Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/9436AC3668C711EE8C53A031C4F9AE02.roa
File:                     9436AC3668C711EE8C53A031C4F9AE02.roa (raw, json)
Hash identifier:          UKDPjI9WdhK3TxDp03my1LqNHeP49K9ROo6jRcr9k9A=
Subject key identifier:   6D:ED:80:40:D0:37:86:BA:8F:F3:BA:65:25:34:72:0B:8D:29:34:D8
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       022D
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/9436AC3668C711EE8C53A031C4F9AE02.roa
Signing time:             Wed 19 Aug 2026 03:52:34 +0000
ROA not before:           Wed 19 Aug 2026 03:52:34 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.38.221.0/24 maxlen: 24
                          210.79.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Aug 19 03:52:34 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a852882-9c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:01:f3:62:b0:e9:b5:48:d7:61:f2:7e:6c:
                    1d:73:3b:6d:03:c7:9b:9c:fe:bc:c0:ac:24:78:cd:
                    be:d8:20:fe:61:b9:d4:9f:27:1f:2c:e8:3a:45:81:
                    f8:64:94:e0:9f:33:32:3b:7e:e9:04:b7:ff:20:6f:
                    ec:84:e1:66:55:16:17:31:d8:b2:85:8e:3a:8c:58:
                    ea:f1:03:9f:cc:4d:a3:c0:39:5b:9a:d6:17:d9:a5:
                    af:01:d1:de:75:49:bb:a8:ad:6d:a3:bf:5d:53:89:
                    5b:a4:f1:55:6e:de:70:a9:50:96:a6:08:8d:f8:02:
                    db:ad:b6:44:f9:d7:37:73:16:1d:7f:94:e1:ca:4f:
                    06:93:83:3d:87:8d:6e:d5:0c:8c:ec:a7:5c:ad:30:
                    75:73:40:19:a8:21:c5:85:6f:80:37:23:16:df:c3:
                    b1:d2:3f:17:7f:54:65:87:58:3e:75:c0:1d:fb:4a:
                    ce:f4:32:75:ee:8d:2c:4a:25:cb:45:61:fe:64:1a:
                    4a:95:ab:86:2b:16:67:03:3d:25:ec:b4:bf:81:28:
                    f0:f9:a8:87:ae:b0:9f:a2:9b:bd:0b:a3:db:e0:3d:
                    0a:ff:fb:6e:0f:51:42:97:bb:32:c6:b8:9a:90:aa:
                    f6:74:f1:51:97:65:ad:12:f4:19:c9:7d:97:21:94:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:ED:80:40:D0:37:86:BA:8F:F3:BA:65:25:34:72:0B:8D:29:34:D8
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/9436AC3668C711EE8C53A031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.221.0/24
                  210.79.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:d5:57:33:68:fc:03:a1:6f:ca:82:6e:75:a4:67:de:45:
         ba:bf:6f:06:bf:d9:1e:ec:86:16:16:4b:25:67:65:ea:12:c4:
         54:11:26:7c:ee:fd:1c:6d:76:09:eb:9e:67:49:e3:d9:7f:34:
         d5:a4:8d:53:67:48:fe:54:a2:7d:3e:e8:7d:28:90:9a:13:78:
         45:72:fd:83:48:e4:83:0a:41:c2:c5:21:16:0b:a5:6f:da:b9:
         88:e5:89:ef:af:01:1a:cb:f6:e3:7a:f2:1b:1e:80:0f:0e:02:
         1b:99:76:9d:06:7f:6c:4a:bc:a1:22:0f:28:9e:30:a0:c4:48:
         70:d1:aa:44:cc:ab:18:ff:86:90:17:c6:eb:8d:bb:52:72:6d:
         5f:fe:24:40:ea:0d:f2:d6:40:3e:cc:9c:d7:f1:b4:5b:ac:b3:
         99:3e:1a:4c:cc:1b:bd:72:f6:6d:ae:72:19:63:fd:21:ea:ad:
         87:d1:fe:85:2d:6e:1d:ae:22:0a:c9:64:0c:e4:1f:86:ca:89:
         df:d2:32:c9:3e:a0:c3:09:33:85:64:78:f7:42:26:70:9c:e5:
         a9:d4:01:a8:85:80:4c:f6:a0:eb:3d:5e:4b:0f:21:db:70:6c:
         15:1b:03:0b:38:35:f2:f2:f4:e4:c4:5d:d6:1b:0f:91:d9:44:
         8f:36:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:07 2026 by rpki-client