Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/AAA8232C123411ED90E8CA59C4F9AE02.roa
File:                     AAA8232C123411ED90E8CA59C4F9AE02.roa (raw, json)
Hash identifier:          14Dpl+UvtUac6Tcv9kNajCLrd8PZgXjUBNNzy2zc44A=
Subject key identifier:   F0:B7:7D:01:66:59:D6:E9:8D:9C:B1:EA:12:4B:99:D9:50:76:6C:A4
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       0958
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/AAA8232C123411ED90E8CA59C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 20:24:06 +0000
ROA not before:           Tue 16 Jun 2026 20:24:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134379
IP address blocks:        103.63.132.0/22 maxlen: 22
                          103.63.133.0/24 maxlen: 24
                          103.63.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
        Validity
            Not Before: Jun 16 20:24:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a31b0e6-644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:e1:63:c5:aa:27:fc:e7:0d:f2:93:a7:80:
                    d3:46:48:92:95:9e:86:7b:d6:ef:27:15:af:59:c0:
                    05:07:74:f0:52:2b:0a:0e:0f:07:5a:40:e3:bd:7a:
                    8f:9f:b6:7f:77:20:6e:2d:f0:e0:67:28:47:73:ed:
                    3c:a8:9c:04:97:97:ab:9d:be:4e:94:7c:a1:bf:ee:
                    ac:7c:0f:60:9b:c2:d9:8f:f4:6e:d0:55:fd:30:f3:
                    0b:96:8e:f9:07:a9:be:8f:32:55:96:ee:7e:8b:19:
                    f0:d3:ed:52:14:04:1d:54:73:72:47:b3:2b:3f:54:
                    95:ac:5b:5e:07:0d:79:c4:71:7d:f5:ab:dd:80:4a:
                    4d:59:1a:ca:4d:46:74:63:83:02:ad:bf:c7:85:df:
                    2a:8e:2b:6f:5a:ae:85:ba:6b:81:34:03:d2:28:68:
                    d5:da:05:71:97:a4:f5:c2:1a:e8:a9:42:65:7a:9f:
                    b4:0a:80:81:7d:45:f8:d3:62:a0:e7:c8:32:c0:83:
                    43:19:70:72:17:fc:bd:d0:c0:83:03:2a:53:29:1f:
                    2b:6a:ef:33:a6:d0:60:ec:19:0c:ee:04:be:ad:fb:
                    6b:63:2b:96:db:f7:2e:60:f1:f0:d7:eb:b8:fb:0a:
                    96:5e:77:62:ea:78:ed:62:12:83:e3:eb:69:0a:48:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:7D:01:66:59:D6:E9:8D:9C:B1:EA:12:4B:99:D9:50:76:6C:A4
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/AAA8232C123411ED90E8CA59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:c0:8b:5f:c1:89:2f:d0:e2:08:49:09:81:aa:16:7e:7b:
         73:55:4b:ac:94:e9:83:58:e1:9d:81:96:a4:e6:a3:ef:21:c0:
         31:dc:e4:90:60:72:6f:c0:18:4e:df:8b:a3:8f:fc:2d:ac:a8:
         e1:31:95:0a:ff:03:14:ab:81:e8:61:b1:ab:2f:ec:87:38:7c:
         e9:80:61:1f:85:00:3e:3b:11:56:9e:dd:db:ce:01:7c:05:9d:
         69:be:96:b1:5b:f5:fc:73:05:4a:8c:64:2a:1c:77:fd:72:af:
         28:38:74:92:2d:ba:7f:c0:e2:2d:87:a6:82:79:1d:95:10:d4:
         a7:2a:b9:a1:21:7e:46:57:a1:37:53:7f:d3:7d:fa:df:29:66:
         09:17:10:cf:38:cf:bd:aa:7f:07:1e:46:89:3f:7b:a4:45:ec:
         66:84:8e:ed:59:c2:e0:05:d9:23:bd:96:dc:6b:42:10:82:67:
         1f:7e:4c:32:7b:f5:42:be:49:b3:52:ae:3c:0b:c9:d7:0a:9f:
         37:20:30:20:21:2c:f9:e2:32:f8:80:37:57:62:50:8e:29:12:
         11:f7:a5:e9:ba:f9:69:37:30:88:b3:db:07:c8:91:77:f2:eb:
         05:0c:9d:52:af:a0:24:a1:dc:1e:e4:25:b4:eb:78:b6:84:80:
         2a:6a:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:36:29 2026 by rpki-client