Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
File:                     0CDA881EAF0311EB96FC344BC4F9AE02.roa (raw, json)
Hash identifier:          RPxOFfJjrOI7UQCih5XD3UyksK+kJQvkuxdpxXN2aCA=
Subject key identifier:   D9:4D:5A:3C:99:6E:99:CF:A9:1F:EA:5D:DF:37:71:8D:7C:0F:07:B3
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       06F7
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
Signing time:             Tue 14 Jul 2026 23:23:58 +0000
ROA not before:           Tue 14 Jul 2026 23:23:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.119.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Jul 14 23:23:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a56c50e-a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:49:b0:37:ca:69:4b:03:ed:43:aa:ad:af:
                    42:d6:38:24:d9:f0:c7:3d:94:d3:7a:a2:6e:6c:24:
                    75:b6:3e:09:67:e0:3f:88:de:80:5f:e6:47:27:41:
                    cb:9e:f0:7a:c1:b9:df:5f:83:f1:f2:7c:eb:57:eb:
                    77:41:ec:a2:f1:61:a8:bd:57:ab:22:30:ab:09:12:
                    8c:e8:0b:e6:37:56:27:e6:41:d7:5d:01:ec:7f:30:
                    6f:fc:5d:f5:c9:18:bd:5d:20:ab:0a:da:30:a0:64:
                    96:62:6d:79:c2:11:e7:1f:7f:11:f1:d5:44:be:a2:
                    bf:e6:79:59:dc:93:76:92:1e:dd:fe:51:2d:76:24:
                    4b:7a:66:a6:65:4e:28:60:16:59:62:3c:d9:56:12:
                    b6:e1:78:78:0c:b2:3a:6e:c4:6e:25:5f:2d:5b:7e:
                    96:4d:79:ec:08:6e:94:c6:40:56:2d:2e:09:7c:a4:
                    56:44:0a:bb:09:04:08:45:51:75:22:f2:cb:b2:93:
                    e5:29:a8:47:67:5c:bc:a9:1a:16:a5:20:df:e9:9e:
                    47:e0:d2:45:69:21:42:35:c4:2c:5c:1d:4d:46:db:
                    9f:74:3d:a9:c6:d0:81:9c:fd:94:b4:6b:5e:3b:cd:
                    d8:63:a2:4f:78:25:45:4a:e7:7e:8b:db:83:d3:fe:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:5A:3C:99:6E:99:CF:A9:1F:EA:5D:DF:37:71:8D:7C:0F:07:B3
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:12:8f:a0:1e:04:3a:05:6f:1f:27:5b:71:b9:71:e9:46:
         b0:40:ea:ef:71:8e:2e:f9:f9:1b:de:f0:c6:8a:d1:3b:a7:3a:
         a2:d7:66:7d:a6:79:da:f0:54:90:5e:a8:cc:6e:a0:fe:54:c9:
         db:7d:a7:5f:e4:d6:a7:ab:f7:45:60:61:69:ba:f6:b2:16:c5:
         22:d8:ff:96:2a:97:bd:a9:e0:70:8a:5b:f8:92:cd:99:e0:3a:
         90:20:15:3e:3e:07:de:57:fc:64:4f:58:08:f1:3b:28:27:a1:
         41:a1:67:b7:3f:55:5f:07:25:58:31:3b:00:b0:09:d1:85:ab:
         5b:fc:e9:e2:84:29:f0:a7:02:9d:f5:5b:ba:b7:38:c8:9b:47:
         5a:66:1c:c2:78:a1:0a:b4:98:0a:6a:3b:9b:eb:76:56:9d:77:
         68:93:8d:1e:90:74:f6:4d:9b:09:d0:6d:88:a5:90:a9:73:1c:
         56:2d:43:78:f2:bf:11:3b:46:6a:2c:37:14:61:c2:6b:83:47:
         93:f4:f3:51:20:3b:1a:b8:f5:78:27:e5:15:2a:b3:83:2c:cb:
         3c:1d:03:39:25:56:56:0c:a2:bd:a9:46:b2:9a:23:8a:b2:f0:
         98:40:25:d4:3d:a3:95:59:54:c4:0f:60:c5:b6:5d:a5:a9:36:
         8b:30:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:02 2026 by rpki-client