Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
File:                     7FCFB4745E8411EE89DF693EC4F9AE02.roa (raw, json)
Hash identifier:          iRtV8BZ2CFLFs7wV9sW4BcqaRUjah+02FqIo4vn8Ivs=
Subject key identifier:   29:DE:DD:47:21:7A:57:11:FA:1F:C6:8B:BB:D2:60:A5:FF:D1:0D:FD
Certificate issuer:       /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial:       0651
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa
Signing time:             Thu 23 Jul 2026 00:24:19 +0000
ROA not before:           Thu 23 Jul 2026 00:24:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140880
IP address blocks:        103.152.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
        Validity
            Not Before: Jul 23 00:24:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a615f33-e84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:fa:be:98:45:05:65:24:5d:a1:55:62:81:
                    de:c9:3e:b5:09:15:6c:cf:c0:16:15:99:d0:d7:e8:
                    5a:67:68:b6:e7:35:cd:a5:12:02:ee:9a:7d:54:62:
                    0e:e5:ff:c8:f7:97:52:5b:ed:90:5b:69:11:9e:0a:
                    cd:11:28:3d:2b:43:5e:90:f1:04:11:e6:21:27:e3:
                    a4:c7:46:8c:49:f8:85:10:0e:7c:6b:b6:ea:76:29:
                    7f:6b:9d:d0:49:ba:46:6e:db:23:02:28:7d:ce:7e:
                    61:63:9f:58:06:49:4c:2e:82:d4:a1:99:52:a5:0c:
                    cd:cf:5e:3f:b3:21:01:63:c0:0b:d1:52:40:cb:f0:
                    38:5f:61:2b:d4:45:a5:03:9a:25:94:39:5c:6b:0d:
                    a2:7d:19:5e:10:58:15:9e:77:80:d3:03:b3:76:f1:
                    e4:aa:fd:f5:21:44:97:41:77:e2:5f:1f:49:35:55:
                    87:0a:9d:94:34:3f:ec:cc:a8:11:dd:1b:09:fb:40:
                    ca:77:7d:51:ea:f7:f3:e9:d4:7a:4f:a7:fd:2a:11:
                    2b:b8:3f:29:4c:79:cd:fc:53:4e:a9:95:c6:95:5b:
                    a7:8c:9c:49:c7:50:8e:cc:bb:76:e1:95:37:9b:3b:
                    87:8f:7b:d4:64:82:cf:ac:ba:e5:35:b0:71:7b:d5:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DE:DD:47:21:7A:57:11:FA:1F:C6:8B:BB:D2:60:A5:FF:D1:0D:FD
            X509v3 Authority Key Identifier:
                keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/7FCFB4745E8411EE89DF693EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:29:69:86:22:95:36:32:81:4e:6c:19:c8:f8:d6:b3:96:
         46:52:00:e6:79:40:91:33:47:b9:1e:d2:5f:d3:86:3b:5d:7c:
         be:d3:1e:c4:28:1a:86:c1:af:cb:6c:2f:44:d3:f7:4b:fa:20:
         b3:ac:f7:e4:f5:1d:d5:92:16:e2:5a:47:7b:6e:24:c5:56:5c:
         d9:17:14:bb:2e:08:8e:e7:d9:64:a6:51:1c:91:42:59:cb:ac:
         b6:0f:8c:be:6e:08:84:3d:f9:e9:c8:11:30:fa:a5:88:6d:3b:
         bc:61:5e:3a:df:64:28:54:e3:c9:80:9d:ab:34:35:99:87:cb:
         41:11:b1:d0:d8:11:c2:f1:2f:b5:92:59:6f:13:73:bd:66:66:
         ce:35:4f:7e:58:94:72:97:a6:f5:d7:8f:3f:aa:8c:20:6e:e3:
         02:ed:78:ed:09:80:3e:c4:c4:bb:f5:9c:11:94:b5:dd:48:53:
         51:7a:0a:b7:d8:9d:53:9a:03:61:a5:32:8b:84:d7:2c:7c:cc:
         7a:63:61:54:2c:29:11:be:db:87:ec:c8:66:c4:53:0a:06:c6:
         02:98:5b:1a:4d:41:44:c0:87:3a:37:0a:82:8f:87:93:53:fd:
         99:2c:2a:04:2c:d2:89:eb:ee:98:5c:0b:17:9c:ba:c4:b5:17:
         1b:f7:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:27 2026 by rpki-client