Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1221D894B74B11F1A50305EC3B11F970.roa
File:                     1221D894B74B11F1A50305EC3B11F970.roa (raw, json)
Hash identifier:          5techFKvTgAmGGC9EMyJ0WlFDr9hYrwJgXc0g4j95j8=
Subject key identifier:   23:5F:BB:8D:32:BB:60:FD:7B:64:C1:1A:17:FC:8B:F0:48:83:56:11
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0C4A
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1221D894B74B11F1A50305EC3B11F970.roa
Signing time:             Wed 23 Sep 2026 12:34:08 +0000
ROA not before:           Wed 23 Sep 2026 12:34:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23532
IP address blocks:        103.6.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Sep 23 12:34:08 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ab3c740-089a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:02:82:48:05:66:63:9a:d6:a8:78:eb:10:
                    35:22:b2:36:42:bb:b3:cf:07:37:99:32:69:01:99:
                    87:47:d0:c0:57:77:84:f6:0e:e0:20:d0:b3:de:87:
                    d7:51:4f:6f:52:3d:35:17:f0:5a:77:c6:b2:f3:c8:
                    39:8a:b0:59:1e:04:af:9c:09:84:1f:13:ab:69:ea:
                    1a:6f:7e:af:c4:a2:27:45:47:d1:ec:8b:db:14:b4:
                    7c:15:12:2c:df:cf:3f:5a:90:f0:a4:22:30:b0:09:
                    0e:7a:d2:83:35:a9:56:c5:a9:99:88:d9:eb:70:4a:
                    87:21:9d:a6:bd:a1:0c:27:8e:e9:a8:ba:56:7e:7d:
                    34:09:a9:6d:b8:6a:9a:cc:30:03:33:fb:45:4f:77:
                    91:b1:00:fb:07:c1:b8:20:40:9e:2a:ad:56:67:50:
                    33:1d:93:06:29:04:5b:5c:8f:e8:f4:41:b6:51:6e:
                    0d:3b:a3:3c:97:63:41:0d:61:3f:a7:d2:0f:dc:aa:
                    75:e9:bf:1c:be:30:21:cc:f8:94:f9:2d:49:02:e2:
                    ec:f9:fa:99:ba:08:93:26:9a:24:53:2f:c8:f3:a1:
                    f1:c1:4a:20:f6:62:b9:4f:b0:1b:1a:3e:e1:32:71:
                    00:85:5b:90:d1:d6:af:07:aa:36:0a:c5:fe:eb:a9:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5F:BB:8D:32:BB:60:FD:7B:64:C1:1A:17:FC:8B:F0:48:83:56:11
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1221D894B74B11F1A50305EC3B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:ca:24:c0:d8:d6:f8:ce:b1:14:37:8b:9d:0e:df:74:2f:
         ad:a8:8c:db:42:1b:a1:f9:d0:c4:aa:07:55:7b:9f:63:f9:7f:
         4e:b1:11:fe:59:af:6e:eb:d1:17:bf:e0:76:da:83:a3:69:54:
         01:6d:55:bb:0e:ca:c6:0f:0f:4a:3f:15:7a:4e:63:3c:95:28:
         1c:9e:a1:bd:30:15:97:cf:8d:a1:87:4d:0c:14:fc:e6:aa:ac:
         2e:3d:79:0d:a5:8d:6d:f6:34:44:fa:86:79:fe:c5:5f:e9:98:
         11:2b:4a:1e:84:c9:82:1e:86:a3:ae:5b:23:22:22:d2:63:f2:
         05:46:a8:70:f3:e5:0b:de:00:c5:eb:c3:ed:b2:96:01:b0:c1:
         cf:12:d0:33:2d:89:54:0a:12:7f:dd:0f:eb:c4:46:df:de:89:
         78:d1:85:c0:9a:39:ed:61:1d:0c:ec:b1:10:4e:75:08:94:f2:
         b8:fa:26:2e:81:6b:3d:8b:e9:52:35:f1:75:32:16:39:1b:16:
         fe:93:ab:64:61:16:71:a7:59:b3:87:2f:b8:37:5f:ed:87:53:
         c5:34:8c:b6:f0:70:d9:bb:71:91:66:1a:72:43:09:6d:ac:3d:
         93:2e:5b:d4:42:0d:35:b4:ef:cb:30:c9:f3:4a:59:a6:00:e2:
         30:84:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:20 2026 by rpki-client