Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa
File:                     4349B44E6DE711F1BCBC7BF05BA30FBC.roa (raw, json)
Hash identifier:          JD1aPI73JLaEpdcBHYLIfnAT0px6Vx5cEfrWoHfyxZ0=
Subject key identifier:   B3:54:4A:B1:C2:C4:47:F9:EA:0A:DB:BD:E1:2B:33:55:F6:95:4E:18
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       05B0
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa
Signing time:             Fri 14 Aug 2026 23:44:30 +0000
ROA not before:           Fri 14 Aug 2026 23:44:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     963
IP address blocks:        103.70.76.0/23 maxlen: 24
                          103.71.252.0/23 maxlen: 24
                          103.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Aug 14 23:44:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7fa85e-1510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:f7:bd:ad:99:31:3d:bf:00:b5:35:41:8a:
                    2f:f3:41:10:68:0e:c8:4a:00:91:e9:25:eb:3a:45:
                    db:f5:df:4a:dc:e7:48:3a:bd:29:cf:48:4b:94:dd:
                    da:4b:a2:66:03:5d:74:aa:ab:73:fc:34:74:bd:f9:
                    66:63:2d:75:36:77:49:3d:17:c4:fe:07:83:6e:85:
                    28:3a:9f:d2:28:b3:01:00:2f:f5:66:c0:ff:2e:03:
                    be:40:ee:d2:c3:50:f3:f1:44:e2:b2:5f:a4:eb:e7:
                    ef:42:66:9d:21:31:af:6d:d0:ce:e6:ae:0b:ea:d5:
                    76:2b:cd:e5:9d:3c:d7:8a:c7:5a:fd:03:87:90:74:
                    01:59:b1:23:39:1a:4c:8d:6a:f7:ac:94:17:51:07:
                    eb:77:07:42:50:30:c4:e6:d5:de:0f:a5:e5:f6:46:
                    e1:0f:d7:8d:39:60:04:d6:9a:e1:13:8b:d7:9c:84:
                    7b:52:e0:f5:bd:60:51:7b:c1:cc:b9:64:29:47:ee:
                    5a:23:20:b1:fc:a3:86:a3:56:b8:bc:6b:46:94:5e:
                    b9:3e:8c:a3:44:a3:40:75:4f:bb:28:58:ad:68:0b:
                    37:a1:ee:e5:15:9e:0a:bc:b5:53:69:64:60:27:01:
                    db:88:3b:40:a6:37:3e:5e:ca:9b:48:aa:df:7b:0f:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:4A:B1:C2:C4:47:F9:EA:0A:DB:BD:E1:2B:33:55:F6:95:4E:18
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.76.0/23
                  103.71.252.0/23
                  103.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:d3:4e:e1:6e:1b:af:4d:2a:bc:72:65:a8:76:20:1c:59:
         82:b6:da:84:b2:5b:0c:22:c3:b3:f5:14:db:67:2e:a2:2a:6e:
         f1:df:d9:13:f5:8e:3f:a4:57:da:dd:95:d1:a6:24:88:22:43:
         12:ab:67:72:52:97:f9:ce:a3:b5:4e:fe:ab:bd:8c:2b:98:a0:
         08:5a:9d:54:1d:77:8c:4c:05:cc:66:0d:fc:0a:d1:11:0f:9d:
         8e:d8:dd:a5:49:0e:07:13:1a:6f:c1:e8:e4:98:50:2d:ae:08:
         f5:6a:80:e8:ad:05:bd:60:e5:c6:a3:a3:39:2a:72:9f:f9:55:
         26:41:c9:9c:e9:17:17:0b:f0:a9:67:d0:d7:4c:57:fd:d7:25:
         52:87:e2:3d:65:f5:26:d7:ba:77:90:9a:be:41:bb:b6:2c:8d:
         98:c8:ef:56:a9:62:17:04:36:bd:0c:b3:d6:c5:0d:75:40:e0:
         49:ce:11:42:cb:32:a7:00:00:93:54:1e:df:cb:ef:72:4e:d8:
         dc:00:e2:9e:1c:2c:0b:0a:83:86:ea:8c:85:95:f2:c9:0d:d9:
         58:9b:9d:ea:a0:7a:2e:76:29:f0:6f:a5:06:4a:2c:3b:6a:86:
         28:7c:0e:20:9f:cc:06:ca:a1:51:d6:89:80:b5:45:02:15:38:
         c1:6e:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:09 2026 by rpki-client