Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa
File:                     C7931B408F0311F187185ABA6C11F970.roa (raw, json)
Hash identifier:          y6KQZyrD1itYBTLw4be7ldFpP26gSyuCMjmo3qhvXaw=
Subject key identifier:   EA:72:1F:5A:FC:2A:7C:47:29:5E:BF:95:33:D8:99:4A:49:2C:C0:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FA2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa
Signing time:             Mon 03 Aug 2026 06:23:02 +0000
ROA not before:           Mon 03 Aug 2026 06:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150596
IP address blocks:        45.123.9.0/24 maxlen: 24
                          45.123.11.0/24 maxlen: 24
                          103.38.200.0/24 maxlen: 24
                          103.38.201.0/24 maxlen: 24
                          103.77.42.0/24 maxlen: 24
                          103.77.43.0/24 maxlen: 24
                          103.83.145.0/24 maxlen: 24
                          103.110.16.0/22 maxlen: 22
                          103.110.16.0/24 maxlen: 24
                          103.110.17.0/24 maxlen: 24
                          103.110.18.0/24 maxlen: 24
                          103.110.19.0/24 maxlen: 24
                          103.110.180.0/23 maxlen: 24
                          103.134.114.0/24 maxlen: 24
                          103.141.91.0/24 maxlen: 24
                          103.168.177.0/24 maxlen: 24
                          103.176.176.0/24 maxlen: 24
                          103.188.127.0/24 maxlen: 24
                          2400:e9a0::/34 maxlen: 34
                          2400:e9a0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64044 (0xfa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug  3 06:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7033c6-6daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:ba:1e:92:4e:01:6e:cb:f6:60:9c:e1:4c:
                    4d:1a:09:b1:1a:3c:89:53:c0:29:7a:bf:12:8c:0c:
                    1f:f0:02:1b:9c:34:92:4d:0b:52:93:fa:cc:6b:c8:
                    e6:39:39:5c:d9:e8:e4:6a:0a:49:be:31:47:57:aa:
                    fe:f5:b0:d5:68:b9:2c:ee:ec:71:7c:93:b2:6a:d8:
                    20:55:ea:dd:9f:0b:80:ce:3d:f7:8b:cf:88:0a:ed:
                    d5:16:28:2b:1c:fb:e7:a6:79:c4:90:0a:83:fd:09:
                    73:4d:75:9c:ff:82:3b:72:7d:11:96:01:f9:95:4d:
                    94:7e:80:95:62:5a:80:77:c4:8e:cd:e1:fa:be:08:
                    39:27:77:e1:f3:bb:75:b7:ad:18:dd:10:c8:ba:ed:
                    90:e4:6f:77:b1:55:da:bb:cb:56:cb:fa:61:c6:9c:
                    05:72:53:08:40:30:98:b2:e1:b1:87:0c:8d:41:8f:
                    f7:75:4a:7a:89:ed:0d:9e:a5:ea:35:e2:55:34:95:
                    70:a7:fc:e1:d2:04:ba:97:7b:4c:2f:fc:c2:e2:af:
                    8f:7a:a3:ba:0f:e3:56:99:2a:2c:d1:92:67:e1:9c:
                    64:0a:d8:5a:7a:9b:e6:1f:04:e1:31:9d:5b:4a:ac:
                    2b:bf:73:e8:74:9a:be:bf:31:d7:78:f3:64:d2:96:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:1F:5A:FC:2A:7C:47:29:5E:BF:95:33:D8:99:4A:49:2C:C0:9A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.9.0/24
                  45.123.11.0/24
                  103.38.200.0/23
                  103.77.42.0/23
                  103.83.145.0/24
                  103.110.16.0/22
                  103.110.180.0/23
                  103.134.114.0/24
                  103.141.91.0/24
                  103.168.177.0/24
                  103.176.176.0/24
                  103.188.127.0/24
                IPv6:
                  2400:e9a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:e7:92:2c:22:d2:e7:e2:58:b5:27:ca:0f:2a:e8:ca:b1:
         49:5a:9e:16:3d:8a:b7:d8:df:3b:b0:ec:27:b5:67:d5:4e:bb:
         17:59:9a:ec:6b:04:93:a0:29:e2:1b:af:a3:92:2f:fb:76:27:
         0e:35:09:4c:23:79:96:d3:ae:5d:4d:7b:9c:31:0a:36:09:47:
         54:19:a5:fa:15:9f:ed:46:59:ef:73:bb:10:df:1a:e0:28:9e:
         e8:14:7f:d0:ad:4c:c5:e7:67:4e:20:b4:24:7f:49:08:07:50:
         c8:42:5d:89:1d:80:af:57:c8:d6:14:2e:69:63:d0:9b:cf:d4:
         8d:eb:0b:55:11:1a:29:b7:b8:e8:93:2a:ec:99:e0:c7:21:e4:
         f4:4e:32:c5:35:60:a5:02:d2:7b:81:30:42:e3:40:af:b8:52:
         5c:b2:8e:46:41:28:5a:b4:46:35:c5:3f:f7:8e:6c:d7:a4:0a:
         1c:e1:0a:bb:8f:6b:88:72:47:4b:b8:11:04:59:09:fe:8c:c5:
         c9:a8:78:61:0b:ee:d0:1a:36:65:19:5c:45:9c:c0:d3:f8:8f:
         08:a7:e3:71:57:5a:02:c9:d4:82:b8:99:4c:01:86:b4:10:b9:
         f0:24:90:75:5e:00:60:cf:af:cf:e1:16:82:69:59:07:27:70:
         30:b1:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:22 2026 by rpki-client