Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa
File:                     6CE24548425E11EAB623F258C4F9AE02.roa (raw, json)
Hash identifier:          LCPMT0hgRgxkY6g8i6rd3I6r5PrzQRSGvYCOXRlNG28=
Subject key identifier:   9A:E3:DE:D7:98:EA:9C:48:F7:9C:18:C8:9A:53:39:F0:F3:B3:44:8D
Certificate issuer:       /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial:       0CEA
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 19:19:15 +0000
ROA not before:           Wed 22 Jul 2026 19:19:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139276
IP address blocks:        103.140.158.0/23 maxlen: 23
                          103.140.158.0/24 maxlen: 24
                          103.140.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
                          rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3306 (0xcea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
        Validity
            Not Before: Jul 22 19:19:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6117b3-c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:47:9e:72:51:91:a7:4c:e4:81:fd:bd:07:
                    82:62:ab:8b:30:72:8a:7b:6e:fd:7c:34:72:df:f8:
                    ee:76:0f:8e:3b:44:b4:c0:b6:36:fd:fa:d4:92:5c:
                    87:05:13:f5:e8:cd:44:0e:a2:16:eb:8b:ec:db:62:
                    1a:c7:68:f7:ba:a8:ff:76:50:e1:f6:5a:0c:52:54:
                    51:90:1f:00:46:0a:a5:89:ab:84:34:9e:3b:60:70:
                    91:5c:0d:ff:94:0e:7e:54:7c:e8:30:b1:0b:0b:a7:
                    e4:b9:70:5e:c1:b5:6d:c2:62:78:82:f9:e3:84:f0:
                    9a:b3:9d:1d:8a:a0:43:2f:98:17:ca:a8:09:26:c6:
                    36:59:a1:2f:3a:f2:12:b5:62:6a:3a:d4:94:bb:1e:
                    4f:81:55:2b:b9:3c:5c:f5:84:b3:12:7d:75:a1:38:
                    46:11:e2:20:12:65:d1:eb:15:fe:78:3c:a3:3f:8d:
                    8a:2e:6a:e6:b4:76:10:72:1f:fc:b4:29:91:00:d3:
                    73:63:65:46:18:6b:b2:ce:9a:49:1b:dc:04:67:a2:
                    7a:7c:88:28:0d:8f:80:34:b5:b2:ae:b1:4f:5a:a4:
                    d2:62:f9:f1:8f:9c:0a:31:d9:9c:1e:cf:21:7a:b7:
                    f9:e7:86:c5:d9:64:75:74:ff:22:8f:8f:02:1f:fb:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:DE:D7:98:EA:9C:48:F7:9C:18:C8:9A:53:39:F0:F3:B3:44:8D
            X509v3 Authority Key Identifier:
                keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/6CE24548425E11EAB623F258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:09:cd:72:19:e8:8f:e6:a9:f5:32:34:ed:3f:0b:f0:2e:
         c8:ba:e9:9b:c4:17:8b:82:5e:26:0c:1c:e1:a4:04:cc:f6:da:
         72:d2:cc:82:23:3c:04:d7:bd:d6:82:47:c3:4b:49:fb:07:52:
         3a:82:46:c8:c1:55:0b:b2:78:78:44:7d:04:48:69:85:92:4c:
         13:a9:36:f5:7c:44:93:5e:91:bf:9f:4e:5d:6b:7d:95:43:e6:
         c8:72:20:09:c5:58:1a:af:9e:3c:c6:ca:0a:69:8b:c1:f6:9e:
         15:28:e7:a4:a0:37:8f:de:3d:5d:2d:6f:d9:7e:a1:b0:52:13:
         29:6a:c4:57:67:92:93:2e:c6:97:6b:6f:df:fb:ec:f8:b8:7f:
         a8:bd:8c:59:58:79:cf:fc:68:f5:4b:c4:1c:5a:1f:07:b4:5b:
         42:ad:2f:60:b3:9c:d3:52:28:b1:01:fe:1a:7c:c0:c8:52:7e:
         86:f8:35:a1:f4:05:ed:de:42:e2:91:bc:2b:be:e2:00:b6:7a:
         54:af:ec:8d:e7:6f:29:06:d1:ce:0d:4f:ab:4f:92:28:81:15:
         90:03:f4:bc:63:66:5f:d7:56:ed:f0:05:8c:47:35:20:22:35:
         9b:e3:75:06:b9:d6:76:ef:84:11:55:ff:28:90:a3:9b:50:91:
         5c:dd:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:51 2026 by rpki-client