Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa
File:                     0A3499FA6D4011F18402C72C7347A888.roa (raw, json)
Hash identifier:          IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=
Subject key identifier:   92:90:95:DB:F6:23:14:A6:0F:8C:C4:28:BA:B6:32:D4:57:62:49:4C
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       08
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa
Signing time:             Sun 21 Jun 2026 07:08:44 +0000
ROA not before:           Sun 21 Jun 2026 07:08:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        103.219.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Jun 21 07:08:44 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a378dfc-b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:34:d0:d9:74:ae:3d:88:03:42:6a:41:ef:
                    be:fe:68:ce:69:bb:2e:8f:8b:de:97:39:af:ea:36:
                    cc:5f:8d:ce:0f:e6:d8:6b:38:f9:ad:cf:de:b0:b4:
                    cb:b9:58:b8:fd:5b:93:13:22:4e:f3:d4:01:5f:4a:
                    80:44:a6:e0:43:cf:76:cd:09:d2:f8:e8:6a:54:8f:
                    da:5e:0d:d1:c7:4d:ae:28:e7:f0:ff:e4:61:4b:5a:
                    c2:00:b0:9d:74:fb:a2:ef:00:08:cf:b9:b4:32:40:
                    20:e9:cf:cf:0a:dc:82:cd:e4:3c:f7:fd:1c:fe:83:
                    cc:68:95:d1:d9:16:ec:cc:ce:14:96:b3:63:8d:8f:
                    db:a6:5f:bc:10:86:4b:cf:d1:bc:b8:91:53:6e:fe:
                    69:87:56:ab:dc:3b:cb:c7:4f:f7:57:78:7a:cd:a0:
                    cc:53:70:90:3b:14:73:dc:30:8c:4b:16:20:9d:3e:
                    13:e8:b6:57:a6:57:e5:28:a3:71:ac:34:67:31:be:
                    f2:94:01:50:83:05:56:45:f6:ff:8d:92:fc:6c:7a:
                    6b:0f:3c:0e:58:9a:d1:f3:47:2d:15:70:ff:2a:51:
                    89:84:b8:1e:00:ba:97:86:89:5b:ab:43:ed:fb:29:
                    88:20:3b:ee:89:cc:ca:b2:8d:7b:bc:c4:0b:5b:e3:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:95:DB:F6:23:14:A6:0F:8C:C4:28:BA:B6:32:D4:57:62:49:4C
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:10:2e:d2:98:c0:d8:c4:52:07:7b:1f:1f:dd:f0:57:d0:
         f1:e4:fc:9b:a9:10:e0:b9:09:39:7e:9f:d0:4f:0b:0b:fa:5f:
         50:ea:c4:1f:2d:a0:2f:87:b9:f9:c6:ca:cc:fb:d0:f4:f8:b0:
         52:03:96:bd:16:ae:30:12:2b:29:c6:5e:43:21:39:61:18:d9:
         ef:36:1d:21:e5:64:fa:23:8d:39:ef:65:6b:f8:01:46:c6:0d:
         b9:75:4f:30:77:56:fc:13:33:43:f7:9b:c1:da:fe:fb:e2:c9:
         fc:be:88:82:8a:35:75:3b:9a:bd:b1:12:d5:3c:7c:5d:89:2e:
         8a:cf:7f:9d:c9:90:4c:b2:63:21:55:a5:be:df:cb:3e:94:bb:
         14:3c:df:72:05:56:f9:d2:77:02:e7:48:ff:7d:f8:e5:0d:79:
         56:98:18:cd:8a:73:3d:45:ea:f6:99:2f:c7:57:fe:78:dd:7e:
         b4:6e:a5:51:25:58:c3:04:4b:c2:3f:6f:aa:e5:62:61:20:cf:
         ab:75:d0:7f:cf:ce:90:d9:22:e1:8a:ff:b3:10:3d:75:ba:34:
         5b:aa:ca:50:cc:d1:d9:2b:f5:24:ac:21:aa:ae:b2:c4:ef:7d:
         23:05:bf:13:fd:b4:23:a4:c5:fa:48:2b:39:51:07:8c:f3:75:
         cc:e5:1a:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:53 2026 by rpki-client