Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/8302EB5A7B7511F1BA0904A763A30FBC.roa
File:                     8302EB5A7B7511F1BA0904A763A30FBC.roa (raw, json)
Hash identifier:          LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=
Subject key identifier:   00:B5:D8:18:7A:A0:BD:04:ED:73:23:00:0C:20:0E:A6:7F:1C:C7:E6
Certificate issuer:       /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial:       135A
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/8302EB5A7B7511F1BA0904A763A30FBC.roa
Signing time:             Thu 09 Jul 2026 09:06:47 +0000
ROA not before:           Thu 09 Jul 2026 09:06:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141013
IP address blocks:        103.125.244.0/24 maxlen: 24
                          116.89.245.0/24 maxlen: 24
                          2401:fdc0:10::/44 maxlen: 44
                          2401:fdc0:20::/44 maxlen: 44
                          2401:fdc0:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 09:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4954 (0x135a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
        Validity
            Not Before: Jul  9 09:06:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a4f64a6-ab66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:03:c1:60:12:24:82:21:87:51:11:b4:08:
                    19:3b:1f:0a:0a:60:47:83:42:aa:d8:09:7f:2f:cc:
                    44:3e:94:ec:48:e9:01:31:67:8e:32:8d:14:55:58:
                    ec:e7:33:ac:7c:58:cd:54:c9:8b:bd:2f:42:5a:82:
                    c9:47:38:b6:21:74:3b:91:f1:50:18:6c:4f:53:41:
                    b4:e6:6c:68:56:eb:bc:0f:03:23:4d:b1:2e:ed:16:
                    1b:6b:2d:bd:59:f8:99:e6:79:d4:53:37:c4:4e:60:
                    41:c9:54:f5:0c:9e:a3:d7:cc:c9:97:41:db:c9:e4:
                    c6:42:51:b7:cc:64:12:74:fc:c7:36:c5:ff:18:42:
                    ba:fb:47:8c:09:95:de:57:3b:74:92:f8:4f:3a:2c:
                    f3:81:41:67:ba:aa:1f:64:4f:97:b5:91:1c:84:a1:
                    61:60:82:d3:eb:65:e1:85:dd:8f:87:d5:f0:19:ff:
                    0e:4e:4c:6b:a2:f9:5b:31:ca:d5:a2:93:2e:a6:3a:
                    3b:88:d2:d8:e1:7f:1b:04:ef:e2:bd:e9:c6:f2:c0:
                    44:a3:f6:8d:bf:ca:78:d5:b4:ab:40:20:30:f5:48:
                    52:f0:ad:43:a2:7a:65:2d:74:7a:0b:06:8b:2f:8f:
                    c6:46:f2:92:c9:ca:21:92:f4:35:e3:32:ef:3e:94:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B5:D8:18:7A:A0:BD:04:ED:73:23:00:0C:20:0E:A6:7F:1C:C7:E6
            X509v3 Authority Key Identifier:
                keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/8302EB5A7B7511F1BA0904A763A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.244.0/24
                  116.89.245.0/24
                IPv6:
                  2401:fdc0:10::-2401:fdc0:3f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:02:b8:cb:f1:a8:68:dc:44:6e:27:17:26:a8:36:01:29:
         20:aa:4e:24:69:7e:b3:7e:17:2a:b3:02:16:8e:10:bb:73:98:
         ac:e0:d2:b2:e8:ae:61:80:df:cd:48:02:d4:c8:a2:a2:84:4a:
         b5:ae:06:08:7e:dd:d8:bf:4e:7d:e6:c0:95:ce:f4:f6:bc:c0:
         16:07:63:3d:c0:d3:72:da:2c:81:8b:bd:f3:e2:6b:7b:57:18:
         da:1c:dd:9f:0b:c5:54:ce:b0:a5:b8:71:da:06:34:28:2c:15:
         c9:30:35:6d:b1:99:b4:6c:45:eb:71:d8:7b:01:a8:44:87:72:
         af:de:74:ea:ec:35:9d:bd:43:75:37:61:11:0a:48:78:7c:b6:
         8a:d1:de:77:bf:37:79:66:15:34:80:5f:4a:04:da:51:1e:a4:
         22:36:3f:28:12:58:3c:e8:56:9b:e8:15:7e:93:26:12:16:1d:
         b4:fa:7b:a2:cd:d5:dc:c4:7b:e5:00:d2:ba:7f:a6:09:e1:58:
         33:74:24:dc:21:21:99:b3:c7:b7:57:c3:ad:18:77:e4:65:3f:
         b2:df:3e:3a:26:6f:c0:66:61:22:42:44:22:73:36:b2:e6:9c:
         c9:6b:f4:d2:d4:ae:d8:bf:fb:eb:c4:b9:03:3f:c6:ec:02:15:
         18:b7:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 17:29:48 2026 by rpki-client