Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa
File:                     4394064223D511EF9AB13E4FC4F9AE02.roa (raw, json)
Hash identifier:          La95cfkXO4lYTQsVMyLpeifDr1h7KLdweCa/JBZ8Wlw=
Subject key identifier:   D1:A7:BA:75:71:79:2D:49:11:83:50:01:80:DA:C4:39:05:B1:F0:87
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       0199
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 05:53:09 +0000
ROA not before:           Fri 31 Jul 2026 05:53:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24183
IP address blocks:        103.111.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Jul 31 05:53:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c3844-9fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:60:09:88:97:85:87:5c:53:aa:54:65:62:
                    f6:b3:5b:0b:00:86:25:ea:4d:a1:84:38:50:bd:6e:
                    32:67:96:51:cf:eb:b1:9f:95:fc:c6:88:c9:c7:c2:
                    e6:5e:da:62:b4:f4:a9:30:a2:09:f6:a5:4a:66:34:
                    df:bd:3d:70:03:43:1c:be:82:63:c0:5e:c3:73:fd:
                    9a:f8:b5:3b:e4:0b:49:3e:79:a8:ca:59:94:b2:9b:
                    25:37:86:e4:22:0f:e6:35:04:49:31:10:8e:92:47:
                    3b:d8:92:6c:c7:a4:00:04:5b:1b:ea:14:cc:a1:2d:
                    13:2e:71:bd:62:4a:3a:66:fc:9d:78:0b:a1:32:6c:
                    26:8e:7a:0d:22:3e:a9:be:bf:79:22:79:c3:06:83:
                    7f:8a:87:7f:69:13:d6:ac:8b:36:45:2d:2c:b0:02:
                    f4:07:d1:d6:dc:4a:ec:9e:84:79:fb:4e:1f:5a:bc:
                    b6:dc:8e:c4:70:6c:96:95:34:2a:23:5c:58:1b:c9:
                    60:45:c1:3c:35:46:d8:d9:50:6f:95:cb:b1:ca:85:
                    c4:e1:17:7a:34:fd:c2:55:eb:67:97:26:a6:a5:0c:
                    bf:e5:26:87:83:39:65:3c:55:02:0c:06:df:a7:26:
                    ad:23:b0:25:49:6e:34:dd:8a:92:a8:d9:90:53:23:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:BA:75:71:79:2D:49:11:83:50:01:80:DA:C4:39:05:B1:F0:87
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/4394064223D511EF9AB13E4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:25:fe:fc:7b:8c:57:39:f2:61:d1:e1:ef:5a:a3:68:9a:05:
         5a:37:5d:d4:ce:d3:1a:1a:e7:47:96:75:64:6f:28:8d:d0:40:
         17:b6:22:f5:2a:d3:19:0d:56:c6:4e:64:44:b7:33:42:2b:83:
         7a:69:8a:0c:49:d6:a3:20:7e:6b:4e:b8:8c:c5:01:b5:17:a0:
         83:aa:4d:8c:00:c7:4e:7d:1e:a1:e3:e1:eb:74:59:55:a8:37:
         a8:5a:49:74:9d:53:74:82:0c:ba:0e:cc:d7:c8:e6:c7:21:61:
         bd:d7:8e:e8:7a:6f:47:f3:5d:83:b6:4b:9a:36:9f:a4:01:34:
         95:e9:54:8b:ba:9d:f0:8b:4c:27:77:70:26:3a:60:3e:6c:ef:
         78:fa:db:9e:57:61:e3:3f:e6:3a:20:bd:dc:4a:cb:0c:ee:8b:
         de:af:d8:2e:dd:ba:a5:5b:75:b6:3a:c4:50:33:40:bd:e4:1c:
         1e:18:79:9f:8e:13:0d:41:9c:3c:43:78:9d:56:26:a6:51:e7:
         51:90:68:8f:5b:31:45:05:e4:a7:f5:9c:4c:df:9b:6c:be:87:
         f5:a0:7e:bd:66:20:01:a5:18:d4:1d:01:e0:a4:60:44:67:c2:
         f1:d8:d2:a5:2b:d5:e2:0b:91:a0:e0:f2:29:d0:95:a0:e2:4e:
         1d:ef:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:09 2026 by rpki-client