Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/ED0AC7FC964111F18E87E5C86A11F970.roa
File:                     ED0AC7FC964111F18E87E5C86A11F970.roa (raw, json)
Hash identifier:          AAYjKSflpmaeoHCKiG2/Vm/Fie3Vm1Aa98S67N1BkTI=
Subject key identifier:   C4:EC:AC:53:97:92:CC:4E:E5:D1:07:69:A0:E6:84:51:94:44:97:26
Certificate issuer:       /CN=A917888C/serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
Certificate serial:       02
Authority key identifier: 78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/ED0AC7FC964111F18E87E5C86A11F970.roa
Signing time:             Wed 12 Aug 2026 11:35:32 +0000
ROA not before:           Wed 12 Aug 2026 11:35:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140932
IP address blocks:        103.131.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl
                          rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917888C, serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
        Validity
            Not Before: Aug 12 11:35:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7c5a84-76fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:07:f6:6d:c1:20:a3:74:e1:4a:52:39:69:
                    94:a7:40:f3:c5:17:09:b6:c3:1a:e9:43:f4:7c:43:
                    b5:bf:ea:06:99:00:e7:90:ea:2b:4e:c4:e7:3a:39:
                    27:54:31:c8:35:0b:e2:1e:58:42:20:19:c7:8f:fc:
                    34:73:c8:c7:d7:5c:60:31:5e:2b:00:68:ab:e4:f3:
                    5c:55:46:e6:6c:b3:78:dc:f1:b4:31:b0:6a:c7:19:
                    e2:0f:2c:49:be:a8:c0:58:18:09:65:7d:f7:95:80:
                    6e:9b:2c:75:b1:cf:6b:75:84:a9:a0:f4:a1:10:82:
                    94:46:e5:53:bf:02:71:e4:20:2d:fd:bb:08:1d:fd:
                    ec:72:97:b2:f7:a7:1d:d3:95:6a:61:53:cf:9f:0c:
                    72:a1:50:20:0c:71:75:60:c8:86:e6:67:66:23:66:
                    88:3b:7a:0c:32:3a:37:49:f4:bf:c5:11:8c:7f:08:
                    9f:03:e3:3e:7e:8e:59:f2:f9:3b:66:0e:4f:ae:93:
                    69:cd:2f:36:be:32:2a:29:d7:f5:21:f2:31:3b:d9:
                    1a:ce:e9:96:d5:12:44:5e:a4:0c:0a:b9:df:91:e4:
                    08:5b:8f:a4:40:f3:27:d5:07:96:b4:02:76:15:76:
                    ab:03:12:e4:79:82:b2:b7:ab:51:f6:4c:24:7f:c4:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:AC:53:97:92:CC:4E:E5:D1:07:69:A0:E6:84:51:94:44:97:26
            X509v3 Authority Key Identifier:
                keyid:78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/ED0AC7FC964111F18E87E5C86A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9f:a1:27:90:98:6a:d1:35:35:66:f5:a8:49:14:2b:89:18:
         c6:0c:c1:9c:e4:b3:7e:2f:05:31:90:85:02:3b:78:3f:d8:8e:
         b8:84:73:d5:99:a5:76:44:59:62:f4:c7:02:15:7a:bc:13:fc:
         42:68:7c:72:5c:f1:bb:d6:46:22:b0:3d:e0:94:c0:d7:9c:a6:
         bf:21:92:3b:85:60:59:8d:5c:80:f0:97:a3:37:ad:27:59:fe:
         83:46:18:57:aa:48:c2:f5:11:ed:2b:4a:6b:f0:ed:7d:ac:e9:
         60:32:5c:ca:08:76:e7:68:02:33:fb:6d:a6:22:f9:2a:73:b4:
         4b:cf:8b:fe:d6:14:64:30:f1:21:e6:8a:33:93:61:fb:a2:8d:
         d4:67:58:64:fd:dd:1d:70:25:bd:a0:77:f9:1b:53:e5:7b:21:
         ae:b4:24:9b:8f:33:17:d7:8a:a8:34:1c:52:24:eb:2a:40:2d:
         e2:08:9b:45:83:20:af:ce:92:5b:11:90:4d:bb:58:c1:81:fa:
         37:a7:2f:92:cd:bb:6f:f9:4a:85:09:ee:d5:87:65:f8:6b:05:
         be:6d:55:40:a1:cb:6b:e7:52:30:02:1f:44:e1:94:86:4b:89:
         b1:7b:2b:fd:3d:a4:60:1d:d2:b3:73:14:f8:92:d4:41:48:d5:
         7e:ec:35:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:17 2026 by rpki-client