Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa
File:                     C6F2B810858711F1BFD2CAA18FA30FBC.roa (raw, json)
Hash identifier:          sMDp16MtSOfTPfnO7UnaSviY5LCWiCjgbWIlsw8nvbw=
Subject key identifier:   75:80:7C:E8:37:CB:FC:0B:49:3D:86:EB:29:4E:B0:4B:29:D3:93:BB
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       01FF
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa
Signing time:             Wed 22 Jul 2026 04:42:43 +0000
ROA not before:           Wed 22 Jul 2026 04:42:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.84.0/24 maxlen: 24
                          103.142.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Jul 22 04:42:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a604a43-bff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:7b:43:46:f3:7a:50:71:b0:2e:ae:fa:4b:
                    e0:ae:80:b5:c8:1c:de:fd:a7:71:cd:a8:96:b9:8f:
                    aa:03:a4:bc:a9:44:47:15:84:0a:d1:1b:ad:a8:8a:
                    6e:d7:c9:e5:6e:41:48:9a:cd:89:69:6f:be:18:36:
                    81:d3:7a:2b:cc:c5:5f:4f:c1:49:08:3e:37:18:35:
                    7f:81:ab:37:36:04:0b:e4:ab:20:30:60:c9:ee:89:
                    65:ce:8d:94:31:fe:f2:9d:7d:6b:53:ac:12:fa:31:
                    e7:be:3b:cc:6d:83:d7:87:16:0b:21:06:b1:c3:cd:
                    67:e0:f5:ff:5a:ea:04:19:30:c1:81:11:0e:be:93:
                    3b:5c:e2:c6:7f:ea:47:0e:de:87:eb:80:8c:0b:24:
                    ff:fe:f5:85:ba:d5:66:ed:c6:6f:8a:cf:73:79:c2:
                    d7:71:38:8b:51:20:fc:1e:6b:36:99:e7:ed:49:a4:
                    99:46:6e:ef:4e:58:bf:5e:97:9a:f9:42:39:9f:c5:
                    99:f3:58:74:52:4c:b1:9e:13:1b:6a:d9:3b:17:95:
                    8a:c6:e0:cb:b1:f5:4d:d0:7b:61:90:39:74:71:02:
                    fc:a4:c4:4f:85:a9:31:e4:d1:c4:a4:77:05:ba:97:
                    70:76:de:2e:b1:c8:75:e1:44:e2:73:d9:89:61:7f:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:80:7C:E8:37:CB:FC:0B:49:3D:86:EB:29:4E:B0:4B:29:D3:93:BB
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:97:0e:9e:70:d9:4c:72:6b:36:db:86:31:d8:a8:ad:c9:e2:
         8f:1b:2a:f6:84:4d:67:69:e7:45:26:4a:08:7b:29:1d:aa:5e:
         cf:34:52:83:28:eb:4f:15:a3:26:72:92:7e:8d:4f:ac:7f:b5:
         d4:ab:49:7e:36:ba:fb:45:19:83:65:f6:f7:52:88:0a:7f:d3:
         49:ba:4d:1e:f0:eb:52:b6:6e:4e:0c:95:12:f9:dc:75:8e:47:
         86:05:0a:53:1b:ee:92:63:01:ee:da:73:2e:9b:c0:f7:64:ee:
         cd:ed:80:2d:17:88:0c:ac:bd:05:be:1c:b9:c0:76:a1:d2:91:
         bf:49:18:6b:ee:a0:17:71:d1:03:55:6f:b5:4e:45:13:f9:30:
         18:f0:10:52:f2:b2:29:36:81:00:bd:9d:bf:87:02:c1:03:a4:
         e7:00:22:2f:1f:7b:7f:3a:a9:c7:7b:4b:c3:48:0b:6f:fd:43:
         b2:f4:df:15:14:8f:64:37:23:6a:67:15:48:d4:f0:16:b9:bf:
         8d:8d:8a:9b:4e:d5:a6:f0:4d:4c:62:dc:ec:d1:9c:bd:6c:99:
         ca:d8:e8:84:3b:ca:bd:0f:35:03:cc:9d:a2:03:f0:85:91:11:
         0e:26:f8:a2:99:45:19:e3:cb:af:b4:ac:5d:7d:df:67:b6:be:
         da:6b:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:29 2026 by rpki-client