Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa
File:                     598530DEA4F211F1BB2027D16C11F970.roa (raw, json)
Hash identifier:          Ip+sR1YcDwpSivcH/ATysWfasbeAworjm3jWFl5BcvE=
Subject key identifier:   0D:1C:6D:D6:A6:A1:45:85:7E:C7:94:D3:1B:51:40:E0:98:3D:E7:09
Certificate issuer:       /CN=A9175848/serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
Certificate serial:       04
Authority key identifier: 57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa
Signing time:             Mon 31 Aug 2026 04:14:11 +0000
ROA not before:           Mon 31 Aug 2026 04:14:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        103.71.148.0/22 maxlen: 24
                          103.234.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl
                          rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175848, serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
        Validity
            Not Before: Aug 31 04:14:11 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a94ff93-68f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:91:99:65:32:d3:61:bf:1d:2d:af:f2:dc:
                    27:8f:71:0c:a8:5a:c2:ac:93:82:07:22:71:3a:03:
                    10:ec:4a:42:32:04:a2:4a:c4:8e:3a:62:3b:05:fe:
                    37:81:60:18:b3:68:12:e1:46:2a:61:00:4a:a7:35:
                    2e:dc:03:fc:37:69:7a:b7:3e:0e:cb:0a:21:3a:d2:
                    bd:4a:d3:b4:7e:14:cc:d3:d4:7a:18:14:bf:e1:e8:
                    b1:f0:50:85:ba:56:08:03:1d:be:28:74:8f:e4:0a:
                    34:6c:65:e9:07:f7:6b:d5:d2:cc:2b:1d:ae:a4:cf:
                    a2:b3:94:79:63:ee:f7:2f:c2:e0:38:4b:61:a9:1e:
                    61:d4:8e:3f:cf:03:5f:65:f6:6e:85:f8:4f:14:87:
                    f7:80:f6:a3:9c:1e:83:8b:ca:f7:a2:04:42:da:43:
                    17:a1:b0:8a:1f:24:30:c8:53:8f:3b:66:16:b3:ec:
                    60:55:f5:1a:0c:05:7f:39:ee:82:f0:2e:5a:da:30:
                    18:ee:e2:cb:d2:61:e3:d1:f4:85:6b:af:99:05:10:
                    eb:d0:5e:77:30:6c:28:52:4d:c0:40:b3:c1:36:1e:
                    48:19:3e:87:b7:37:d9:1e:a7:a9:0e:14:8a:2c:80:
                    d0:19:c6:03:3f:10:6f:08:7a:83:20:a3:85:90:aa:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1C:6D:D6:A6:A1:45:85:7E:C7:94:D3:1B:51:40:E0:98:3D:E7:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/598530DEA4F211F1BB2027D16C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.148.0/22
                  103.234.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:19:f0:02:8b:1c:50:15:53:fe:73:c4:3c:13:cd:26:64:2c:
         21:6e:6d:6e:e0:db:5c:96:8e:40:f5:ba:c1:46:7a:85:20:fe:
         eb:91:da:78:da:4b:8b:1d:af:25:67:b3:eb:f3:16:cd:08:c1:
         5b:ef:fe:a5:da:85:50:e8:0c:34:c8:1d:d2:3d:0e:95:b0:8c:
         64:93:ae:43:71:ad:23:d6:2a:3c:af:48:13:2c:f3:d8:a2:1f:
         95:b8:e6:91:72:7c:a2:3e:f6:54:9a:c2:c9:04:05:bc:87:1a:
         5d:4e:dd:8b:47:d7:1a:b7:84:60:59:6c:90:3b:4c:ab:57:7a:
         cf:ff:05:5a:03:be:4c:38:5f:8e:b2:5a:28:32:3f:bf:7d:ea:
         cc:3c:2d:25:f5:29:a0:86:99:75:16:72:a7:c9:68:f2:73:8d:
         91:25:a3:0d:db:58:e2:d8:57:de:ad:93:33:b7:0f:91:3f:85:
         73:cd:e8:e1:94:ac:09:30:2d:72:89:ac:0d:7b:5f:4b:f7:19:
         43:cc:85:77:12:2e:1b:43:9e:de:d3:a1:b9:ed:29:b6:36:8d:
         00:15:12:76:11:ab:3c:cd:bd:db:ea:bb:d8:6d:ca:80:bf:22:
         18:15:da:65:83:66:bb:31:13:b2:da:47:44:c0:eb:2a:19:37:
         b3:e6:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:17 2026 by rpki-client