Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/24FAF688782911F0AFFBC961C4F9AE02.roa
File:                     24FAF688782911F0AFFBC961C4F9AE02.roa (raw, json)
Hash identifier:          yciUDDD/LAwvIfzlyMKdXRVsw2EraED3Doyb4sHdJn4=
Subject key identifier:   DB:26:35:F6:40:A4:09:C0:70:3C:75:3A:16:C2:EB:E1:1B:BE:2C:8C
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       149C
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/24FAF688782911F0AFFBC961C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 17:21:20 +0000
ROA not before:           Tue 30 Jun 2026 17:21:20 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     213607
IP address blocks:        103.116.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5276 (0x149c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jun 30 17:21:20 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a43fb10-3758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:55:5b:78:cf:fc:29:3d:aa:b1:90:78:36:
                    d4:3b:64:78:26:82:b7:1a:6d:64:2a:80:39:b4:05:
                    4f:46:67:a5:00:c5:35:3d:fc:7a:e8:35:f1:9f:f8:
                    50:c0:f3:3b:5b:fc:71:86:03:6b:d5:e6:93:b6:91:
                    55:03:07:43:58:37:70:6a:e0:cc:33:c3:0f:1f:a4:
                    a2:22:87:bd:f1:c5:9e:31:33:6a:5d:e2:eb:46:d2:
                    4a:83:89:21:72:6e:f0:d8:3b:03:7f:51:b1:58:82:
                    7e:f6:bc:6d:13:a9:e0:4b:ac:27:54:86:53:8f:ab:
                    54:00:f5:63:1b:69:25:e7:3f:23:62:22:bd:bb:54:
                    5b:a7:fb:2e:3c:86:4b:91:2b:d6:28:91:ea:9d:47:
                    ff:1f:dd:3f:a6:a2:5c:c6:fc:d2:42:9b:db:a5:bf:
                    3a:7f:ed:9a:c0:c9:1a:c2:b0:31:73:fe:48:e8:03:
                    bd:67:c1:d5:88:9e:33:ab:4d:07:6b:f2:6a:01:3b:
                    d1:32:b5:33:42:f0:9b:95:99:6e:d7:2e:9c:c6:a6:
                    1a:a7:b3:32:16:8a:52:89:73:6d:9a:b3:92:d7:c5:
                    00:18:8b:38:99:c1:e7:4a:22:16:ed:1e:46:ed:49:
                    85:87:f4:ad:9b:59:4f:32:b0:f3:1c:93:c3:eb:bc:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:26:35:F6:40:A4:09:C0:70:3C:75:3A:16:C2:EB:E1:1B:BE:2C:8C
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/24FAF688782911F0AFFBC961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:83:5b:03:c7:1e:f9:7a:63:9d:75:c5:cd:fd:e3:22:f7:48:
         48:7f:24:09:82:8b:e6:58:71:fe:d3:fc:72:30:e4:6a:d6:2b:
         66:3b:ac:60:19:6c:13:99:c7:31:9b:3f:9c:f4:80:61:6e:1d:
         c8:42:8a:03:c0:ca:d3:2f:96:e9:7b:19:79:b7:56:3f:c9:54:
         33:ee:ce:00:75:78:e3:8d:c3:4f:36:39:52:d5:4f:db:58:12:
         aa:9b:f3:f7:4b:92:7c:8a:0f:d2:fd:f5:f0:3b:26:fd:75:da:
         79:43:8f:9a:c0:dc:32:24:b7:33:0b:87:8b:83:b1:9a:36:f9:
         47:21:38:89:6a:31:76:4b:a3:17:47:6c:b6:1d:62:cb:5a:93:
         7d:62:9f:90:fb:3d:87:f1:b8:c6:d1:3d:bb:1a:88:2a:e7:af:
         a3:52:47:25:71:b9:b8:5d:f5:7a:e5:71:d0:74:fd:c4:c5:d0:
         17:cd:96:2b:f8:67:5e:c9:46:ec:55:a1:87:75:ef:a8:dc:b6:
         c5:d0:63:36:eb:de:cb:d3:32:bb:fa:dd:b7:7f:86:da:8f:59:
         fc:49:b7:ab:0f:2d:ab:8f:c7:20:b4:79:2f:92:43:27:01:a7:
         cd:1a:84:b6:86:2e:be:88:65:b6:2f:11:27:98:00:e4:f8:2a:
         3e:8a:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:34 2026 by rpki-client