Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
File:                     6FE0D496064A11EDA0A92068C4F9AE02.roa (raw, json)
Hash identifier:          nSPvZX7KXzBzUT7OFwC/s1n132cCYNb3XtUKSB/sg50=
Subject key identifier:   97:1A:6A:46:99:7F:6F:D1:99:8E:E6:20:F3:47:D1:FD:46:B9:9A:2E
Certificate issuer:       /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial:       0344
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
Signing time:             Sun 03 May 2026 01:32:43 +0000
ROA not before:           Sun 03 May 2026 01:32:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132730
IP address blocks:        103.88.155.0/24 maxlen: 24
                          103.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
                          rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
        Validity
            Not Before: May  3 01:32:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6a5ba-1217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:c7:f4:f2:4a:5d:0e:20:f2:5d:a8:69:70:
                    b0:ff:06:ad:bf:84:7b:f9:4d:3f:ee:4f:b1:d4:85:
                    0d:48:e3:89:f1:47:ec:26:fa:e3:9e:e8:b5:77:db:
                    0d:72:35:a4:e5:61:2b:2b:20:30:e1:9e:d5:3f:ca:
                    9f:ef:22:b8:6b:91:40:7c:a5:f9:04:04:35:82:b0:
                    24:78:1b:2e:86:1e:69:c6:d2:5c:d3:3b:29:31:82:
                    3e:03:12:d2:6a:c6:b2:b5:b0:6a:1c:23:f4:5e:ba:
                    84:58:d2:a5:56:18:f0:b0:8e:c5:22:be:eb:28:f1:
                    74:86:42:7a:bb:7f:5a:96:bf:16:fc:e5:9e:a6:99:
                    b6:2f:dd:ec:7d:09:93:ec:99:e5:0b:d7:36:d9:92:
                    2e:2c:c1:c1:12:c8:aa:8f:62:99:eb:42:76:f5:54:
                    40:3c:c2:f9:0c:f1:35:99:b7:8c:52:ec:63:8f:bd:
                    89:3e:32:77:63:86:b5:8d:9b:c5:c7:f2:5a:5a:55:
                    e1:56:4e:97:6a:2b:f9:f4:23:81:98:24:dc:59:7e:
                    da:44:42:e4:c8:6b:c3:0f:c1:65:ca:8c:58:34:45:
                    07:83:19:b3:0d:2a:e4:95:e8:42:6e:cf:1b:6d:5f:
                    15:75:cf:20:67:7a:b0:f9:fc:61:a9:13:7a:60:16:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:6A:46:99:7F:6F:D1:99:8E:E6:20:F3:47:D1:FD:46:B9:9A:2E
            X509v3 Authority Key Identifier:
                keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.155.0/24
                  103.88.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:09:73:c9:6c:3a:1c:59:91:58:d5:46:87:54:92:f4:ae:bf:
         dc:ed:f3:41:c8:e1:35:41:38:b6:77:47:4a:84:29:0c:8d:56:
         73:df:48:2d:fb:8e:03:c9:1b:4a:f4:51:82:8f:50:53:f9:22:
         04:5c:34:86:b1:4c:4b:26:d1:30:78:fb:e8:ae:cc:bf:8c:63:
         ce:af:2d:3f:c5:34:90:67:21:fb:02:d5:16:4f:cf:2f:57:40:
         8f:a9:9c:ca:4f:1e:96:06:0b:fc:69:8c:08:07:c3:b3:f0:37:
         de:a4:d4:e1:17:32:37:33:7e:d7:c4:45:56:48:3c:25:0f:b3:
         2a:15:b7:92:76:71:3f:6f:35:96:77:37:7d:b8:09:5d:04:f5:
         da:f0:f6:ae:02:5c:ff:c6:01:67:aa:cd:8a:e7:ab:e8:e4:eb:
         58:ad:8e:b1:39:38:ec:af:22:6c:94:4c:86:51:be:a4:45:c9:
         f2:43:96:13:97:a4:6f:c8:ab:a0:99:e4:2d:9c:6c:dc:77:31:
         ea:4d:94:4c:a6:f6:bf:66:f3:14:d2:88:ee:e6:e4:c5:4e:0f:
         ab:e3:3c:6a:91:ec:d0:4a:a5:6f:f9:7d:b6:25:8b:73:74:23:
         4d:df:a9:e7:25:56:b9:a9:f8:ca:40:84:ea:ac:14:fa:09:ae:
         b9:3c:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:31 2026 by rpki-client