Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
File:                     8E49B7320E8C11EDAB2A8680C4F9AE02.roa (raw, json)
Hash identifier:          Mx3FH0lDhE2smjG0gqqmwZAQBZQ+RdIEcJkqwEOogSc=
Subject key identifier:   2B:56:3E:B6:6D:28:93:AE:A6:FF:38:23:08:39:E6:67:BC:82:D7:C3
Certificate issuer:       /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
Certificate serial:       0BD9
Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 19:38:59 +0000
ROA not before:           Fri 31 Jul 2026 19:38:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140540
IP address blocks:        103.148.32.0/24 maxlen: 24
                          103.148.32.0/25 maxlen: 25
                          103.148.32.128/27 maxlen: 27
                          103.148.32.160/27 maxlen: 27
                          103.148.32.192/27 maxlen: 27
                          103.148.32.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl
                          rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3033 (0xbd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166638, serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
        Validity
            Not Before: Jul 31 19:38:59 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6cf9d3-b586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:62:75:dd:79:22:c7:71:6a:91:ed:e7:36:
                    e3:00:74:92:23:14:23:68:58:9d:07:f1:5e:28:1d:
                    3f:4a:74:15:2c:7a:55:c9:14:a5:3f:6b:c0:6d:42:
                    10:9e:ef:4a:47:b8:ca:f4:a1:93:80:f2:48:19:cb:
                    2d:6d:37:3a:66:ef:fe:23:10:3f:94:04:96:5f:c7:
                    27:87:e7:c1:a7:d0:75:bd:f1:96:a8:69:ec:ef:5f:
                    aa:d6:8f:54:be:46:22:e3:f6:e4:5b:23:be:0d:4f:
                    ae:5b:b2:33:b4:db:92:e9:c8:be:07:b6:c3:e5:f6:
                    c4:c1:aa:fe:73:6d:e7:97:ab:64:bf:2e:5c:39:9d:
                    dc:39:f9:b8:24:78:6d:31:6f:02:29:79:87:e5:11:
                    57:dd:41:2f:5c:1c:45:32:ab:ae:34:c6:f8:8e:9e:
                    12:ee:a9:85:74:c3:17:94:61:a6:fd:01:3f:fb:f4:
                    c4:98:11:50:61:e1:48:9d:ab:63:54:93:05:29:56:
                    57:93:f0:ad:a3:e8:d1:b6:ee:50:f1:f4:86:09:86:
                    72:21:5e:ce:a3:57:b3:59:23:de:6d:2c:c3:08:c4:
                    88:9b:ec:b0:24:e5:ff:c3:47:64:87:46:7a:0e:b7:
                    3e:2f:06:d8:a0:a1:05:31:7a:5a:61:06:01:06:82:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:56:3E:B6:6D:28:93:AE:A6:FF:38:23:08:39:E6:67:BC:82:D7:C3
            X509v3 Authority Key Identifier:
                keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/8E49B7320E8C11EDAB2A8680C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:db:a3:98:c8:cf:b7:cd:64:5f:f8:80:7b:70:a6:ae:35:97:
         ee:9e:64:8c:22:b4:95:c5:5b:3b:79:8e:e5:1a:ef:fa:54:3e:
         b8:e7:a4:a2:06:35:d5:d4:df:89:f3:93:19:a0:3d:32:0f:20:
         67:4b:29:0e:b3:06:85:3b:c2:94:de:12:58:93:bb:11:b1:fe:
         ba:a6:0a:a0:be:b3:9c:80:28:af:2a:5e:d5:ab:1e:12:ab:03:
         05:94:50:83:67:bc:05:da:45:10:31:57:4c:f8:f6:6c:5b:66:
         f8:6f:cc:d7:82:fe:27:0a:8a:65:59:10:89:cc:7d:8c:b8:c3:
         59:09:64:0b:80:a0:b9:58:ed:25:ee:48:0c:56:1c:30:2b:c6:
         43:5d:5f:bb:a4:43:ef:7e:10:5c:85:16:8e:38:29:4f:0c:77:
         57:56:3f:1b:27:09:ff:4d:39:4e:f8:6b:22:68:ca:f7:94:88:
         19:28:e8:5a:03:f4:0b:b2:cb:b2:86:dd:3c:4d:cc:61:f8:ba:
         73:7f:cd:0b:43:db:ce:12:01:49:6f:a0:fd:8f:59:6a:3b:69:
         ab:19:fb:26:5b:c0:32:48:41:e2:06:80:39:cc:f6:14:de:39:
         59:91:2a:1d:a2:66:fd:fa:57:96:c9:2e:02:ac:09:31:e5:39:
         06:b6:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:52 2026 by rpki-client