Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa
File:                     208C60E46C7211F1AC9395217347A888.roa (raw, json)
Hash identifier:          5xyBOygaF/yBthApdBmHSRjVagEMyjnlOfKFQdO1E1g=
Subject key identifier:   56:BE:54:1F:A7:85:D9:5D:22:02:9B:81:B5:88:29:3C:1E:63:5B:0B
Certificate issuer:       /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial:       0BED
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa
Signing time:             Sat 20 Jun 2026 06:34:45 +0000
ROA not before:           Sat 20 Jun 2026 06:34:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134785
IP address blocks:        103.35.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
                          rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
        Validity
            Not Before: Jun 20 06:34:45 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a363485-113f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:96:70:29:54:ee:04:64:9a:ef:c0:81:9d:
                    3c:d5:fb:38:e7:38:59:18:f4:95:ab:d0:ea:3c:bb:
                    0a:99:d5:d8:58:95:43:50:b3:bb:de:77:c1:f3:2b:
                    e3:32:73:5c:92:8e:7f:b7:9b:ac:8f:6e:5d:f7:09:
                    78:63:74:38:9c:94:a5:f3:68:a3:49:bd:12:94:4e:
                    ed:6b:b1:be:8b:32:0d:06:f1:ac:78:65:88:c7:0f:
                    36:13:06:83:83:b1:66:b0:e1:fd:43:15:10:16:98:
                    5b:92:ac:2c:48:91:39:ae:77:58:28:49:33:04:49:
                    73:e1:cf:8d:80:54:0a:3b:eb:69:1b:52:d3:13:9b:
                    9b:bc:d9:d8:0b:0d:38:de:97:90:7b:30:b6:65:a2:
                    fc:87:2f:b3:81:9f:6a:ba:d4:b1:08:02:c0:9f:97:
                    8b:08:66:ba:fa:b8:f8:f3:6f:eb:3a:ff:98:08:95:
                    3e:ab:2c:04:1f:62:7c:97:fb:fc:a3:86:e2:98:2f:
                    71:42:d0:36:bc:92:49:e0:77:76:d7:1e:52:49:f4:
                    2f:71:c9:7c:b1:1e:82:54:01:3d:5d:c8:cf:f3:5b:
                    54:0b:3a:2d:45:46:aa:d4:a0:3a:0a:f1:ed:6c:20:
                    ba:a6:1f:51:44:cb:ce:89:d7:3a:f5:f0:62:23:f7:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:54:1F:A7:85:D9:5D:22:02:9B:81:B5:88:29:3C:1E:63:5B:0B
            X509v3 Authority Key Identifier:
                keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/208C60E46C7211F1AC9395217347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:46:fd:64:47:72:44:70:2e:b0:9a:00:29:b3:2e:8b:f6:14:
         ff:20:27:73:4f:12:25:61:6c:10:9b:1d:1e:c9:0e:bb:eb:6f:
         7a:b2:f4:eb:20:25:60:80:2e:ac:c6:7e:0b:72:67:dd:fc:b7:
         29:4b:5a:ab:7f:92:be:99:23:f0:47:a9:21:24:73:c6:a8:02:
         4d:87:6a:11:6c:ad:d6:5e:81:51:70:13:cd:7c:40:34:f0:13:
         06:24:66:de:9a:a9:0f:2e:fa:ce:9e:f0:fb:63:8c:8c:aa:a7:
         d6:f6:8e:c7:cb:3a:05:be:7c:ad:8f:15:46:8e:85:1f:ad:84:
         79:5e:70:51:40:f5:7c:77:a8:24:7e:9d:84:f1:7f:48:9d:b4:
         a9:2d:1f:6e:4e:10:76:45:4b:ed:1a:50:a1:88:67:29:19:0f:
         02:d1:34:10:4a:f4:08:69:dd:9d:95:f7:4d:b7:f4:62:6f:a3:
         73:94:e6:51:69:33:7e:f5:a8:67:ca:a1:89:76:a0:00:ed:53:
         6b:34:1a:24:be:66:96:2a:a0:e0:a1:50:11:de:a0:b0:3f:40:
         9b:66:ec:b1:cb:e0:9b:d6:d7:ac:66:8d:49:d6:7a:e1:47:2a:
         67:58:0c:7f:dd:b9:4c:0f:57:da:02:0f:30:3c:30:ae:55:06:
         b0:03:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:09 2026 by rpki-client