Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
File:                     A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (raw, json)
Hash identifier:          DQfdj3ZMSPB3txDb1HLKXJybAJALB43rjOD3LqwaGkM=
Subject key identifier:   3A:2B:5C:2D:BB:78:68:B6:97:80:33:C4:C8:1B:A0:8D:E3:AC:DF:BB
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       05B1
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 23:44:32 +0000
ROA not before:           Fri 14 Aug 2026 23:44:32 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9744
IP address blocks:        103.70.76.0/23 maxlen: 24
                          103.71.252.0/23 maxlen: 24
                          103.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 23:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Aug 14 23:44:32 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7fa860-6edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7d:53:cf:83:77:93:f4:a2:e5:cd:93:a9:2f:
                    91:f7:2d:b7:5b:c9:b3:61:4d:cb:62:33:23:8b:ac:
                    e8:68:f9:31:4f:8e:18:0e:5e:ff:63:e1:7a:25:a9:
                    9d:61:f5:00:3a:fc:b1:d9:a6:c4:a4:22:d9:00:79:
                    d2:43:ff:10:8e:61:4e:4b:68:ff:4b:20:7f:ed:3b:
                    5d:21:d2:58:a8:a3:15:ec:b5:de:4b:8a:b8:86:49:
                    b3:f7:ab:72:3a:8f:52:45:bb:e9:ec:ea:a4:f4:8f:
                    6c:62:f6:19:05:0b:4e:7f:6e:ca:d9:1d:a7:fd:94:
                    00:20:3f:41:db:cc:8c:1f:15:30:3d:11:11:be:39:
                    ab:a3:73:0b:a7:c8:50:e2:d1:50:aa:47:a9:45:8c:
                    95:1a:3f:70:80:c6:1d:ad:b0:13:30:00:9a:f9:39:
                    26:69:58:91:8d:31:db:c2:92:1b:a9:f0:a1:e6:31:
                    08:01:f1:44:7d:08:38:86:06:41:9d:47:0e:52:49:
                    e0:71:f6:a1:f4:30:6d:5f:ed:4d:47:98:c8:b2:1a:
                    cd:ff:48:a0:48:d5:b6:83:f5:98:44:4e:32:88:c4:
                    3d:57:34:e0:7d:f3:2f:62:97:00:7a:ca:ea:4e:9c:
                    c3:70:f1:b9:4b:0c:04:17:9b:62:cc:ba:2d:04:73:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2B:5C:2D:BB:78:68:B6:97:80:33:C4:C8:1B:A0:8D:E3:AC:DF:BB
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.76.0/23
                  103.71.252.0/23
                  103.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:e5:fb:01:3d:f1:1d:eb:a5:3f:ef:a4:7f:70:63:1f:9d:
         85:be:7d:eb:31:df:e7:b7:7d:8b:56:03:d7:9b:67:52:46:20:
         64:5d:34:5d:20:95:33:ab:c9:c4:0d:62:26:76:30:21:66:30:
         e6:c2:b8:76:9a:09:61:e4:49:f7:cc:60:02:5a:e8:76:90:9a:
         b1:ef:61:19:2b:bf:19:27:fb:3e:70:f4:6c:0b:04:f6:26:9a:
         3c:8d:df:ae:78:e9:91:c8:1f:6d:87:7c:ac:24:d2:3b:09:90:
         e7:62:9e:06:27:20:fd:da:05:9a:35:8c:7b:6a:1d:bb:ff:5a:
         f0:f4:e5:f8:da:0a:b6:7e:7c:1f:89:79:3e:f0:73:99:97:09:
         74:09:e1:1c:b9:f6:5c:24:49:06:f4:75:ba:54:cf:06:0a:f6:
         26:0e:e4:f0:c3:02:57:73:94:1e:09:51:9b:c4:9d:f3:ae:f1:
         dd:d5:a5:a2:e3:82:fc:81:59:81:d8:28:dd:7e:c8:d5:c6:12:
         87:db:5d:d8:96:4e:f9:4e:11:f2:70:33:40:f5:a4:7b:9f:12:
         e4:65:b1:fa:9a:a4:93:03:cf:5e:db:38:e5:ac:32:98:b8:1c:
         0d:a3:b1:74:fe:d5:7d:24:97:9e:42:37:3b:c9:3d:ba:bc:75:
         e4:fa:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:46 2026 by rpki-client