Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/892CDCB6746311F192162AF175A30FBC.roa
File:                     892CDCB6746311F192162AF175A30FBC.roa (raw, json)
Hash identifier:          yDMH2BZ9DUrRyVX+IReY08ZTUGU+iC2sMizKjjffVhI=
Subject key identifier:   51:F3:CB:36:D5:E2:DC:5E:BD:46:32:32:60:28:5D:A7:74:B5:32:39
Certificate issuer:       /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
Certificate serial:       0CE7
Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/892CDCB6746311F192162AF175A30FBC.roa
Signing time:             Thu 02 Jul 2026 04:45:31 +0000
ROA not before:           Thu 02 Jul 2026 04:45:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139922
IP address blocks:        103.147.62.0/23 maxlen: 24
                          2405:acc0::/32 maxlen: 32
                          2405:acc0::/48 maxlen: 48
                          2405:acc0:1::/48 maxlen: 48
                          2405:acc0:4::/48 maxlen: 48
                          2405:acc0:6::/48 maxlen: 48
                          2405:acc0:7::/48 maxlen: 48
                          2405:acc0:8::/48 maxlen: 48
                          2405:acc0:9::/48 maxlen: 48
                          2405:acc0:a::/48 maxlen: 48
                          2405:acc0:b::/48 maxlen: 48
                          2405:acc0:c::/48 maxlen: 48
                          2405:acc0:169::/48 maxlen: 48
                          2405:acc0:1000::/40 maxlen: 40
                          2405:acc0:1100::/40 maxlen: 40
                          2405:acc0:1200::/48 maxlen: 48
                          2405:acc0:1204::/48 maxlen: 48
                          2405:acc0:1205::/48 maxlen: 48
                          2405:acc0:1206::/48 maxlen: 48
                          2405:acc0:1207::/48 maxlen: 48
                          2405:acc0:1210::/48 maxlen: 48
                          2405:acc0:1300::/48 maxlen: 48
                          2405:acc0:1304::/48 maxlen: 48
                          2405:acc0:1305::/48 maxlen: 48
                          2405:acc0:1306::/48 maxlen: 48
                          2405:acc0:1307::/48 maxlen: 48
                          2405:acc0:1310::/48 maxlen: 48
                          2405:acc0:1400::/48 maxlen: 48
                          2405:acc0:1410::/48 maxlen: 48
                          2405:acc0:1504::/48 maxlen: 48
                          2405:acc0:1505::/48 maxlen: 48
                          2405:acc0:1510::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl
                          rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A53, serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
        Validity
            Not Before: Jul  2 04:45:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a45eceb-a1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:2d:8e:4d:c9:3c:15:07:dd:7b:c5:2e:a9:
                    e6:91:36:78:84:84:c8:a8:cb:25:fa:46:6b:75:c9:
                    0c:fb:4e:06:7b:e7:be:b5:d2:66:89:dd:ab:7d:88:
                    24:27:bb:6a:24:2d:c9:c8:ea:ae:f2:25:12:df:74:
                    d7:9e:db:a2:cc:f0:f6:d1:f4:54:46:d4:41:34:d5:
                    4d:e6:2f:57:db:95:3e:74:2e:cb:75:88:6f:8e:e1:
                    5b:44:4a:95:f1:9b:36:34:e7:73:4f:13:b5:b4:66:
                    16:74:29:f9:1d:98:7b:3c:bc:f3:a7:f9:68:c1:29:
                    31:6f:c7:f3:c2:eb:1e:a7:ed:30:e9:6b:40:a6:1c:
                    6b:07:af:7d:3e:20:de:60:80:69:be:dc:50:28:cc:
                    bf:1d:23:5d:2e:6f:ce:30:20:7b:18:3d:df:ff:71:
                    5c:6d:a4:49:ab:4c:2d:3f:9b:b3:b9:be:9d:82:ed:
                    f6:cb:fb:a4:d0:1c:82:a7:64:3d:49:19:22:ee:c5:
                    c8:37:53:9d:96:ed:1a:80:7f:e4:9f:4d:1c:a9:f0:
                    26:40:29:8b:c4:08:78:e7:f8:85:cd:75:47:88:60:
                    0b:e1:54:ea:c1:33:dd:2d:50:5e:b5:d8:dd:66:9f:
                    c8:b7:f2:d6:75:da:7f:cf:80:5e:3c:9e:44:14:c3:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F3:CB:36:D5:E2:DC:5E:BD:46:32:32:60:28:5D:A7:74:B5:32:39
            X509v3 Authority Key Identifier:
                keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/892CDCB6746311F192162AF175A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.62.0/23
                IPv6:
                  2405:acc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:f0:1c:a6:b9:e0:7f:55:95:02:38:e2:9f:78:f7:15:39:
         62:5d:eb:b6:d3:6b:61:f9:4b:00:06:57:5b:9d:05:43:5a:b4:
         d7:62:cd:e9:cf:bb:8d:72:cb:04:9f:23:49:f3:9f:a5:a2:78:
         34:50:4c:60:bf:c6:e3:d8:8e:97:52:0e:3f:da:b0:66:4e:d9:
         7b:93:6b:d5:e8:04:71:b5:f7:3b:34:5d:84:3a:10:2b:2b:30:
         3f:34:ac:07:cf:0c:15:2e:67:0d:8b:d9:36:cb:23:10:09:3e:
         eb:f3:0e:4b:5c:a6:87:47:c9:00:24:22:3d:cf:73:09:3c:8e:
         ef:74:78:34:ca:25:8f:a7:d0:1f:2c:0e:ba:1a:f7:a4:38:11:
         4f:9d:7b:32:bd:ea:90:b7:aa:44:19:90:9d:34:38:70:99:6b:
         29:32:9e:ac:51:61:b3:88:c9:ba:d7:57:b7:70:43:1c:62:d3:
         b0:4c:0b:29:f1:7b:7a:00:74:a3:e0:aa:02:30:0f:f6:e4:58:
         59:06:d5:35:77:c4:b4:fd:8b:c8:1f:0f:98:8b:e5:42:ca:c4:
         3b:f2:00:b2:b2:50:72:d6:04:cd:57:4d:a0:27:96:80:ce:9c:
         31:b5:83:7a:88:df:29:cd:c0:95:a9:a3:c9:f6:56:17:b3:22:
         6b:ee:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:13:16 2026 by rpki-client