Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
File:                     6063C75CB6E411EE94471D14C4F9AE02.roa (raw, json)
Hash identifier:          5Gtf7oujjTH1/9TpM6Po8VolgFiUghsVEkgZJ7GcJcc=
Subject key identifier:   AA:C2:B2:CC:5F:67:9E:76:78:54:B3:B1:14:68:62:CE:2D:9C:17:F3
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       01F9
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
Signing time:             Fri 17 Jul 2026 04:30:48 +0000
ROA not before:           Fri 17 Jul 2026 04:30:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151406
IP address blocks:        103.224.93.0/24 maxlen: 24
                          115.187.22.0/24 maxlen: 24
                          2001:df2:9540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Jul 17 04:30:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59aff7-f6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:e9:b3:af:34:fd:25:45:04:e1:59:13:7b:
                    62:4e:de:b2:97:44:78:bd:ea:56:05:4f:5a:0d:15:
                    b3:f2:75:62:af:df:fc:25:77:ab:6b:2c:3f:96:ed:
                    d1:83:37:76:56:9c:54:9f:40:02:2a:1e:f1:12:6a:
                    94:b9:00:7a:44:fc:45:e1:76:03:9e:d1:82:fd:37:
                    89:2d:06:29:f5:2d:6d:9f:f2:f1:7d:a7:a4:96:7d:
                    11:d5:98:28:c6:d2:a6:80:d9:c1:c6:39:ba:f5:73:
                    db:fe:16:97:7e:6c:de:e8:af:37:0f:fa:8a:3b:7a:
                    97:fe:74:02:51:e8:f7:7f:1b:56:1a:53:b9:6b:21:
                    9c:c0:28:25:d4:ad:49:bb:7c:36:ae:8d:4c:aa:32:
                    66:c3:53:cf:78:67:18:63:3a:98:c6:de:32:15:18:
                    d0:9c:6e:bd:25:3e:f7:49:28:18:a8:de:f8:3f:88:
                    f4:e6:f4:ea:2e:6e:21:c2:4e:4b:32:87:2c:2b:74:
                    4c:99:b2:a4:a9:7a:59:b9:97:62:d7:28:8e:d3:b0:
                    92:76:cd:01:4c:9b:44:f2:69:f2:85:3b:9d:41:78:
                    48:c9:7d:a0:a6:4e:4e:57:d3:06:dd:eb:43:a5:48:
                    94:96:bf:3d:59:45:a3:ce:4c:d9:d2:96:99:c1:d7:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:B2:CC:5F:67:9E:76:78:54:B3:B1:14:68:62:CE:2D:9C:17:F3
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.93.0/24
                  115.187.22.0/24
                IPv6:
                  2001:df2:9540::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:52:97:72:5c:af:74:db:fc:ef:64:a0:8b:ac:62:e4:14:e2:
         da:c6:1e:bb:6c:9a:58:82:2e:8b:f0:6b:90:3e:4b:f7:7b:d5:
         2f:d4:6d:62:01:20:3f:fa:ec:62:48:7c:9b:97:b7:65:31:2a:
         45:ec:1d:5c:7a:27:7a:d7:be:97:95:4d:fb:7c:05:67:1c:67:
         3f:b5:f3:a2:7f:33:a2:71:d5:ec:d8:92:df:56:d1:a7:03:7b:
         13:00:56:1e:ff:53:95:ac:fc:0c:26:69:95:ea:38:4b:d1:ee:
         5d:3e:7b:98:f8:45:30:fb:d1:63:3f:5e:b5:44:a4:9b:ba:13:
         c3:56:b8:3c:bf:bd:79:b5:8c:9d:67:a0:09:35:cc:08:93:f1:
         8d:c6:8c:da:34:da:fc:a9:5a:2c:a7:a9:04:e7:50:88:77:7a:
         6f:a1:22:65:20:29:16:38:db:9d:85:06:77:20:80:85:fe:e2:
         22:42:9b:d5:9c:79:2f:cc:3e:73:bd:91:a4:fd:19:c1:24:98:
         31:fd:58:1e:0a:ed:08:62:f6:6c:75:64:d5:4b:b3:15:e9:ea:
         96:d7:bc:d7:7d:03:e0:3a:cb:32:d8:c5:42:9c:2b:7a:1f:3e:
         52:16:e5:64:e6:59:41:70:36:ea:91:08:ae:06:10:c1:d3:18:
         a5:6a:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:36 2026 by rpki-client