Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa
File:                     4C7C5ECCE1B211EE84F03918C4F9AE02.roa (raw, json)
Hash identifier:          sb5ey6r6KthuUUgBgPz/nG3qYIAoINFMyiJ2oK7kvBU=
Subject key identifier:   C8:3A:88:51:DF:FA:C5:F1:DA:8D:7B:33:FF:A1:B9:71:AB:0A:C7:8B
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       0240
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 03:52:56 +0000
ROA not before:           Fri 07 Aug 2026 03:52:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7586
IP address blocks:        103.118.40.0/22 maxlen: 22
                          103.118.40.0/24 maxlen: 24
                          103.118.41.0/24 maxlen: 24
                          103.118.42.0/24 maxlen: 24
                          103.118.43.0/24 maxlen: 24
                          2403:27c0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug  7 03:52:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a755698-6e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:d7:a5:bf:1c:b4:a8:6a:92:38:0e:e3:a1:
                    69:6b:06:af:aa:c2:67:23:39:a6:16:ae:0e:84:4a:
                    da:f2:5c:5e:c7:47:6c:e0:2b:36:a4:24:65:bb:58:
                    3f:8f:9c:ad:e0:3e:58:76:69:4c:2f:2f:e8:83:da:
                    59:9b:70:9f:d0:c9:2c:1f:28:21:dc:2a:12:fd:c8:
                    4a:3e:b7:16:67:d4:ac:d7:45:b2:bc:64:73:94:32:
                    98:07:df:fe:e7:dd:7e:f2:2c:ab:44:67:bf:b1:a9:
                    1a:08:f2:83:10:56:a1:43:c7:b6:10:9e:ad:ec:44:
                    51:e2:43:59:ae:70:87:95:6b:69:eb:3f:cb:a7:44:
                    fc:be:a8:1d:14:8e:3d:68:97:27:e0:81:10:f3:91:
                    7e:35:5f:97:79:24:7d:50:1c:2c:84:19:81:38:65:
                    64:f5:f6:fa:3b:3c:a9:86:b5:81:1a:e6:22:bb:ca:
                    31:9f:d2:03:ad:a5:0f:a2:9c:7e:95:1c:89:bc:6c:
                    23:3c:3e:87:8c:d1:b3:77:ee:95:6f:8f:b1:ca:a7:
                    b1:17:f5:a2:4e:e3:f8:20:90:b8:e0:8c:3c:50:45:
                    45:a1:d0:07:7c:04:3c:6b:7a:05:4d:ac:b2:64:82:
                    87:57:32:62:0e:18:d7:38:75:3e:a1:fa:87:ae:9e:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:88:51:DF:FA:C5:F1:DA:8D:7B:33:FF:A1:B9:71:AB:0A:C7:8B
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.40.0/22
                IPv6:
                  2403:27c0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:76:a5:ab:d8:54:89:87:54:98:12:a8:b7:68:a5:25:b2:43:
         e3:3a:cb:c6:b8:15:c9:de:af:a3:d5:2a:dd:8f:09:38:da:22:
         33:dc:25:21:9e:2a:22:5b:25:42:24:1f:f5:a7:85:be:b7:05:
         12:d8:29:28:b3:2d:de:bb:54:bf:23:82:ac:48:85:d7:07:f6:
         72:f9:69:69:31:40:b7:f5:8f:ef:10:34:1c:fc:0f:a4:d8:dd:
         29:2b:f3:34:ed:2d:1b:a2:84:fa:c2:3d:ff:92:09:ee:61:b1:
         ab:bb:6d:3a:f6:1b:c1:d1:93:c9:cf:49:02:37:77:b7:f2:e9:
         9d:79:28:ca:66:74:68:27:e7:aa:62:57:f4:a8:16:65:b2:f0:
         ae:d4:b9:cb:f9:71:68:f1:39:6d:b1:ba:e4:66:43:f1:c7:d5:
         54:56:bb:ae:98:b8:35:72:d5:e9:18:19:93:b2:59:4f:78:bc:
         5b:13:12:33:c8:04:86:d1:59:8c:c4:7e:03:38:99:74:04:74:
         3b:ab:79:9c:5c:7d:a5:0b:cd:cf:85:e5:d4:15:c0:07:48:dd:
         ad:c7:88:49:77:f9:22:84:62:26:20:58:7a:d7:c6:4e:8e:7f:
         e6:a2:ec:d7:d9:d8:44:57:76:3c:80:78:3c:e2:08:52:09:91:
         58:90:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:13:16 2026 by rpki-client