Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa
File:                     E82DE3C290AB11ECAB81252FC4F9AE02.roa (raw, json)
Hash identifier:          PglW3T12IKlMircnLLUZ33j6kRlzVW56A2kCHbmh2rY=
Subject key identifier:   DB:19:6A:F1:1B:E2:B1:F8:37:1F:A4:CA:D1:8D:67:A1:FC:ED:B8:BF
Certificate issuer:       /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
Certificate serial:       0520
Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa
Signing time:             Fri 17 Jul 2026 07:01:59 +0000
ROA not before:           Fri 17 Jul 2026 07:01:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148968
IP address blocks:        103.48.214.0/23 maxlen: 24
                          103.174.228.0/23 maxlen: 24
                          202.130.206.0/24 maxlen: 24
                          203.12.29.0/24 maxlen: 24
                          2001:df7:d980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl
                          rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89
        Validity
            Not Before: Jul 17 07:01:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a59d366-2f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:d8:9c:89:27:2d:00:b2:0f:d1:e7:60:a2:
                    5c:a3:e5:d9:a3:ac:3f:22:8c:08:72:0e:6d:6b:d3:
                    b0:15:8a:e8:1d:e4:69:9f:a4:f9:fb:44:61:04:4f:
                    4b:0d:1b:38:04:df:63:ed:60:da:85:c2:f9:8b:3a:
                    44:43:c5:cb:20:68:59:39:56:c2:4f:cf:aa:cc:00:
                    a7:62:a1:5a:42:c4:ae:9e:6a:96:5f:97:87:f5:c4:
                    77:0c:a2:16:04:fe:d8:23:d5:0a:1e:0c:ea:78:0f:
                    09:d6:bd:ba:89:cc:43:69:d0:43:e7:38:18:3d:79:
                    ea:19:37:d6:b0:2e:1f:cb:69:b9:aa:c0:fa:cc:3f:
                    9b:42:e5:5e:e8:d1:b6:ae:e7:81:9e:56:cc:a0:0f:
                    00:46:7a:bc:2d:34:1f:5f:f9:b0:5e:c2:40:1b:b5:
                    90:16:b3:06:4b:f7:f6:0d:5f:08:2e:77:b2:2f:6d:
                    42:b1:51:5d:0e:dc:d8:b6:b8:93:76:af:35:b7:f4:
                    4a:46:95:cf:01:da:d6:aa:d7:9a:09:b1:76:e6:22:
                    23:6a:32:e7:c1:45:a5:4e:6a:95:8c:c1:8f:2d:70:
                    ed:68:f6:11:5b:05:71:45:cc:f1:43:d6:ae:b2:d0:
                    04:7e:de:1c:15:07:60:7f:77:51:aa:0f:6b:9b:d1:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:6A:F1:1B:E2:B1:F8:37:1F:A4:CA:D1:8D:67:A1:FC:ED:B8:BF
            X509v3 Authority Key Identifier:
                keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/E82DE3C290AB11ECAB81252FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.214.0/23
                  103.174.228.0/23
                  202.130.206.0/24
                  203.12.29.0/24
                IPv6:
                  2001:df7:d980::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:2a:5e:bd:51:36:07:ab:31:c6:46:b9:45:a7:54:89:b8:
         a5:8f:d7:06:81:3c:49:e3:6d:5d:3d:90:8b:cc:20:e8:80:e6:
         fb:f5:9e:dc:ed:83:ab:b6:a3:c4:50:f6:f4:54:97:7b:df:a3:
         f1:21:61:28:32:4a:06:1a:ca:cc:2c:63:13:94:44:78:86:bb:
         9f:79:b4:b4:59:99:45:a3:5a:28:ff:b1:8b:99:c3:49:86:fe:
         8b:36:ae:1a:94:f6:a0:2b:98:ac:4a:64:5b:11:df:3c:9c:20:
         bd:6e:da:f2:c1:96:18:e3:13:e8:9e:35:0f:7a:13:bf:4b:fb:
         69:de:55:01:27:cb:7e:83:97:58:ca:53:27:8a:ae:d1:59:ee:
         3a:b7:3f:cd:41:6a:78:23:99:86:75:aa:de:a6:03:9c:f7:0a:
         bd:a9:ec:76:22:3e:45:7e:e6:67:c4:f4:64:c4:68:b1:ad:63:
         13:10:39:f1:a2:50:79:64:cd:db:d4:c5:2d:f2:bb:75:2d:52:
         11:a0:8d:67:68:2d:33:e1:c1:b4:cf:55:63:df:3c:1b:c7:5e:
         b0:2c:4a:02:29:54:be:00:a4:09:01:25:13:8d:56:70:10:29:
         91:0c:0a:91:ea:d3:68:ab:99:0e:72:e8:8d:d0:14:6d:75:be:
         96:19:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:54 2026 by rpki-client