Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/117CE5BEB74B11F1A50305EC3B11F970.roa
File:                     117CE5BEB74B11F1A50305EC3B11F970.roa (raw, json)
Hash identifier:          B+N3zsEIWaP/PTXXhHhOzK4D1nGxtBCJHv+XN/SOCGs=
Subject key identifier:   7C:16:DB:7D:06:87:40:0C:0E:09:23:0A:E2:CA:8E:22:1A:15:89:F0
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0C49
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/117CE5BEB74B11F1A50305EC3B11F970.roa
Signing time:             Wed 23 Sep 2026 12:34:07 +0000
ROA not before:           Wed 23 Sep 2026 12:34:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        103.6.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 12:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Sep 23 12:34:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ab3c73f-8fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:04:96:d7:ca:03:eb:d8:5b:11:3c:64:75:
                    ab:a2:3a:67:87:01:99:2d:d2:df:ba:76:fa:00:5f:
                    b9:b6:e2:6b:24:a7:48:cb:d5:f2:f0:27:3a:c8:84:
                    95:7b:26:a4:b0:55:1b:e8:f4:37:a4:05:4c:7d:2d:
                    99:53:86:be:1e:e3:4f:11:10:a9:c6:39:f2:e6:d7:
                    1c:b6:4e:1e:6e:b5:f3:a5:66:77:20:29:33:98:bd:
                    af:e3:16:1f:ac:5c:d2:09:42:ac:88:89:55:32:fd:
                    6c:2c:91:c0:72:24:8a:f5:69:c6:52:7b:2f:04:61:
                    90:e7:2e:75:c0:82:5e:92:de:fc:62:ea:3f:b4:88:
                    b8:f1:28:78:a9:65:90:0c:92:42:4d:b6:35:87:17:
                    89:6c:d2:1a:a1:c7:be:7e:98:f3:ae:7e:0f:d6:05:
                    eb:9a:ad:3f:af:8e:da:a7:37:8c:1e:4c:da:d5:04:
                    c3:06:f2:63:be:dd:b8:9a:71:6c:9e:6a:25:77:8b:
                    0e:84:5f:35:1c:7d:03:c4:ba:eb:cf:82:de:8d:4b:
                    0e:df:4d:dd:b1:3f:61:b4:65:19:cb:19:da:64:48:
                    0f:74:4f:7d:4a:f2:2c:a8:53:a8:c1:f7:c6:87:30:
                    48:d2:2b:45:1b:4d:e3:7e:02:12:d8:9e:51:3b:f2:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:DB:7D:06:87:40:0C:0E:09:23:0A:E2:CA:8E:22:1A:15:89:F0
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/117CE5BEB74B11F1A50305EC3B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:86:7a:74:1e:8b:12:64:1e:65:57:19:c9:f8:97:a3:93:b1:
         99:fb:73:1c:47:4b:2d:fc:c4:05:69:f2:d1:82:e4:54:dc:1c:
         11:de:1b:7a:da:7f:4e:9d:2c:4a:3d:b7:96:b8:80:14:77:e0:
         73:9f:7b:ff:73:9a:b0:aa:90:22:13:c3:95:7d:09:9d:c8:71:
         e9:72:bd:ba:3c:cf:55:d3:07:6e:a4:6c:a7:d4:ca:81:81:8d:
         4e:f2:f7:ae:e4:50:e9:7b:85:55:dd:b3:58:e7:b4:5f:6a:8a:
         e8:0e:f1:5d:1b:b2:e6:c3:ea:2d:0b:3d:08:64:3f:06:6f:e1:
         ec:17:5a:b8:74:cd:20:33:21:c5:e2:b6:6c:59:4a:a4:98:29:
         d8:db:e1:d9:35:ca:c3:40:3e:13:4c:19:6b:1d:d5:ef:db:f2:
         ec:30:b9:d0:ca:1a:30:9d:a3:07:92:fa:b1:ec:d0:d6:af:1a:
         30:ed:93:b5:40:ad:e2:c0:aa:7f:46:42:b6:68:1b:c0:56:64:
         1b:6f:94:9e:b0:9c:b4:f6:e0:43:d8:28:b9:72:e7:97:e4:ba:
         cb:5d:17:b0:85:df:df:f3:21:aa:71:bb:fe:b7:d5:e3:4a:f8:
         72:24:f1:07:ec:39:31:0e:66:11:f3:15:c8:44:19:a2:aa:58:
         5c:b5:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:28 2026 by rpki-client