Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa
File:                     6D3BA6B0834D11F18EA3856060A30FBC.roa (raw, json)
Hash identifier:          02eJd1zQT0JnnntRDHq6rSGX1dpQL3jq24n2qQzP6QM=
Subject key identifier:   C6:BD:F8:60:F5:EC:E8:E0:16:EF:3B:FC:E5:EE:EC:0A:3C:B5:CD:38
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0D25
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa
Signing time:             Mon 20 Jul 2026 19:19:30 +0000
ROA not before:           Mon 20 Jul 2026 19:19:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     139294
IP address blocks:        103.115.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 20 19:19:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5e74c2-2f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:25:a0:95:ac:14:01:bb:99:b8:75:b8:06:
                    9e:33:f0:9f:4a:8a:96:22:09:98:41:33:19:59:4c:
                    f2:c4:67:c2:0d:9e:b8:bd:c0:91:85:96:fb:ce:e5:
                    25:e3:e0:9b:d2:03:a6:56:c9:8c:48:46:c2:33:f3:
                    9e:c3:db:b9:95:79:71:08:2a:35:b8:47:70:49:55:
                    4f:5c:66:ef:3d:e2:d1:ac:19:0a:11:26:ce:91:ac:
                    12:03:fd:12:82:52:cd:3e:87:74:2d:80:72:08:be:
                    55:4a:f9:93:0e:25:7b:42:8d:0c:82:ef:5c:11:12:
                    48:ec:86:f8:25:d4:4c:00:7f:c8:c9:97:61:cd:38:
                    f2:1a:db:aa:d5:d6:6b:f1:6a:55:68:85:9f:31:18:
                    9e:78:22:11:8b:49:73:e8:01:86:29:25:ea:60:60:
                    c8:98:16:b6:78:54:5c:12:ea:c5:82:93:ea:f7:20:
                    5b:c3:5d:ae:bc:a0:45:41:a6:2c:83:8e:f8:d8:a9:
                    11:9a:51:fb:74:33:16:b5:98:2e:cb:d8:69:ff:55:
                    9a:34:20:8e:1a:68:f4:c1:53:84:67:81:95:49:91:
                    d8:a3:63:e9:d2:01:2b:25:28:8a:e4:c0:62:a6:b6:
                    ba:9a:da:22:0f:86:4b:62:37:a6:fd:d1:be:4e:12:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:F8:60:F5:EC:E8:E0:16:EF:3B:FC:E5:EE:EC:0A:3C:B5:CD:38
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:4a:e7:04:c4:76:b6:13:bc:8b:35:03:08:d5:1b:20:b5:
         6d:0e:8d:50:6d:f7:dd:5e:18:30:49:7f:9c:3e:c9:e7:1f:f1:
         26:f1:5d:d0:39:ad:99:12:ca:85:a7:65:03:1b:90:38:f3:20:
         74:63:91:08:c0:bb:1b:dc:5c:5a:eb:b7:e3:4b:e7:a4:f5:f0:
         14:ca:7b:30:d8:87:62:33:e8:f3:44:55:dc:1f:96:f6:24:4c:
         44:a6:53:4f:70:8c:34:49:76:d5:9f:52:53:a3:54:51:9a:9b:
         19:e4:d9:d6:6d:da:5a:00:50:47:6b:47:7d:a5:2b:43:81:c4:
         73:8d:1a:13:b5:79:79:65:9c:ef:98:7b:78:14:4e:57:2a:3b:
         6f:59:78:7a:10:5c:1e:87:5b:a0:17:61:7c:bd:29:42:df:d4:
         63:8d:9e:78:69:a9:97:97:68:e7:20:fd:73:65:d9:75:61:6a:
         e9:de:f9:5b:6d:c2:84:6e:b9:a7:7a:ee:fc:48:49:5b:51:7c:
         71:42:fd:ee:f3:c5:83:58:08:d5:e4:0b:a9:0e:2d:8e:da:3b:
         a9:55:18:03:f8:a5:99:5a:64:2c:66:7f:13:c8:c6:ea:31:1f:
         1c:5b:a6:96:53:af:28:d6:c4:f1:12:b4:b4:87:0c:c0:00:fb:
         76:78:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:52 2026 by rpki-client