Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File:                     F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier:          99vdeYRHmvAZBTn+o2vbxAXonLGmmxRzUfRMT6ujYvs=
Subject key identifier:   3A:77:8B:98:A0:AE:33:9C:FB:7F:6C:93:DF:6A:07:6D:F2:31:4C:07
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       0529
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 00:25:54 +0000
ROA not before:           Thu 23 Jul 2026 00:25:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139466
IP address blocks:        103.141.199.0/24 maxlen: 24
                          2001:df1:b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jul 23 00:25:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a615f92-3d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:3e:1b:9b:e5:14:e6:19:54:a2:9f:81:9e:
                    d5:5a:cf:c0:2d:fe:cc:0c:78:6e:34:4d:4f:b4:4a:
                    51:3d:5a:76:3c:3d:59:71:a0:10:e9:19:55:47:07:
                    65:92:a1:9a:be:0d:40:fe:c7:c8:86:07:5b:00:53:
                    40:dc:53:25:ef:0f:c0:10:cc:4a:96:f2:3f:55:35:
                    f4:af:77:84:cc:98:66:98:94:df:1c:a0:8a:56:5f:
                    e4:7d:c8:37:74:27:3d:28:75:86:d1:a1:20:2e:d0:
                    86:69:d6:a7:51:62:39:94:1b:4f:ed:b7:af:c2:46:
                    70:82:65:64:16:a9:a5:ad:dd:e7:f4:ff:a8:3b:79:
                    6d:bd:0a:49:38:b5:63:d2:aa:e9:e2:5d:bc:24:e9:
                    d9:a1:34:30:33:3b:e0:23:9a:bd:df:56:98:d8:7b:
                    3a:b1:e2:2f:6e:40:2f:cf:75:43:92:81:ea:ef:05:
                    ff:da:88:6d:81:a7:2a:93:ad:3e:be:ac:0c:d3:3f:
                    30:a4:8f:4c:be:c7:74:73:95:8b:13:0c:1b:94:cf:
                    ab:c1:4b:ec:61:cc:41:59:1e:cd:03:06:67:e3:88:
                    6b:08:af:34:b1:63:75:8c:90:f7:dc:3f:5a:f7:86:
                    3b:72:50:12:f8:a8:81:d5:62:7d:4e:48:2a:13:08:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:8B:98:A0:AE:33:9C:FB:7F:6C:93:DF:6A:07:6D:F2:31:4C:07
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.199.0/24
                IPv6:
                  2001:df1:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:87:4b:f7:f6:e0:72:61:d4:a7:b1:34:7a:74:be:d9:93:52:
         13:46:a8:c2:8c:f4:84:2e:59:0d:1b:76:f4:6c:85:d6:ad:90:
         ce:51:16:4f:39:55:72:be:69:f1:01:fc:8b:56:bd:ec:ca:6e:
         23:bd:1a:63:d5:59:3a:a8:51:05:81:5f:41:06:2c:0e:57:16:
         b8:da:15:b4:1a:2e:f9:ed:74:7f:14:5c:c9:df:67:6b:c0:3b:
         0c:9f:b9:74:99:e1:59:9d:e0:10:c5:8b:46:79:fc:2e:d4:40:
         e4:ea:f6:3e:5d:be:08:64:b0:34:0e:8f:88:aa:22:a9:c9:a8:
         b0:39:f0:d3:f9:9a:f5:cb:7f:6f:07:40:fe:86:73:a0:5c:86:
         e7:e6:85:10:36:89:e1:a1:6e:3e:54:cd:1f:c8:10:86:f7:4a:
         48:f8:8d:8e:72:65:64:69:84:ca:7d:a3:17:e3:28:25:86:df:
         fd:10:78:65:56:a3:2d:00:5b:92:25:c6:52:ef:1a:db:be:41:
         24:34:98:fd:a7:6d:a8:2f:b9:33:cb:84:57:f3:00:b1:78:87:
         fa:41:48:3d:08:28:a2:75:0b:e3:7b:df:e2:35:08:d2:01:cf:
         6f:78:88:1c:94:0d:22:ce:08:9f:ff:9d:82:db:3f:f3:4a:0e:
         52:dc:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:30:37 2026 by rpki-client