Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
File:                     39397B6C69BE11EFA850E254C4F9AE02.roa (raw, json)
Hash identifier:          Rnz7YdmM/dFUbfVZUB1hF2F9t7TaIkBVLBwLs6I5YcM=
Subject key identifier:   9E:5A:EE:29:6F:92:F4:70:EF:8F:E0:C3:BE:31:3A:CD:A2:70:66:CB
Certificate issuer:       /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial:       066D
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
Signing time:             Fri 10 Jul 2026 23:24:33 +0000
ROA not before:           Fri 10 Jul 2026 23:24:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     131341
IP address blocks:        103.69.124.0/22 maxlen: 22
                          103.69.124.0/23 maxlen: 24
                          103.69.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
                          rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645 (0x66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
        Validity
            Not Before: Jul 10 23:24:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a517f31-49dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:81:f8:7b:9f:e7:1e:d0:fa:ed:66:3c:7d:
                    a0:e6:05:22:15:dc:ad:ab:31:e9:13:63:68:33:53:
                    fc:f7:ee:d2:2b:4e:f7:52:03:09:d2:2b:f4:e4:fb:
                    32:33:d4:5b:90:47:35:67:22:f0:ec:1e:7a:9a:4c:
                    bd:74:fc:8b:84:67:7a:b6:f7:fd:83:8c:9d:e6:34:
                    ea:59:8d:a6:12:ef:6a:21:4b:18:06:fd:30:05:af:
                    f3:e5:ef:12:ff:9b:c4:bc:0c:7f:52:a8:7e:45:9d:
                    ce:72:46:3a:91:82:d9:14:d0:32:64:dc:81:51:14:
                    56:8f:5e:e9:73:43:b3:38:29:14:15:05:37:06:2e:
                    4c:6d:6c:7f:e1:e0:32:f4:bd:2c:21:6f:8e:89:04:
                    c7:40:92:26:16:8e:13:f7:e0:65:ca:7d:95:5a:4c:
                    f5:d1:28:61:e3:29:76:04:ae:5a:06:37:5e:5a:12:
                    1f:58:7b:fb:19:1e:57:55:10:71:1e:6c:a2:6d:83:
                    c9:aa:e3:9b:d8:62:5c:b6:36:50:dc:fb:17:e3:07:
                    98:2a:b1:61:59:17:50:58:8a:b7:32:56:15:16:9d:
                    99:45:90:46:a4:ba:47:21:4d:1e:b6:b8:e3:97:9e:
                    ec:15:7f:51:88:e8:c7:f0:29:cb:0e:3a:c8:e8:0e:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:EE:29:6F:92:F4:70:EF:8F:E0:C3:BE:31:3A:CD:A2:70:66:CB
            X509v3 Authority Key Identifier:
                keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:77:a8:1f:fe:14:84:39:75:de:42:4d:56:4f:ce:7c:9f:
         b7:fb:79:bd:f9:63:2c:19:45:76:8c:a4:30:cd:ed:67:be:85:
         fa:4c:db:6f:a2:7c:c0:73:44:84:e7:f6:34:e9:c9:c9:75:aa:
         ea:e4:97:19:73:2a:56:e8:db:33:66:95:a4:58:f4:2b:e9:5e:
         34:fb:00:ba:24:ea:eb:0d:07:ca:81:72:50:9d:02:1c:a1:21:
         ec:41:b3:23:45:40:88:00:b0:34:f0:0d:bd:d5:e8:3f:9e:4d:
         0e:af:70:e6:a4:27:18:a3:6e:ae:36:98:35:c4:f0:7f:1f:f6:
         0f:a3:b3:60:10:3a:0a:be:3b:77:4b:bd:9f:15:0d:fe:63:08:
         3b:83:06:0e:2b:40:1f:6f:86:58:c5:92:87:c2:9c:ac:e2:3e:
         ec:55:cb:80:e9:c8:8e:cb:06:9b:62:3a:b2:67:2a:63:d6:f5:
         56:5f:68:0a:a3:a8:f0:2c:9d:a2:76:48:b2:63:01:9c:55:e8:
         81:0d:77:24:4e:6b:3c:e2:12:9f:df:a3:14:1c:0b:7e:f7:05:
         dc:b7:85:a1:40:ff:4c:ed:2b:cf:2b:92:54:32:f9:bb:d8:9c:
         6a:a4:3b:26:56:a2:6c:93:dc:76:45:76:ea:02:43:5c:0c:3c:
         7a:f1:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:32 2026 by rpki-client