Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa
File:                     EA74C41E84D911EF9E11D46FC4F9AE02.roa (raw, json)
Hash identifier:          3lYOlPOEsGvMDlpSCEL0lC4I+BLuIPoKZMsYKUnntbI=
Subject key identifier:   8F:28:EB:B7:B3:9D:F3:83:03:06:C0:FB:85:24:0C:39:AE:51:8A:5E
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       0A84
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:39:56 +0000
ROA not before:           Wed 12 Aug 2026 19:39:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     30058
IP address blocks:        103.119.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692 (0xa84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: Aug 12 19:39:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccc0c-3040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:23:ab:be:4b:f1:5e:d8:f0:38:24:d0:32:
                    69:e9:03:6a:75:56:f8:df:d6:be:fd:2b:d2:19:04:
                    52:21:4f:67:8e:07:81:34:76:a6:d0:e1:5e:57:f0:
                    86:1c:e9:d0:83:1f:82:91:a0:8f:65:b8:9a:a2:85:
                    24:da:b5:8f:b8:3a:23:e2:92:c4:e1:7b:3c:a7:5d:
                    16:24:ee:d6:9e:39:db:8e:d3:96:1f:4f:85:f6:51:
                    78:95:ef:db:8c:1f:1b:eb:41:2e:77:54:18:76:2d:
                    80:30:23:f7:32:d2:2c:7d:36:13:33:e6:85:71:8d:
                    29:f6:38:f7:ff:6d:c3:d2:b5:d3:d6:2c:2f:54:e3:
                    16:e4:38:3f:8b:a5:23:19:79:d2:61:40:20:41:4f:
                    ff:26:d4:34:da:92:92:61:ef:23:9a:e8:d0:f0:14:
                    6a:20:ce:a8:d9:c0:61:71:05:17:cd:0f:5b:8b:71:
                    00:59:85:66:59:ce:20:45:1e:6a:fd:b5:33:f2:94:
                    c5:1b:66:50:d7:21:91:50:9c:31:45:39:63:23:1d:
                    ab:bf:cd:9d:f9:8a:b0:5f:1a:86:17:2a:fc:2f:a6:
                    8b:7c:a1:ea:d9:85:9b:45:cf:17:bc:ce:3a:d5:8f:
                    4a:3b:c1:2b:40:10:81:c1:eb:97:85:5d:5b:cb:f2:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:EB:B7:B3:9D:F3:83:03:06:C0:FB:85:24:0C:39:AE:51:8A:5E
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/EA74C41E84D911EF9E11D46FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:67:49:17:d8:17:12:e1:cc:c3:37:c6:f4:a2:01:f8:9a:
         37:26:54:08:da:7e:00:f8:64:ec:d6:36:ce:ec:52:dc:76:cf:
         e8:b6:00:f5:58:52:35:1a:db:c4:34:80:5d:51:db:86:f4:1d:
         ee:e4:82:af:ce:38:ce:fd:3b:52:d6:73:75:96:b0:d7:5f:2d:
         7b:ef:94:21:a7:9e:e2:68:3b:e1:11:ea:b6:72:2c:19:7c:57:
         da:5e:de:d8:8f:ad:4a:f5:7f:30:a5:bf:64:1f:d2:63:25:3a:
         2a:43:72:26:7d:12:64:80:26:a5:c8:f6:b6:11:01:a4:6e:24:
         04:80:60:82:78:2c:7d:7e:2d:f2:7b:c4:55:7e:e9:cf:17:90:
         7a:6e:da:84:4d:24:33:92:39:44:a6:2c:2d:e7:43:8e:ff:d5:
         20:87:23:18:b9:d8:59:4c:e8:73:c6:cc:f7:c3:6a:5b:e3:ab:
         cf:d8:84:bb:c7:5f:d6:3b:2f:45:f3:57:27:38:9b:1b:53:54:
         a1:29:73:79:c2:4b:ce:60:e9:3b:42:3b:58:54:84:bb:d3:e0:
         d7:a4:97:1b:9e:ac:0f:8e:eb:b9:5d:a2:07:99:ac:59:1a:e7:
         f7:76:f3:48:f1:bc:bd:18:8a:5d:84:48:0f:d3:30:ed:bb:a2:
         92:9d:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:47:51 2026 by rpki-client