Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
File:                     706382C2B67811E8A2696333C4F9AE02.roa (raw, json)
Hash identifier:          49XaZ0rEco+Pvp8T917ekyMPiESSVUJ+zsYpD7fiPQI=
Subject key identifier:   DD:3D:85:5D:70:C8:D0:D6:77:A7:C1:ED:A4:FD:8A:44:2D:7B:C5:39
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       13EE
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
Signing time:             Thu 24 Sep 2026 17:32:49 +0000
ROA not before:           Thu 24 Sep 2026 17:32:49 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138203
IP address blocks:        103.129.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5102 (0x13ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Sep 24 17:32:49 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab55ec1-6afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:e7:81:2e:a9:a2:36:65:61:9e:e6:5d:8a:
                    ee:06:59:04:95:b6:0c:e0:8b:2e:42:eb:7b:4b:d0:
                    78:8d:3c:8d:ef:c3:9b:29:5e:fe:cd:95:c5:be:d6:
                    7e:5e:d4:f7:0f:d7:12:5a:12:01:1c:89:a3:f6:75:
                    9e:33:70:92:b9:16:fd:39:86:d1:53:36:9e:4c:62:
                    4e:bb:df:a6:02:3e:ef:a1:e8:e8:e9:68:79:b1:0a:
                    d5:9a:af:78:1a:24:9e:04:49:8c:f8:4f:c1:34:0d:
                    c3:ea:e6:50:fd:f5:85:d2:bd:37:d4:cf:44:d6:f2:
                    c6:8b:98:8b:2b:61:0f:5c:3d:d7:2f:19:e1:6a:b2:
                    7f:ff:aa:b4:a8:18:be:ab:2f:51:42:db:9a:59:9e:
                    cc:4e:21:10:49:42:20:65:ea:5a:38:ec:d0:13:6b:
                    83:63:a9:5e:82:46:ac:a9:94:3f:6e:5b:ff:5c:0e:
                    8e:58:f6:6f:a9:b5:a0:c8:0f:66:3c:93:a4:e3:57:
                    9b:2d:a2:b5:1b:ab:1d:50:2b:8d:a8:cc:b0:31:a0:
                    11:45:a0:1a:22:b2:30:50:fc:6c:b3:d5:b5:bb:08:
                    0c:65:75:03:28:ba:66:24:7b:2b:c2:cf:b5:34:f0:
                    4f:d7:e7:ab:f4:33:78:f7:4b:7b:54:cf:14:2f:70:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:85:5D:70:C8:D0:D6:77:A7:C1:ED:A4:FD:8A:44:2D:7B:C5:39
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:a7:25:ac:50:0e:3d:84:ec:fa:16:a6:16:30:ea:ce:79:
         2d:b3:a9:c7:a5:99:a6:81:0d:15:41:c3:fb:32:5e:99:24:f1:
         71:3a:f8:b9:b8:3d:be:c8:e9:65:98:ce:03:7c:75:d3:3d:3c:
         8a:85:fb:af:a0:08:24:7d:39:c9:3d:af:39:5c:c2:85:e4:9f:
         97:fc:df:29:93:b6:77:d7:98:58:62:b5:5c:a1:26:2a:c0:0c:
         f1:4d:f8:ef:3d:bf:99:d3:5b:c1:fc:34:6a:46:b0:3f:0e:d2:
         84:3d:60:9c:ab:9b:b0:82:2e:ca:d8:20:06:73:46:4c:26:85:
         b3:66:c4:f6:91:8d:62:e0:b2:44:b5:56:e5:74:10:b2:76:91:
         d2:d5:57:49:0f:86:70:16:10:79:a8:77:f1:c8:cf:78:29:6d:
         f1:e9:e6:96:4f:8b:ba:bd:25:f8:a5:a9:03:cd:ec:77:f6:30:
         8b:c8:41:2f:27:8d:9c:d0:05:aa:e5:6a:c8:35:55:bf:8b:9e:
         ac:63:94:e9:bb:50:8b:ab:a1:d7:55:7a:8a:bb:c9:f2:6d:8f:
         d5:f6:56:73:9b:1b:b5:2e:b2:c1:d7:4a:44:fb:76:b0:df:b0:
         72:c6:77:93:6b:a4:b4:d1:2f:97:71:34:6d:9e:fe:09:1c:8b:
         24:44:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:15:02 2026 by rpki-client