Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/9ABAA0F2860711F1825B87C479A30FBC.roa
File:                     9ABAA0F2860711F1825B87C479A30FBC.roa (raw, json)
Hash identifier:          NOJB3Hv2pMFrhKnZajYeAs3Ut2mtOF2q/wUaov9o1Gw=
Subject key identifier:   65:52:E9:67:DF:7C:5C:2A:88:E6:32:82:3F:3D:42:91:53:91:F8:23
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       036E
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/9ABAA0F2860711F1825B87C479A30FBC.roa
Signing time:             Wed 22 Jul 2026 19:57:45 +0000
ROA not before:           Wed 22 Jul 2026 19:57:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138998
IP address blocks:        103.7.4.0/24 maxlen: 24
                          2400:ac20::/36 maxlen: 36
                          2400:ac20:10::/48 maxlen: 48
                          2400:ac20:11::/48 maxlen: 48
                          2400:ac20:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Jul 22 19:57:45 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6120b9-24ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:b9:80:18:46:a5:90:a3:e4:b7:4b:03:27:
                    53:ab:0e:c1:3c:4d:2f:e4:f8:df:f5:af:d7:ca:94:
                    c3:e9:7a:1c:04:12:ba:81:0c:d1:88:e9:a0:58:f6:
                    55:1b:80:d1:a4:cb:6a:c3:dd:60:e3:8e:c1:5e:95:
                    de:60:83:cb:4f:fb:e6:4d:4e:83:07:88:0c:e4:33:
                    f5:0d:a7:4c:bc:d6:1f:6e:01:f0:61:a1:36:f5:57:
                    43:e0:bb:4e:cf:75:98:79:a3:83:21:b7:1f:bb:1d:
                    ee:ab:7c:51:00:e1:27:5d:b7:e4:2e:77:c8:c3:37:
                    9a:e0:a1:cb:d1:ac:99:38:5a:2c:54:ef:e0:53:0b:
                    b4:32:0a:e8:d0:4d:21:51:2a:2b:fa:b3:85:c3:20:
                    de:02:f4:df:bf:67:2b:73:6e:7b:94:c0:59:94:9d:
                    b0:5d:6c:c4:cb:56:78:ce:f5:e6:c2:00:49:62:70:
                    7b:71:ee:1a:9e:58:99:fe:6a:2a:98:0b:61:89:e8:
                    59:29:0c:1f:2d:97:b8:08:01:25:2c:8a:1d:c3:92:
                    96:6f:db:40:b6:12:a1:fa:72:c0:88:89:c4:9a:bb:
                    4e:a6:fd:30:ff:65:59:73:44:7a:73:0f:cf:d8:1c:
                    69:23:de:7f:58:d6:2a:de:b9:6d:fd:b9:d0:24:24:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:E9:67:DF:7C:5C:2A:88:E6:32:82:3F:3D:42:91:53:91:F8:23
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/9ABAA0F2860711F1825B87C479A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.4.0/24
                IPv6:
                  2400:ac20::/35

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:ab:9e:9a:2b:d1:31:91:ee:bb:79:1b:a3:6a:9c:3c:c9:
         aa:a8:e9:c6:9b:aa:33:24:4b:62:c9:8b:66:5b:de:d6:53:8d:
         29:27:ae:7d:ea:11:ea:0b:ec:54:b0:a4:7d:0b:bc:8c:a6:b6:
         75:a5:18:12:79:83:52:56:52:e0:bd:d6:20:ae:0b:7e:4b:bc:
         6b:dd:d9:b2:d0:7e:a0:55:a3:b7:1e:64:26:66:5f:b3:27:47:
         b5:65:ab:d8:b3:ed:b8:70:db:37:0b:ef:03:48:33:c3:40:6b:
         74:2d:91:9e:93:9b:80:98:a7:d4:5b:da:29:e7:71:b3:6b:ab:
         46:16:33:7a:59:b2:e6:3d:f8:9b:dd:c9:8f:f1:05:d4:f0:6b:
         f5:f7:9f:0b:e7:45:5b:e5:e5:8c:ab:02:32:3d:2c:8a:bb:c4:
         44:74:18:31:82:e0:c5:36:76:87:20:fa:fa:f1:49:03:e4:e3:
         32:ac:0e:ed:75:3a:dc:69:ae:34:39:e2:70:ab:4d:bd:5f:a8:
         70:b7:5c:77:2a:44:80:c9:ae:2c:10:ae:d2:7b:52:1e:b3:4a:
         b5:2f:b1:71:e0:68:05:02:88:c0:0f:0f:6a:60:ba:9b:43:a9:
         70:0b:6c:c2:89:46:74:33:57:5f:1f:04:c6:88:70:d4:09:97:
         b5:93:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:21 2026 by rpki-client