Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa
File:                     A8EF2B58A89A11EFA52A9970C4F9AE02.roa (raw, json)
Hash identifier:          YXsyQGuuH2Ze8ICIsxBPXxxceEa4kPbLyKBkakXaFe0=
Subject key identifier:   B7:56:73:8C:BD:0F:68:8A:AF:D4:51:EE:A4:45:F6:48:7C:28:5C:7A
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       012D
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa
Signing time:             Sun 31 May 2026 02:32:51 +0000
ROA not before:           Sun 31 May 2026 02:32:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136969
IP address blocks:        103.188.92.0/23 maxlen: 23
                          103.188.92.0/24 maxlen: 24
                          103.188.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: May 31 02:32:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1b9dd2-99bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:34:bc:db:39:be:15:e8:af:21:9e:1d:65:
                    17:28:39:68:df:fc:d9:52:08:c1:c0:89:a2:b6:c4:
                    fc:0b:1f:68:9c:3c:86:e0:22:65:4c:00:32:ad:01:
                    2c:23:3c:2d:d1:3c:7a:4a:86:76:1f:7d:08:33:94:
                    1c:68:24:54:6d:5d:72:65:57:a9:e2:f2:0e:ff:cd:
                    7f:87:97:c6:09:54:5b:8b:52:a8:aa:6e:77:87:92:
                    f4:f3:44:ca:b2:cd:35:7b:c0:79:e2:2c:cd:70:4f:
                    41:91:54:62:c5:7a:c7:f2:dd:8f:fc:b5:13:d3:1b:
                    dd:34:32:18:13:9b:e9:de:cd:ce:9f:73:51:37:0e:
                    d9:23:b5:23:01:62:9d:50:a2:63:a8:8e:fd:d1:b0:
                    ab:4a:23:c5:0b:4b:80:22:7a:3a:91:77:26:dc:71:
                    cf:4d:34:52:c1:a4:21:59:aa:35:5c:cd:43:82:20:
                    23:39:43:15:f3:c9:8e:ba:ef:fa:0a:21:0b:1e:a4:
                    cd:30:3f:81:88:27:65:03:39:3f:ce:67:36:d7:b8:
                    05:90:41:da:27:69:79:79:db:f3:6e:41:82:34:87:
                    ae:37:31:eb:6d:3d:b9:2a:2d:06:b9:dc:8b:81:a0:
                    30:e8:3b:66:0c:d4:77:39:ff:a8:eb:d3:a2:0b:75:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:73:8C:BD:0F:68:8A:AF:D4:51:EE:A4:45:F6:48:7C:28:5C:7A
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:98:28:d5:85:76:9e:fb:ed:51:c5:92:4e:46:b5:80:22:22:
         aa:38:16:cb:da:27:3c:60:31:eb:64:f2:6d:18:28:e1:f8:b5:
         86:61:b0:7a:73:bc:b5:5f:02:f4:ce:6e:00:49:30:4d:8f:b5:
         1d:f3:d8:19:22:f2:fa:90:65:89:1b:6f:a3:e9:a0:5d:00:1e:
         30:cf:9e:f8:64:c0:e0:83:a3:35:f6:7b:6a:38:e8:28:3f:77:
         c3:12:39:3c:e9:a6:df:28:f5:87:14:c9:25:8a:25:28:d1:e2:
         73:e8:80:f3:54:12:f1:13:48:31:be:39:db:8f:45:07:16:5d:
         67:ee:e2:6c:b8:f5:3e:82:4a:43:85:85:81:40:9c:aa:84:01:
         77:c2:7f:ac:34:a0:a1:f1:b6:31:01:c9:a0:f9:4a:cf:17:d8:
         ac:c3:3c:a2:15:35:34:8d:ff:ae:7c:b7:c5:c3:cf:74:29:79:
         fa:18:93:0b:ea:40:e5:87:06:d8:24:2d:00:55:2f:f6:c2:bd:
         68:68:62:48:90:cc:ef:08:43:04:2e:06:6d:55:03:32:17:9a:
         e0:a4:e9:f7:e7:9d:09:00:a6:bf:fe:2e:a8:fe:91:c1:49:e8:
         9e:6f:58:78:d3:5a:60:db:cd:99:5b:25:c7:45:f5:d2:68:33:
         6f:0c:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:46:50 2026 by rpki-client