Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa
File:                     4349B44E6DE711F1BCBC7BF05BA30FBC.roa (raw, json)
Hash identifier:          W4VTUgq67rZWrU2CJBNzJquqsoHRKqsWRj6a9yIxe/8=
Subject key identifier:   37:A9:7C:60:A9:8F:16:18:5B:42:50:7A:72:AA:9C:3C:CF:BA:25:E3
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       0590
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa
Signing time:             Mon 22 Jun 2026 03:05:46 +0000
ROA not before:           Mon 22 Jun 2026 03:05:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     963
IP address blocks:        103.70.76.0/23 maxlen: 24
                          103.71.252.0/23 maxlen: 24
                          103.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Jun 22 03:05:46 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a38a68a-2b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:df:40:d4:07:8b:14:ea:1c:64:d3:08:4c:
                    87:06:90:d5:bc:42:67:16:4e:99:38:23:c4:c7:18:
                    ef:24:6e:26:ff:c0:8b:fd:d9:d8:65:59:49:df:02:
                    9f:81:86:08:82:e6:16:7e:92:27:ec:a8:3e:40:dc:
                    c7:3d:0a:b6:c2:5f:9d:de:e0:83:dc:62:9b:03:04:
                    20:2a:f4:5c:9a:9e:c1:4a:f1:c4:9f:db:32:10:4c:
                    4c:97:4f:60:e6:a5:c0:a1:d2:34:9d:f9:fd:68:69:
                    28:b2:b0:4f:e6:aa:5f:d2:cc:d2:a7:45:14:97:20:
                    48:17:a4:7e:2a:14:b1:ef:0a:6d:f7:fd:8b:17:63:
                    7e:2e:09:d4:fd:96:a9:2d:0e:e6:7a:37:6c:cf:79:
                    84:ae:21:03:bb:2c:d9:91:61:a5:fc:e8:3f:b9:1a:
                    83:3e:46:eb:e3:87:8a:39:27:41:78:ad:7d:e2:0d:
                    6c:c3:84:77:63:54:cb:ca:d9:03:ab:47:de:de:1f:
                    68:83:25:be:79:57:90:10:0e:d0:90:fe:b0:aa:08:
                    a1:63:ee:9b:3e:3a:7f:c2:0d:3b:73:91:be:2e:44:
                    15:72:54:37:3d:da:75:ff:33:0c:d8:ee:8c:a3:bc:
                    39:27:5f:83:41:fa:41:ed:dd:21:9a:8b:c7:95:f4:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:7C:60:A9:8F:16:18:5B:42:50:7A:72:AA:9C:3C:CF:BA:25:E3
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/4349B44E6DE711F1BCBC7BF05BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.76.0/23
                  103.71.252.0/23
                  103.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:96:78:1d:27:1b:89:6c:b8:74:fe:d9:a6:07:a6:94:da:f7:
         75:46:32:31:28:31:f1:54:59:0f:3f:96:21:9a:05:6a:b5:5e:
         ab:51:11:2b:dc:39:d1:5f:74:75:8f:58:7c:b2:f2:a6:30:37:
         73:2d:5d:8a:04:2b:fc:31:80:67:e9:4d:3b:e6:54:b9:93:53:
         e8:9a:d6:40:98:56:4c:00:f2:9e:a9:2e:bf:d2:6c:cf:00:d6:
         d3:bd:ca:b2:db:d2:4b:75:7c:56:96:82:06:5f:d2:b9:b1:07:
         da:0d:ed:57:72:de:ea:6f:21:53:0f:6c:c1:fa:d7:c3:f9:84:
         87:ec:1d:c0:a8:93:ec:70:8f:0a:8b:c7:9e:23:94:49:74:24:
         60:17:f3:92:cb:7a:38:19:32:c4:67:6f:98:ef:e5:61:c6:d3:
         61:85:f7:45:3f:ce:95:6b:6a:22:b0:3b:c2:17:0a:ef:99:87:
         37:c6:99:26:88:1a:32:bf:38:e5:ba:f8:d5:78:85:3c:38:12:
         c2:d1:4f:09:a4:be:a1:d9:94:9a:e5:dc:51:53:4d:e2:5e:de:
         ea:cb:17:8b:d1:c2:6d:5d:3f:96:e1:82:9f:82:38:28:fa:db:
         9c:39:5f:21:bd:e3:52:05:07:50:c7:e6:af:97:5c:41:4a:bb:
         72:cf:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:37 2026 by rpki-client