Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/A0BD00DEF5B311EFA334BB67C4F9AE02.roa
File:                     A0BD00DEF5B311EFA334BB67C4F9AE02.roa (raw, json)
Hash identifier:          VDY+BPq5lSeRusGk8bxhC79JQgZcEdSIsVPdLXN6r9Y=
Subject key identifier:   72:FA:F0:1F:08:0C:42:FC:C6:C5:85:63:68:BD:DC:0B:7D:42:B7:AC
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       0242
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/A0BD00DEF5B311EFA334BB67C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 03:53:00 +0000
ROA not before:           Fri 07 Aug 2026 03:53:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     976
IP address blocks:        103.118.40.0/22 maxlen: 22
                          103.118.40.0/23 maxlen: 23
                          103.118.40.0/24 maxlen: 24
                          103.118.41.0/24 maxlen: 24
                          103.118.42.0/23 maxlen: 23
                          103.118.42.0/24 maxlen: 24
                          103.118.43.0/24 maxlen: 24
                          2403:27c0::/32 maxlen: 32
                          2403:27c0:1000::/48 maxlen: 48
                          2403:27c0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 03:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug  7 03:53:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a75569b-a40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:8f:46:49:37:25:3d:38:30:d4:93:be:ba:
                    8c:94:24:c3:73:83:0a:9d:28:b9:65:5c:10:b4:62:
                    4f:04:7b:ac:2c:0a:c3:8b:30:54:e1:5a:ef:76:31:
                    49:f4:a0:91:fb:e7:8a:37:1d:5b:86:f6:fd:77:d5:
                    bf:89:49:78:6a:b5:60:6e:5f:d4:f0:7b:5c:f2:0a:
                    5e:40:26:45:56:c7:f0:41:d1:62:2f:88:ed:ad:7c:
                    91:7a:fb:70:02:c1:90:8d:06:2f:93:c7:57:fe:58:
                    b9:8c:c1:ad:cb:1f:72:c7:d3:be:8f:24:a3:f4:2d:
                    25:18:0a:08:bb:27:fe:02:04:b3:76:57:65:6a:96:
                    72:b9:f0:1d:b8:be:5f:ba:99:0b:90:08:79:2c:fd:
                    ef:42:ab:ea:62:59:dc:07:22:84:51:30:ec:bc:81:
                    e0:0d:1b:0f:71:62:e3:b4:21:d7:d0:a9:80:53:0f:
                    a8:41:8c:fb:9e:40:0c:75:e3:28:3e:bb:5b:4d:9e:
                    ae:52:94:05:28:b0:37:7f:04:b3:d7:56:4a:14:f8:
                    04:68:91:24:e2:af:ae:d4:5c:80:6b:d3:42:3f:86:
                    b7:f7:7e:45:d8:13:e9:ed:c0:d7:83:79:9d:23:92:
                    c6:02:75:bd:df:60:c1:56:66:ae:38:1e:4c:35:a9:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:F0:1F:08:0C:42:FC:C6:C5:85:63:68:BD:DC:0B:7D:42:B7:AC
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/A0BD00DEF5B311EFA334BB67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.40.0/22
                IPv6:
                  2403:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:e7:3b:60:c2:99:f1:b1:40:a6:9f:bb:92:7e:bf:ed:ed:5d:
         1e:84:87:06:d8:47:af:d0:c8:70:d9:42:c9:2b:45:73:db:c5:
         5f:fc:ba:2c:2e:73:36:2f:76:e8:aa:57:68:ab:8c:39:ad:f1:
         7c:09:2d:9c:3e:28:f3:50:6b:44:80:04:35:c0:5f:81:ed:93:
         c1:20:92:f2:e2:69:5a:61:e4:12:8b:1a:26:d7:67:d1:f9:6c:
         d3:80:fc:ba:f6:ad:c3:33:74:3f:ea:f9:3a:8d:f8:52:5d:d1:
         94:ca:4a:9a:4e:e2:a9:41:8d:cd:14:0f:d8:89:f3:52:7b:a3:
         b8:31:2a:9e:b9:ef:cf:3f:9b:f8:87:3c:94:65:be:7c:d2:af:
         c2:d5:d4:f1:28:9a:43:5a:c8:0b:97:b2:a7:63:a9:71:08:28:
         60:82:f6:c7:4b:f2:56:a2:1d:a3:a3:11:30:35:d3:6f:75:d3:
         43:55:3d:a6:94:ca:14:8d:47:35:39:e4:86:41:dc:d5:9b:16:
         3e:bb:ff:0c:79:49:5b:2c:31:28:1e:e3:14:d5:e1:75:4f:d3:
         6a:55:aa:21:3e:16:2b:fe:55:62:91:b6:7c:30:1b:19:ab:ff:
         21:06:8a:fa:99:83:3d:f1:cb:ef:d7:87:07:c1:cd:53:27:00:
         d7:23:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:28 2026 by rpki-client