Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa
File:                     A9B82544A89A11EFA52A9970C4F9AE02.roa (raw, json)
Hash identifier:          psoO2BLrExNk6Ptac6irx+nwhXlCwJxTz4TVI5iUiOk=
Subject key identifier:   BD:8F:37:0D:D4:D9:19:2B:4D:09:EA:E8:69:1B:D7:DC:90:BA:43:A6
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       012E
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa
Signing time:             Sun 31 May 2026 02:32:54 +0000
ROA not before:           Sun 31 May 2026 02:32:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142300
IP address blocks:        103.188.92.0/24 maxlen: 24
                          103.188.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: May 31 02:32:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1b9dd6-5b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:2c:3b:75:e3:2a:10:ad:0a:d0:f2:66:bb:
                    af:9e:f7:ac:0a:fb:48:0a:5b:54:0c:7f:b0:2e:7f:
                    02:dc:6c:aa:7a:c2:66:9c:1a:3a:d0:e5:3f:f6:ea:
                    ca:18:2f:a5:bb:3d:96:d0:64:e0:ec:0f:7d:4d:12:
                    c3:0c:ee:97:d9:9f:ae:93:c5:5b:2c:8d:ff:3c:fe:
                    f1:92:43:32:43:d5:4c:de:6b:6c:cc:49:4e:6d:d8:
                    d7:a1:a6:dd:0f:8e:d7:ce:82:77:c8:b9:5e:ed:8a:
                    bb:c1:78:ef:2b:fb:64:ef:69:5e:81:5c:c3:5b:68:
                    cc:19:9f:37:66:5a:d3:9e:3a:8a:28:87:74:33:00:
                    d5:31:a1:ff:b3:c3:25:f1:89:f4:11:b0:8a:16:fa:
                    b8:0b:19:9d:b9:7a:01:93:9a:72:26:a4:97:57:2f:
                    da:47:b6:67:f3:17:bc:e8:60:fc:58:59:0d:56:31:
                    bc:a8:7e:12:63:78:e4:ff:23:c7:27:98:f1:40:6e:
                    fc:c5:ff:86:a3:7e:1f:84:7a:1c:c4:75:30:2f:68:
                    d4:02:0c:73:7c:74:cb:b3:8e:e8:08:42:46:30:b9:
                    ee:2f:dd:23:96:16:c8:6c:73:7f:07:a0:86:e8:ea:
                    63:84:5e:bc:e6:f3:c8:14:65:c4:36:12:cc:45:09:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8F:37:0D:D4:D9:19:2B:4D:09:EA:E8:69:1B:D7:DC:90:BA:43:A6
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A9B82544A89A11EFA52A9970C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:9c:f4:a8:a4:a8:01:78:de:f5:7d:7f:cf:cf:2e:5c:32:
         00:35:0e:61:1a:58:2a:79:8e:30:46:56:eb:a3:e3:0b:e0:5a:
         65:f9:f9:bf:7e:05:25:fa:ab:dd:8a:0e:de:e7:2b:e5:0c:4c:
         56:d4:7c:33:e5:f3:bc:52:79:d5:a2:e0:1b:5e:dd:e5:77:0a:
         50:22:f8:12:29:4c:52:ad:75:8b:e7:33:a4:49:c2:71:40:d5:
         5b:33:41:17:72:5e:56:d6:91:ad:fc:34:0c:50:2d:cc:ce:87:
         e2:19:61:97:49:17:d9:74:f7:61:56:28:e1:d1:28:c7:d8:02:
         91:f4:80:5b:e1:fd:92:93:df:a7:c2:26:c4:62:6e:99:de:fb:
         fa:1c:d0:31:8c:67:4b:3f:89:6d:2e:9a:4c:d9:05:c7:8b:03:
         23:c6:a2:15:43:e8:1a:6f:8f:2f:b7:51:e1:a3:c2:9a:fe:06:
         c1:56:c3:5c:f9:0e:79:8b:88:ce:71:75:c6:0d:1b:8a:a3:df:
         89:b6:ae:68:76:27:c0:b1:a5:93:7b:1a:42:c8:12:9c:1e:95:
         3c:b6:5d:20:ae:d0:05:d1:ac:bb:6d:2e:af:f7:1d:1b:bb:77:
         9e:9d:be:eb:5b:68:65:44:e8:21:09:04:6b:0f:45:ae:e4:01:
         2b:68:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 23:04:15 2026 by rpki-client