Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
File:                     39E77242050B11F097AB4F3BC4F9AE02.roa (raw, json)
Hash identifier:          MbYBLk6PY90noXEw9Wp2mq7a1huC8ky0jg5agxHD+Ys=
Subject key identifier:   83:05:A6:BF:33:30:F6:F6:D4:9E:AF:23:70:84:90:E6:B2:3C:69:68
Certificate issuer:       /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
Certificate serial:       0116
Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 07:55:37 +0000
ROA not before:           Wed 05 Aug 2026 07:55:37 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     18214
IP address blocks:        103.158.33.0/24 maxlen: 24
                          203.153.9.0/24 maxlen: 24
                          203.153.10.0/24 maxlen: 24
                          203.153.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl
                          rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6
        Validity
            Not Before: Aug  5 07:55:37 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72ec79-8150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:5b:bc:ea:d0:3e:f7:11:24:84:7d:6b:52:
                    66:f4:e7:83:d0:80:89:b5:63:bb:6d:33:20:2e:aa:
                    9e:3f:c0:37:78:3a:d1:f6:29:69:29:50:ed:2f:30:
                    54:0b:4d:7f:46:44:21:39:64:84:bf:52:bb:d2:f1:
                    f3:30:7b:34:66:ac:31:c0:01:32:3c:16:8b:30:f3:
                    7c:b0:c2:88:43:48:ac:d6:1e:56:b6:c0:45:c2:f2:
                    c7:10:87:f7:6d:f8:27:6d:02:16:b9:37:c9:57:52:
                    3a:ab:67:b0:ae:5c:b4:8d:7d:29:88:1d:45:64:b9:
                    e1:97:df:cf:02:42:c3:d7:e2:a4:77:b4:5b:22:26:
                    4d:c8:b0:36:6e:c0:90:2b:5e:ce:fd:f8:6a:89:a4:
                    82:8f:a1:4b:9e:77:5f:0a:5b:02:e5:8d:cc:cc:4e:
                    bd:73:a6:f1:af:e6:f7:95:6e:64:be:3c:d9:e2:f3:
                    7b:3d:e8:84:cf:fa:46:0e:6e:30:88:25:7b:93:b4:
                    ed:4d:cf:4a:42:77:39:f3:4b:3b:67:1f:d8:90:32:
                    45:72:dc:44:dd:21:00:20:94:8b:45:4f:70:09:b4:
                    06:2e:f2:68:26:b2:24:49:4b:b7:5d:4e:4a:53:b6:
                    3a:e6:0f:f1:1d:6b:ec:10:32:88:ff:90:db:61:cc:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:05:A6:BF:33:30:F6:F6:D4:9E:AF:23:70:84:90:E6:B2:3C:69:68
            X509v3 Authority Key Identifier:
                keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/39E77242050B11F097AB4F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.33.0/24
                  203.153.9.0-203.153.10.255
                  203.153.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:64:8b:08:a2:82:e3:56:e8:c9:4e:fc:0f:51:9c:07:8a:
         37:da:b6:13:23:f3:f5:4f:a0:a3:3f:87:6c:b5:ce:61:28:e8:
         3b:fc:ae:1f:a6:8a:14:c3:6d:29:b7:37:87:9c:93:03:ef:21:
         94:eb:01:d5:a2:ae:2c:7a:fe:79:09:8e:d6:cc:6d:78:87:8a:
         26:70:99:fb:52:b3:88:6d:93:88:0e:27:86:07:55:77:81:0e:
         e1:75:df:aa:c4:da:1b:9f:ec:9d:d1:7a:87:4e:33:6b:20:2b:
         00:24:4b:f6:5e:3c:3c:38:6a:4a:ce:c4:98:36:98:ad:f9:b4:
         75:4a:0d:27:c4:db:86:d1:a3:ca:ab:57:72:d0:a4:46:96:32:
         43:1e:51:59:8f:8a:2f:2b:46:21:ed:cf:14:f3:06:25:f0:8a:
         18:89:91:57:fa:5f:9d:06:54:bc:7d:60:8e:f9:b7:26:0b:d5:
         39:b6:f8:f1:42:a5:ef:27:00:16:d1:73:5a:41:f0:98:14:01:
         40:a1:23:d5:ce:f3:c0:a0:72:cb:2f:61:61:f9:e7:0b:30:3f:
         30:f5:f2:f0:3e:9d:ca:4e:5f:57:a6:65:9e:5f:f7:c1:25:67:
         3f:7f:5c:4a:52:ae:ad:2e:80:66:4e:90:0b:72:5e:35:b2:ed:
         bf:8a:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:04 2026 by rpki-client