Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/606B4F366BAA11F1B898E4FE7347A888.roa
File:                     606B4F366BAA11F1B898E4FE7347A888.roa (raw, json)
Hash identifier:          mCkDe+LQ4xS6iJMKnCjHdo+T5H+lGEomCZURvH9FzsE=
Subject key identifier:   0F:8A:2D:CE:5A:03:DD:76:EB:5A:9D:00:9E:EF:F6:D0:E3:C3:DF:27
Certificate issuer:       /CN=A9150064/serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
Certificate serial:       17
Authority key identifier: 07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/606B4F366BAA11F1B898E4FE7347A888.roa
Signing time:             Sat 11 Jul 2026 10:37:19 +0000
ROA not before:           Sat 11 Jul 2026 10:37:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136772
IP address blocks:        103.95.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150064, serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
        Validity
            Not Before: Jul 11 10:37:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a521cdf-6bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:c3:c4:c0:6c:88:6b:d7:6f:9f:00:e2:f2:
                    8d:56:d7:a0:c7:5a:4e:81:e5:f8:30:0c:c7:a2:8c:
                    45:63:e2:f8:37:29:2c:11:e1:ca:b5:65:79:23:58:
                    c8:ae:0e:c1:ae:06:56:c9:b2:19:66:c7:7d:70:fd:
                    a2:2a:5c:36:40:f1:d6:c0:9e:26:ee:b3:0d:df:9b:
                    be:a3:08:12:f6:6d:26:0f:6d:ef:f3:cb:57:7e:e3:
                    41:73:3b:90:25:e1:ef:12:12:c5:24:04:a6:f0:c9:
                    aa:81:ee:01:18:f6:f2:6e:ee:85:cf:f1:aa:80:2e:
                    02:69:c2:f1:d4:00:9e:70:c9:73:05:b8:fa:87:b7:
                    ca:09:dd:24:07:2a:57:2d:be:fc:f3:b8:c4:b8:f3:
                    01:40:de:62:30:e3:2a:d8:38:af:97:1b:46:c0:f2:
                    2c:bc:28:74:48:dd:75:81:4c:b0:86:e0:f0:b4:d7:
                    23:b9:25:90:e7:9d:62:2d:1a:eb:64:da:b3:89:9e:
                    22:5a:e4:a0:03:df:95:2f:e6:9c:72:68:c1:c7:e9:
                    2c:68:aa:d8:9b:50:16:1a:5b:62:26:5a:b6:5e:69:
                    9b:ca:00:b6:6f:98:b2:21:36:43:54:6f:a3:88:29:
                    d2:dd:f6:3b:ab:67:aa:35:46:19:6f:34:31:29:e8:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:2D:CE:5A:03:DD:76:EB:5A:9D:00:9E:EF:F6:D0:E3:C3:DF:27
            X509v3 Authority Key Identifier:
                keyid:07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/606B4F366BAA11F1B898E4FE7347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:de:4e:17:16:86:76:45:47:f7:63:13:c4:bd:60:c6:47:d1:
         29:12:2e:19:4e:ec:92:f2:4a:0e:3c:3a:6a:18:5b:2a:94:5f:
         8e:49:c3:fe:d6:68:66:56:d5:c5:3f:dd:06:14:c3:b4:30:ef:
         91:fb:c6:f5:1d:d7:a3:98:31:e0:c7:7b:ad:3d:8c:fa:4e:bd:
         8f:13:14:7e:a5:35:41:9c:4f:0f:c2:57:dd:65:7f:39:74:75:
         62:9a:1f:06:50:be:86:5b:c3:6f:43:57:44:b0:74:cb:df:59:
         89:a6:8c:99:b0:28:49:d9:51:a2:eb:c0:c0:1b:99:41:a9:a4:
         f7:b5:7d:1f:7d:74:a5:a2:fb:de:5e:a5:0c:fc:1c:4b:f7:3a:
         79:cc:60:00:c8:da:db:54:5b:f0:65:ac:4b:68:c3:80:4d:c0:
         2b:02:70:27:49:27:10:48:8d:b5:72:1d:00:21:a8:0c:1a:d3:
         d9:5b:cb:8b:48:9d:98:25:9d:df:50:ad:ac:29:ae:65:e2:91:
         04:21:01:b7:33:2e:1a:21:b3:aa:09:bd:72:98:43:6a:61:38:
         7f:5e:fd:50:31:24:5f:9b:09:92:d5:f9:3c:3f:73:73:ac:af:
         90:a5:d7:5f:b5:16:1f:68:e5:92:1a:4e:26:ab:5b:f2:ac:3b:
         64:75:e1:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:50 2026 by rpki-client