d0:26:e7:b6:9b:81:a7:ba:58:e9:5d:7d:6a:ae:e8:1d:cc:16:
         e9:75:a3:74:f9:e7:12:75:8e:10:8c:ce:c0:ae:75:95:ce:73:
         0a:92:3c:c5:d1:cd:91:9c:b8:3c:f0:c5:88:a7:ba:7f:69:fb:
         56:a4:82:0f:3e:e6:95:27:b7:b6:d5:00:27:79:74:08:35:54:
         7f:43:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:35:10 2026 by rpki-client