Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
File:                     6ABF1108DD0C11EFBD619B85C4F9AE02.roa (raw, json)
Hash identifier:          01UiF4dupnleZ3cY+hMuL57eYYzuBzeVgHGt3xr/vbI=
Subject key identifier:   4C:2E:34:19:11:43:BB:0E:C4:04:A1:2E:68:68:4B:2D:08:87:EC:C7
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       0116
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
Signing time:             Sun 03 May 2026 06:39:00 +0000
ROA not before:           Sun 03 May 2026 06:38:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134101
IP address blocks:        103.52.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: May  3 06:38:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6ed83-9a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:07:11:67:8b:1f:36:e7:5f:71:20:c6:ef:
                    85:ea:4b:33:54:98:94:6c:84:5b:d5:e6:20:78:59:
                    82:a6:82:82:51:56:d2:9c:d3:bd:4c:a3:50:dc:1a:
                    af:06:5c:3b:d5:cd:c8:7b:b2:f3:90:7d:21:6c:b8:
                    8b:70:0f:17:f4:54:a5:47:35:dc:16:7f:94:b4:cd:
                    00:39:84:33:3c:6d:50:ca:86:fb:76:dc:00:d0:25:
                    32:77:06:b2:02:ba:c1:c5:b6:75:75:16:c7:49:40:
                    91:27:99:ab:70:83:20:11:10:ae:ab:de:8b:4e:6d:
                    53:85:6f:60:59:43:a0:c5:61:ff:2d:b2:ab:84:38:
                    12:d2:9e:68:88:ab:93:d5:3d:4f:8a:14:46:61:98:
                    c0:ea:e5:f3:c2:98:27:f3:d0:35:78:52:8b:ec:14:
                    0a:d2:f9:f6:e3:2a:0e:47:ad:42:b4:c6:13:3a:e6:
                    19:61:38:38:9d:02:5b:ea:72:df:10:df:87:d3:f6:
                    0f:be:0c:cd:9e:b7:4b:95:90:29:84:1d:96:e6:e8:
                    25:86:35:78:ae:c5:b8:ee:c1:98:70:8a:34:fa:a7:
                    43:b1:a3:2f:55:24:a6:77:39:00:af:91:70:86:37:
                    e2:4d:62:41:6a:4e:a0:73:03:7a:31:88:fe:6f:e2:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2E:34:19:11:43:BB:0E:C4:04:A1:2E:68:68:4B:2D:08:87:EC:C7
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:b0:2f:69:a9:75:5c:12:9e:9b:a4:f2:88:10:90:f7:d6:5c:
         39:e3:ca:27:7e:be:3b:32:4d:00:0f:25:6a:3e:d4:ad:63:0d:
         76:ea:20:e0:87:c0:e3:5f:3f:b9:5e:32:74:e3:bc:5c:2a:14:
         62:a2:c9:81:5c:dc:c6:9a:7d:98:0f:43:50:23:8e:d9:9d:02:
         2a:10:92:99:d9:6c:35:02:34:72:09:c8:0e:16:26:59:f6:60:
         0c:1b:41:ac:f9:4d:ce:e9:00:50:96:8d:2f:5c:1f:21:c5:2c:
         dd:94:2d:5d:e9:1a:4f:0e:67:bb:73:17:c7:30:24:8d:c8:34:
         2c:b7:ed:7f:41:80:45:d0:15:9e:ae:72:c6:53:cd:63:b4:35:
         e5:c8:be:54:1b:81:0f:30:3c:25:2f:e9:05:f9:e0:46:57:fa:
         e2:0f:fc:c8:e7:e3:fc:16:41:6a:9e:26:57:21:3e:70:36:51:
         8d:bf:9b:45:e1:ef:ba:b2:73:2d:34:81:83:e9:61:ba:25:ec:
         31:6d:80:0c:34:01:a3:e6:cc:16:0f:95:49:27:22:f9:d9:75:
         0d:83:96:0a:48:78:d8:ff:61:aa:21:f4:6d:30:64:b1:76:94:
         eb:0b:e6:c7:b0:6a:19:ce:95:29:df:91:06:c6:78:9d:14:05:
         60:42:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:02 2026 by rpki-client