Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
File:                     1F59A248F69E11EC947BBC5EC4F9AE02.roa (raw, json)
Hash identifier:          dyH4e+gx3HXeT/oT8iwilMjLeLPk/EJ/gCFp5UvAwZM=
Subject key identifier:   95:6B:1A:81:B6:D4:7D:18:DC:41:52:B0:C6:9C:D6:02:41:D1:8F:3B
Certificate issuer:       /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial:       039B
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
Signing time:             Tue 11 Aug 2026 00:49:20 +0000
ROA not before:           Tue 11 Aug 2026 00:49:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        103.190.40.0/23 maxlen: 24
                          2001:df0:e440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917983D, serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
        Validity
            Not Before: Aug 11 00:49:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7a7190-35ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:2f:82:ab:e5:b5:c5:91:c8:e2:25:c5:b5:
                    a2:18:af:2a:bf:85:35:c0:c0:a8:3f:ba:19:75:9f:
                    2b:cc:e9:fc:7f:8a:52:ef:33:82:1b:98:c1:df:2f:
                    88:b0:6e:ff:a2:69:be:7f:90:98:b3:42:bd:ae:fc:
                    06:41:d5:52:9d:97:18:82:c7:30:69:bc:89:52:67:
                    92:d8:64:95:09:1f:84:83:00:c8:0d:8e:02:94:fc:
                    9b:a6:a2:dc:75:75:62:d7:e6:c2:3f:5a:83:44:69:
                    cc:eb:ff:54:7c:ef:64:9f:31:7e:4b:6e:18:b1:08:
                    61:30:2a:9b:c5:2f:8f:d0:2f:3d:a7:d8:cb:ff:bc:
                    95:4f:b6:d0:8a:5e:be:cc:90:ea:c7:d6:3e:f5:90:
                    fc:8f:ce:af:3c:f1:9c:b6:41:18:65:99:94:b7:08:
                    dd:77:de:a9:ce:e5:17:81:5b:7f:9f:91:ab:92:e6:
                    3a:8a:27:7e:2d:43:15:c8:30:55:dd:60:0d:a8:d9:
                    0a:72:05:64:99:be:dd:b7:de:81:78:bf:c8:8e:52:
                    e2:05:96:fc:64:1c:6e:7b:7e:b5:dc:27:6d:c5:76:
                    03:25:fc:8d:cf:eb:4e:69:50:67:12:4a:f1:7c:f5:
                    d8:fd:f0:56:c7:ed:3d:f6:3c:fa:aa:4b:35:57:df:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6B:1A:81:B6:D4:7D:18:DC:41:52:B0:C6:9C:D6:02:41:D1:8F:3B
            X509v3 Authority Key Identifier:
                keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.40.0/23
                IPv6:
                  2001:df0:e440::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:2a:a8:78:f3:48:67:70:56:94:35:e5:d2:10:bc:bf:52:28:
         63:ed:66:5f:e5:9c:a8:18:03:1a:13:fe:db:f1:7e:fd:0d:4a:
         fa:1d:65:08:c1:8f:44:9d:06:53:e3:78:0f:90:9a:70:eb:ce:
         87:ca:60:c5:21:83:6f:d0:fa:46:28:fa:f7:19:dc:27:c6:f2:
         88:cf:8e:8f:3b:27:2e:47:b2:b1:7b:f5:fe:03:44:eb:28:d6:
         cd:35:2a:ac:b6:1b:3b:5d:92:f3:f3:7c:e1:d1:40:a0:5f:6c:
         10:46:e0:24:a4:5c:00:d7:9b:15:8e:44:a2:f0:31:b1:48:7c:
         26:b3:8c:31:6d:b3:fe:cd:68:86:93:e2:0a:05:a0:95:99:1f:
         d2:41:64:78:d0:61:6a:d7:ba:9b:e8:ce:29:ef:4a:30:de:84:
         82:61:d8:a1:31:f1:79:39:59:64:37:5f:4d:ae:c1:65:99:ac:
         ee:91:60:24:ff:52:76:06:3a:8f:a6:0b:23:8a:94:d1:4d:3a:
         95:19:90:4a:85:8d:ca:f7:26:75:ac:1d:38:c9:be:91:23:d5:
         b0:42:4d:e9:03:f9:52:89:62:71:a7:12:91:d4:76:e0:c8:fa:
         f3:8a:77:d0:4b:d5:5a:b7:13:24:fe:bd:5c:2f:67:32:f3:61:
         3a:5a:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:21:16 2026 by rpki-client