Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/AFE4C282750E11F1AD641DF56EA30FBC.roa
File:                     AFE4C282750E11F1AD641DF56EA30FBC.roa (raw, json)
Hash identifier:          1VaOurL2pMpKT7+o6fq7MiAiKhAra7u+Mj1RfzpWDXk=
Subject key identifier:   F8:B5:7D:F7:39:4D:F0:05:A7:35:6A:52:19:83:1A:9C:FB:4D:49:4A
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       0530
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/AFE4C282750E11F1AD641DF56EA30FBC.roa
Signing time:             Wed 01 Jul 2026 05:35:37 +0000
ROA not before:           Wed 01 Jul 2026 05:35:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     208185
IP address blocks:        103.47.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Jul  1 05:35:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a44a728-0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4a:cc:ab:e0:11:51:d1:73:79:32:b3:36:10:
                    98:06:2e:96:f2:b2:e7:06:5b:4b:a1:de:54:75:05:
                    af:3a:46:21:4b:b3:0b:36:b9:85:99:1c:a5:c4:0a:
                    20:69:df:4b:45:e5:34:7a:e5:45:d9:10:7e:b6:41:
                    ae:3f:91:02:08:ca:da:fb:66:15:1c:16:82:9a:9a:
                    8e:32:b7:2b:de:74:ad:3a:30:cc:39:db:83:e3:16:
                    cf:fa:98:38:8b:f0:be:15:34:d4:49:5b:1c:ac:ad:
                    4b:d3:2b:40:cb:c8:29:f2:57:54:d5:0f:8b:61:eb:
                    7b:b3:d3:c8:68:3b:08:c7:59:95:95:a8:50:dc:c7:
                    33:d2:20:de:e6:40:b8:91:12:ba:99:cf:a8:e9:72:
                    33:4f:37:38:fb:f8:3b:c4:11:06:be:a0:8a:7a:2c:
                    94:82:2e:e2:dd:5f:77:b5:9d:42:4c:e4:03:c6:75:
                    85:79:ce:01:03:02:ed:32:f2:04:3b:77:ff:81:70:
                    6c:38:b0:d2:e3:40:4d:5f:ac:31:2a:b0:15:b9:b4:
                    dc:55:3c:70:d2:c0:26:ac:38:93:08:e4:c6:14:f0:
                    de:ea:4c:0a:4a:c6:fd:a4:31:b2:e7:68:f2:f8:9f:
                    3e:99:c5:d2:c0:fb:9e:8f:d3:f1:f6:e5:79:12:67:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:7D:F7:39:4D:F0:05:A7:35:6A:52:19:83:1A:9C:FB:4D:49:4A
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/AFE4C282750E11F1AD641DF56EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:00:67:73:cb:92:5d:8b:d9:44:01:ed:f7:7e:8a:26:c9:b1:
         be:fb:e0:16:c9:7d:26:6b:8e:42:e8:2b:e3:9e:95:47:7c:9a:
         24:5b:85:ef:af:a6:ad:3e:a8:13:ab:c2:b9:53:58:40:b7:7d:
         f1:a1:82:f8:38:07:24:b4:14:3f:0d:f9:57:11:68:25:94:35:
         db:cf:1c:b7:f8:c2:bd:59:79:c2:99:7c:1d:3f:4f:cd:d6:ae:
         6c:56:76:77:a5:04:51:f6:42:0d:a7:f4:d6:4b:ab:8c:c0:69:
         a0:0b:a1:8a:b9:73:75:17:9d:ff:10:74:30:28:e6:be:10:e1:
         7a:31:4a:13:53:80:01:db:88:64:21:a8:8b:72:4b:70:42:94:
         1c:a1:d4:2d:3d:0a:46:57:e5:5d:61:2d:8d:9f:58:6b:0d:09:
         bb:64:02:15:e7:47:1b:40:6b:a3:de:80:99:7c:39:23:5b:c6:
         1b:b5:91:59:41:d7:52:d0:40:db:1f:33:b2:e9:fb:8f:e4:15:
         b2:5b:fe:7f:a7:1b:78:9c:7e:bb:57:d2:37:ee:dd:1b:e6:69:
         9d:55:29:11:18:c6:2c:44:03:b2:c8:94:81:c8:86:f3:18:55:
         e0:b3:18:02:16:b5:e6:55:55:55:7e:42:4c:3b:d2:09:a2:1c:
         af:b0:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:36 2026 by rpki-client