Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/0A00EE7EC2A711EAB8D9B426C4F9AE02.roa
File:                     0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (raw, json)
Hash identifier:          H3+A7JRMn0Y4opcR4dnJqIUANFuNRsgpNLz/c13851s=
Subject key identifier:   70:B8:13:54:C0:EC:16:B4:FB:B0:3F:4E:48:49:DF:80:2B:EF:FF:84
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       0991
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/0A00EE7EC2A711EAB8D9B426C4F9AE02.roa
Signing time:             Mon 24 Aug 2026 20:39:52 +0000
ROA not before:           Mon 24 Aug 2026 20:39:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.153.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 20:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449 (0x991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Aug 24 20:39:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cac18-4452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:2b:78:64:a7:2d:ff:6a:65:b7:d4:5e:08:
                    f0:31:38:2e:4a:52:3a:10:29:53:55:54:70:f6:27:
                    8a:b9:81:73:2f:dd:87:d2:43:72:73:21:40:9c:d3:
                    36:21:63:e1:e7:82:f3:a4:41:8c:98:ba:6f:29:40:
                    21:26:45:ac:4a:5a:ae:48:9c:0c:8c:79:a3:d2:a2:
                    04:c9:92:9b:f1:06:36:de:18:ba:a8:15:27:04:4e:
                    1f:b7:42:40:b8:90:6c:ab:eb:2a:e8:82:80:20:eb:
                    59:ac:52:a4:56:79:f3:76:64:15:a6:44:81:c6:b0:
                    9e:0f:af:c7:2e:74:78:b3:4e:3f:ed:f3:90:63:1b:
                    13:02:6e:6a:37:b5:d4:33:39:39:c4:3d:be:21:c5:
                    7a:8e:d5:bc:bf:c7:00:0b:c8:2f:c9:1f:35:6b:d2:
                    05:16:a2:8e:1f:52:28:4b:a3:c5:5a:6a:b9:24:8a:
                    ff:8d:cb:38:db:0e:c2:4b:db:1d:e6:fd:73:90:11:
                    8f:73:0c:bb:e4:08:09:8d:93:c4:0b:08:73:81:5c:
                    67:68:51:ff:49:48:66:12:91:89:54:84:77:63:15:
                    89:3b:4d:d2:5c:7f:4e:cb:39:3d:8e:30:ce:e8:00:
                    ce:5a:df:6c:08:4e:47:0c:d2:79:5e:cd:67:3d:47:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:13:54:C0:EC:16:B4:FB:B0:3F:4E:48:49:DF:80:2B:EF:FF:84
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/0A00EE7EC2A711EAB8D9B426C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:d6:c8:40:9c:59:96:24:95:21:42:d4:d8:39:e1:38:93:
         9b:50:36:2a:70:0e:da:6d:8f:3c:0f:7e:cc:44:3c:f8:38:66:
         1f:20:46:bc:b5:9e:24:ee:33:b2:da:75:4b:d0:f0:d8:0d:81:
         91:14:66:73:23:ed:bd:0e:46:90:b6:0c:24:9d:9d:0f:fd:9b:
         40:1e:c1:a2:7f:4c:14:62:23:2a:80:75:6f:32:08:08:46:de:
         72:64:52:ac:61:5f:b2:56:62:40:bb:9f:7d:ed:38:ed:bc:92:
         55:07:7d:9a:0a:18:2d:2e:91:47:1d:ad:fb:a8:86:c1:d1:9c:
         10:47:54:2a:fd:fd:41:da:b6:bc:3a:f9:72:4d:5d:fe:47:1a:
         28:1d:6c:e8:05:7c:92:09:6d:22:bf:44:fc:e6:d2:95:55:8e:
         b5:19:31:15:c5:c7:dc:15:04:86:3d:c4:d7:34:e7:88:7d:c3:
         0b:36:4e:82:0e:f6:64:e7:08:58:4e:84:be:da:bb:f1:f0:95:
         61:1b:df:cd:4a:b1:1c:86:24:c8:ce:a1:92:4d:27:0d:cb:90:
         d2:73:24:3e:1f:3f:85:25:03:33:d8:5b:b2:9f:19:7c:a5:65:
         58:9a:49:f9:62:c9:a3:92:5e:20:1b:8c:5a:3b:f8:03:04:ff:
         89:18:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:29:40 2026 by rpki-client