Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
File:                     A26E4F16C13411ECA5838429C4F9AE02.roa (raw, json)
Hash identifier:          iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=
Subject key identifier:   E1:74:92:3E:51:8D:D3:30:9A:9D:3A:BA:04:E8:13:C4:D9:48:D1:26
Certificate issuer:       /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial:       033E
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
Signing time:             Sat 31 May 2025 01:46:46 +0000
ROA not before:           Sat 31 May 2025 01:46:46 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     148968
IP address blocks:        103.186.156.0/24 maxlen: 24
                          2001:df0:ab40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
                          rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
        Validity
            Not Before: May 31 01:46:46 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a5f86-927d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:90:a4:a4:11:fd:a1:a0:65:91:c9:99:fb:
                    26:ae:4f:e4:b8:60:6c:6a:07:8c:15:fd:0a:91:3a:
                    6b:c7:08:71:57:98:42:c0:7c:e9:c8:d1:89:4e:2b:
                    76:cb:19:96:c4:49:f4:4d:60:14:02:c2:df:c9:5d:
                    60:e6:1a:53:29:26:c3:a7:6f:b1:10:32:b3:4a:f4:
                    16:ff:3e:42:78:9b:19:68:b2:f4:b3:d3:c7:f7:b6:
                    ed:12:91:89:6f:29:a3:8d:9e:08:be:31:58:04:3c:
                    61:ea:f5:83:dc:5b:15:23:07:98:e9:91:33:a7:8c:
                    2b:a7:74:11:d7:66:9c:10:2b:2a:04:83:86:d6:60:
                    f8:88:b0:00:f1:90:4c:69:09:47:41:f6:28:25:1e:
                    64:6f:f9:18:4d:54:58:02:b9:75:8f:46:b4:f8:2d:
                    21:2d:5c:0d:69:b2:59:11:1d:af:01:24:96:b5:98:
                    78:7b:ae:e9:fc:6b:ff:71:d6:f6:1d:1c:98:75:8b:
                    19:f8:6d:ff:e0:9e:4a:09:b5:12:d7:5f:f4:e9:57:
                    d8:f1:6c:d7:f3:04:79:c4:16:e9:c4:61:2b:f3:d5:
                    5b:99:fc:7c:25:2b:29:73:7a:43:cf:a9:14:bb:94:
                    8b:f6:54:6f:78:1d:b7:79:13:64:d5:dd:f8:ae:16:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:92:3E:51:8D:D3:30:9A:9D:3A:BA:04:E8:13:C4:D9:48:D1:26
            X509v3 Authority Key Identifier:
                keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.156.0/24
                IPv6:
                  2001:df0:ab40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:7d:33:35:91:e3:1e:24:7e:cd:f0:d4:03:41:4f:e4:9f:
         d5:ff:ae:36:32:8d:22:29:b1:f0:27:a3:00:33:e7:f5:76:bd:
         0b:e6:e8:9d:c9:f0:8d:6f:b8:fb:ef:56:37:6f:e1:9d:db:32:
         ef:9b:70:04:61:79:ef:6b:a3:f8:6d:6a:2c:40:7c:f8:6e:90:
         fe:93:da:be:95:38:06:8f:3e:ca:c9:36:5f:a4:da:db:0a:74:
         d6:3a:4a:34:86:68:15:85:5f:4e:92:b5:46:b0:53:05:0d:2f:
         9d:89:f2:2c:22:cd:bb:af:13:2c:02:50:57:d8:9a:c9:be:b0:
         c3:27:71:d4:6c:79:a7:cd:eb:a6:d8:a5:65:43:93:ee:42:43:
         e0:88:b9:14:fb:db:32:9f:b3:49:40:4e:6e:8f:29:96:c5:45:
         bc:2b:fe:8f:6b:59:ae:3b:3f:c4:39:aa:a6:eb:63:da:27:4f:
         44:20:63:9b:d8:db:05:26:9b:0d:2e:0c:a1:1d:91:2e:9c:f4:
         82:63:25:f1:bc:82:98:98:cf:e8:75:1c:6e:43:11:1f:9d:21:
         dd:1f:2b:11:1c:0f:d0:e3:e8:3a:43:77:df:2f:95:63:99:93:
         21:bb:8e:6f:e9:8b:c6:82:a1:82:47:d7:aa:c6:59:b7:7a:df:
         80:1a:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:59:42 2025 by rpki-client