Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/3F67E64E62BD11EE8F393D25C4F9AE02.roa
File:                     3F67E64E62BD11EE8F393D25C4F9AE02.roa (raw, json)
Hash identifier:          SKoROXW9CuXa5cRiDNUDX/4Tb8dZn6LAdzs1mwVKND0=
Subject key identifier:   24:0F:B1:77:0A:7A:0D:E1:0D:BA:C1:99:9F:24:15:A2:B8:D1:15:51
Certificate issuer:       /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Certificate serial:       0E5B
Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/3F67E64E62BD11EE8F393D25C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 18:18:51 +0000
ROA not before:           Wed 22 Jul 2026 18:18:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23688
IP address blocks:        103.141.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
                          rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3675 (0xe5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
        Validity
            Not Before: Jul 22 18:18:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a61098b-ab6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:bb:e8:83:ba:17:24:8b:dd:37:df:ee:e6:
                    bd:24:46:e1:45:4c:ca:e4:ee:f2:8b:ed:d2:b3:ca:
                    1a:ae:7a:f5:8b:fa:be:84:48:30:17:5f:64:b5:3d:
                    12:6a:58:15:c9:e3:76:a6:de:21:c5:74:ff:ac:70:
                    90:a0:c1:ba:2e:33:21:35:1a:02:d6:de:1f:fa:fb:
                    32:82:4b:45:3e:29:2c:58:57:8a:b9:7a:b2:32:be:
                    f1:e4:ae:58:31:57:00:51:c7:4c:16:54:01:96:45:
                    fa:39:ff:0f:a1:52:78:c1:18:ce:97:73:8c:63:70:
                    48:76:83:a6:4e:24:bb:29:c7:f0:1a:cc:55:ef:0e:
                    b4:9e:65:06:5a:3e:97:74:5e:2e:bf:82:f3:38:6e:
                    80:7d:42:e2:24:27:6b:fb:dc:5d:fc:62:00:b8:d8:
                    3a:7c:da:a5:3d:c8:9f:d6:24:b3:20:eb:29:7f:0d:
                    45:54:f2:fe:a9:b1:8b:93:cf:e2:e0:6f:5d:17:5c:
                    27:1b:cb:04:cb:95:9c:8b:3b:a3:6c:31:9d:67:67:
                    ae:fb:13:ef:67:4b:6e:4d:d0:f0:5a:4c:2e:dd:f1:
                    25:96:04:07:87:10:b8:8a:2d:b6:88:5c:a4:e4:d0:
                    26:a3:7c:af:b2:85:11:05:c4:17:75:5d:88:58:c0:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0F:B1:77:0A:7A:0D:E1:0D:BA:C1:99:9F:24:15:A2:B8:D1:15:51
            X509v3 Authority Key Identifier:
                keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/3F67E64E62BD11EE8F393D25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:2c:8e:99:e5:68:b4:9c:a9:e8:cd:be:be:1f:f7:40:6c:
         e7:25:b6:48:78:11:9e:32:72:62:b3:6b:b2:7c:96:0f:6e:da:
         a4:8d:8a:17:33:34:9a:44:42:a0:d2:14:9a:95:85:d1:5f:ed:
         75:11:07:c9:28:5c:88:13:7b:98:ee:fc:07:a4:d5:3c:04:18:
         7a:37:73:52:c5:16:f4:0d:c6:72:cf:96:3f:3d:88:7c:43:9a:
         05:9d:cd:70:91:7d:d2:3d:bc:a3:fd:6f:4d:28:6b:f8:62:75:
         d7:91:5a:a0:a2:6d:6a:99:51:ca:34:a6:5b:72:7e:6a:89:a4:
         b4:4b:54:3a:73:34:ab:ed:a0:2e:60:7a:2b:37:46:e1:9e:7d:
         a7:37:32:32:78:74:f0:fc:a3:db:53:42:ec:43:80:0a:e5:53:
         a4:ae:75:69:30:cc:27:89:3e:65:19:aa:e0:27:c8:80:13:cf:
         18:9a:44:98:dc:31:f0:e7:04:0e:54:85:7a:34:11:46:29:37:
         aa:35:4e:7e:93:81:3c:6f:e6:af:76:d2:06:ca:ed:0a:7a:d5:
         77:f7:99:ee:06:be:5d:11:56:3a:79:ef:33:d6:80:f3:0e:19:
         59:0e:c1:d8:ed:72:66:ec:99:02:c5:1d:9b:58:43:ee:1b:e6:
         ff:95:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:37:30 2026 by rpki-client