Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa
File:                     439B1DD4265C11F1BAFB3333A5833773.roa (raw, json)
Hash identifier:          Dxatxl0qTUfSTcpFhvzbVVvCfebatpASoJvF3ceeN4E=
Subject key identifier:   FF:B3:66:29:8C:C3:FD:FA:70:C9:AD:4C:43:6D:20:EB:2C:AE:41:5B
Certificate issuer:       /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial:       48
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa
Signing time:             Fri 31 Jul 2026 10:57:54 +0000
ROA not before:           Fri 31 Jul 2026 10:57:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        103.153.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
        Validity
            Not Before: Jul 31 10:57:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c7fb2-efce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:5c:65:8f:54:f5:1d:ca:42:28:96:c6:d5:
                    68:43:ae:73:14:e0:e0:df:5a:04:c2:05:fd:d8:e7:
                    51:c2:cf:77:25:dd:1d:d2:86:49:39:cb:5d:59:68:
                    20:b2:dc:22:40:65:b5:71:99:fb:a6:1b:22:76:bc:
                    7a:9a:98:5a:aa:c1:1d:57:b4:7b:4c:9f:b9:cc:de:
                    6c:14:c8:88:60:ae:f2:72:83:72:fc:a6:e0:26:14:
                    67:27:30:d1:04:91:c6:58:66:0e:59:0e:8a:fe:79:
                    9f:78:4d:16:d0:40:74:72:52:08:6e:46:39:38:9c:
                    9f:2f:99:a0:6b:cc:59:60:0c:52:1b:96:cc:25:b0:
                    e4:36:c6:43:e3:39:e4:74:4b:7d:cd:e5:61:28:1a:
                    21:bb:db:03:2b:7c:ef:da:0e:ec:3f:cc:3a:f8:1e:
                    38:c6:f4:11:89:f1:d6:a9:4d:04:15:aa:87:00:10:
                    43:1f:6d:57:2d:ab:c2:c2:49:e1:fe:d2:b7:fa:5b:
                    13:00:c5:ee:51:cc:fa:bc:7c:66:e0:89:8b:03:ee:
                    f3:b7:33:80:99:c5:8a:ae:49:8f:93:d5:ff:ad:1b:
                    0d:2a:22:49:8a:52:b9:02:cd:f2:67:4a:4c:a4:9d:
                    d6:45:25:93:d0:ab:2e:3d:2c:81:db:be:60:2d:4f:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:66:29:8C:C3:FD:FA:70:C9:AD:4C:43:6D:20:EB:2C:AE:41:5B
            X509v3 Authority Key Identifier:
                keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/439B1DD4265C11F1BAFB3333A5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:10:4c:b7:0e:83:0a:f1:10:2f:2b:bc:b8:cd:41:a8:d7:65:
         66:d5:1a:5e:e2:51:36:33:02:d9:4b:2c:0a:c9:fe:18:c7:59:
         e0:9e:5d:01:6e:2a:55:a2:a5:fd:e4:86:21:a5:18:e5:f9:ed:
         e7:c6:f2:f7:ff:67:ad:5e:f2:94:51:8f:4f:ef:98:76:30:74:
         38:d9:7e:15:4c:a5:81:39:53:5a:98:42:de:95:cd:c5:eb:2e:
         73:a2:c4:44:80:fd:9d:cc:e2:54:1e:29:33:55:dc:14:9b:87:
         21:55:ef:29:b3:e3:ae:fa:2c:5c:c4:42:2c:d6:fc:ea:3f:a0:
         9c:3b:17:bf:00:26:3b:b6:2a:06:be:0d:be:db:64:14:bf:49:
         ec:cd:3c:0e:2f:d1:6e:3e:38:39:5d:b2:ac:61:50:dd:48:41:
         11:11:fb:55:97:b0:ba:48:cf:87:a5:6d:dc:95:df:75:15:b7:
         8c:8e:b1:40:3a:c6:c1:a9:cb:bf:8d:a6:c8:1e:1c:31:a6:a9:
         9e:43:ac:86:5f:7a:7c:aa:d3:cd:94:23:43:18:34:d8:a7:d1:
         5d:92:e4:54:38:dd:fb:13:17:4b:be:e6:7e:08:dd:ca:66:1d:
         8d:97:0e:bf:6a:e4:88:62:4f:95:20:8b:1d:ad:b6:70:3f:b5:
         a5:73:1a:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 04:25:17 2026 by rpki-client