Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/71FEBB84857711F18FAF10B98AA30FBC.roa
File:                     71FEBB84857711F18FAF10B98AA30FBC.roa (raw, json)
Hash identifier:          NaP0K5S3pecUp/CUi1T5mH9PBjjPwLcXtf+dOiNICvQ=
Subject key identifier:   E6:11:86:62:08:F0:A7:F3:68:B5:6C:8E:23:EC:C3:F1:0C:1B:1B:FB
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       01DF
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/71FEBB84857711F18FAF10B98AA30FBC.roa
Signing time:             Wed 22 Jul 2026 02:45:49 +0000
ROA not before:           Wed 22 Jul 2026 02:45:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.6.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Jul 22 02:45:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a602edc-531f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:04:70:4e:4f:e5:6c:2b:59:37:c6:b0:aa:
                    a3:59:4d:ca:11:68:7e:c6:da:00:77:05:16:32:d9:
                    e2:5d:2c:88:c1:34:65:a7:42:90:e8:c9:b0:40:5c:
                    8c:a0:0a:b8:45:ae:84:b9:7a:a8:e0:2a:b9:26:16:
                    23:49:61:c2:d2:2a:47:2b:6d:75:d7:ec:f8:d3:c4:
                    c1:09:70:a3:c4:19:dc:f7:48:98:9f:cc:cb:66:ff:
                    1a:a4:8a:51:74:f2:21:cf:50:e9:81:85:76:db:63:
                    76:b5:97:b8:39:2b:6a:00:76:1a:57:d8:27:51:4c:
                    5a:0b:0e:f7:14:e5:ea:3a:c1:3f:d7:49:10:a2:a5:
                    f2:f3:5d:aa:26:49:17:c1:ed:89:0d:9a:54:a6:4d:
                    4a:2d:01:f3:33:0c:e1:46:e4:78:c7:51:16:83:f8:
                    6f:32:2f:ea:d6:6d:ee:99:87:43:e5:51:5c:77:4f:
                    c2:31:94:c7:2f:2e:96:c8:ce:0c:c8:f4:44:33:17:
                    c3:68:e1:ba:63:45:09:eb:9d:cd:f0:87:b7:f0:91:
                    86:2e:be:97:78:c2:75:2e:c1:ee:7a:cf:34:60:c8:
                    0b:45:03:f8:fc:a7:55:ea:08:ff:f2:a2:05:c6:f2:
                    61:dc:5a:21:d4:92:6d:59:cc:e6:73:b9:9a:db:73:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:11:86:62:08:F0:A7:F3:68:B5:6C:8E:23:EC:C3:F1:0C:1B:1B:FB
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/71FEBB84857711F18FAF10B98AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:55:12:30:fd:16:37:a0:4e:85:81:09:de:6b:09:7f:96:
         33:22:f0:fe:39:0d:73:f3:9b:52:6b:e5:45:66:c8:e0:a2:cd:
         cf:63:13:33:47:3d:b1:48:b9:c7:99:90:61:81:6f:9e:0b:ba:
         4d:bf:61:de:fa:9f:f7:d8:62:45:0a:4b:e0:5d:09:6a:d9:aa:
         96:01:f0:e3:a2:f1:25:a5:65:bd:ae:26:79:30:d3:c3:0c:8f:
         97:be:bf:e7:82:d3:d0:0e:27:cd:c4:ec:e1:44:46:16:80:7b:
         a7:d3:3f:60:29:80:6a:56:d8:ef:22:ad:e8:50:ff:26:a4:09:
         b4:54:87:e1:5e:da:63:58:31:be:37:85:39:a8:f9:1b:71:6e:
         f0:28:b1:93:2e:0f:f0:88:5d:ef:f8:f9:0f:aa:9e:28:e8:4a:
         02:ba:06:c1:4f:ad:09:af:06:4e:02:b3:a0:3b:b5:59:ea:34:
         bd:9d:bb:d5:ac:64:96:6f:2e:fc:b3:25:7e:22:c6:c9:2f:d1:
         4f:a0:0d:66:e6:94:7e:ed:38:9b:ca:60:dd:c5:fb:1d:83:8f:
         dd:dc:8a:ce:8d:ac:8e:93:6a:13:85:ab:12:6e:72:3f:db:1c:
         12:c0:71:41:f5:0e:76:28:3b:24:02:22:56:46:3c:3d:27:c0:
         62:6e:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:29 2026 by rpki-client