Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/A8A37DCE44A311F1A5A6D795B1833773.roa
File:                     A8A37DCE44A311F1A5A6D795B1833773.roa (raw, json)
Hash identifier:          ib0KxOFCjXjQMDET9+2Xmpzp90tn7a7KE1jjG4RD0SU=
Subject key identifier:   E2:CD:A4:DC:44:80:A5:36:C2:E9:37:83:E0:81:AA:57:C1:67:AD:7A
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03D0
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/A8A37DCE44A311F1A5A6D795B1833773.roa
Signing time:             Tue 18 Aug 2026 02:47:34 +0000
ROA not before:           Tue 18 Aug 2026 02:47:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     202036
IP address blocks:        103.4.100.0/23 maxlen: 24
                          202.155.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 09:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Aug 18 02:47:34 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a83c7c6-cf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:1e:b8:b3:b0:5b:54:00:21:38:40:ae:c2:
                    5b:0b:53:71:28:35:95:d8:c5:75:de:f4:9d:5c:94:
                    d5:01:85:29:7b:1d:96:7d:01:5e:0d:75:6d:6f:fd:
                    ba:a6:f3:03:9b:4c:54:e6:7c:ed:ec:2d:e4:51:b7:
                    b2:e2:bd:86:b7:82:f4:c2:1b:ec:08:19:25:45:6c:
                    67:ad:53:32:a9:62:02:45:98:9d:3f:30:cb:4c:b3:
                    17:27:5b:80:be:94:37:e5:72:15:58:64:11:dc:9e:
                    b8:a6:5a:c0:43:40:74:db:31:c6:bb:18:cf:94:e0:
                    f1:c1:50:38:78:ae:45:d7:30:03:0f:2d:b0:1b:4b:
                    d3:f1:32:0a:2a:dd:84:da:7d:a4:b9:f7:09:1a:36:
                    12:3d:d8:02:85:54:2c:e8:24:4c:c2:14:3b:0c:f2:
                    5d:e6:01:68:05:8e:35:22:0c:32:bb:66:dc:7e:97:
                    76:0b:80:b3:f3:dd:1d:bb:95:98:e5:1e:1b:4b:f4:
                    db:12:41:c8:d0:8c:9f:bd:23:03:83:11:89:40:19:
                    5b:ab:fd:69:23:b5:8e:36:30:39:3d:4c:49:17:cc:
                    f6:03:32:57:80:2a:b5:20:bb:4e:d6:7b:f8:f2:c0:
                    3b:22:cf:6f:a6:73:3a:91:85:ed:41:6f:b0:8b:b4:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:A4:DC:44:80:A5:36:C2:E9:37:83:E0:81:AA:57:C1:67:AD:7A
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/A8A37DCE44A311F1A5A6D795B1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.100.0/23
                  202.155.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:3f:ec:9b:55:6f:c8:41:4c:e6:a1:9f:d0:46:61:10:56:
         e7:df:4f:fd:9a:70:c7:00:16:33:eb:4e:9e:8b:f3:e9:1d:0d:
         44:97:84:48:17:09:cd:f7:5a:4e:63:7f:5a:14:eb:13:9d:37:
         d0:ea:2e:ef:50:20:21:c6:dc:94:c8:7b:90:0a:fa:d5:2d:4e:
         94:dd:a0:d8:5a:d9:4d:8a:6b:35:9b:4b:8e:a5:4c:22:af:68:
         b6:59:26:0c:07:d6:a7:5e:b7:17:dc:8a:ee:84:a8:c9:4a:f6:
         af:02:40:e7:d1:bc:94:10:35:1d:9f:3b:d1:be:56:b6:ff:cd:
         2b:9f:81:30:a2:03:79:25:dc:ff:74:0c:6d:a2:58:dc:72:a6:
         6a:52:36:80:5f:09:03:74:83:9b:6a:ff:d9:32:df:99:b9:98:
         e6:84:73:46:d4:f7:27:41:3a:c3:42:22:a6:5e:04:3c:4e:4a:
         85:b9:6e:1c:91:a1:6c:5e:ee:50:23:8b:70:7c:4b:8f:36:0b:
         97:c5:da:2d:0d:a8:db:e5:56:5c:8e:d3:8b:0e:fc:4e:fa:1f:
         54:31:69:db:b9:6a:4a:90:a4:5c:9f:de:90:bc:e4:b8:d6:1f:
         b1:33:16:8c:0d:58:7d:3e:f7:fc:0c:cf:b1:d2:d8:e4:ca:56:
         08:b7:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:22:45 2026 by rpki-client