Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/735B6F567A3511F1B2F58C8D7FA30FBC.roa
File:                     735B6F567A3511F1B2F58C8D7FA30FBC.roa (raw, json)
Hash identifier:          EMQ6CoMWyCLfykFVvf7rxGey8+dG1wKLN+ZHLrUwhzs=
Subject key identifier:   B5:7E:6D:24:10:A0:7D:D0:CA:DF:76:D0:0F:D4:87:D9:32:A0:4C:FA
Certificate issuer:       /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial:       01A3
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/735B6F567A3511F1B2F58C8D7FA30FBC.roa
Signing time:             Thu 09 Jul 2026 06:32:49 +0000
ROA not before:           Thu 09 Jul 2026 06:32:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149765
IP address blocks:        103.159.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
                          rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
        Validity
            Not Before: Jul  9 06:32:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f4091-8c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:ef:2a:eb:07:96:97:7b:09:cc:8a:5b:19:
                    b7:cd:ce:5b:8e:71:1d:67:ac:be:85:56:da:46:20:
                    21:22:5a:42:57:39:90:c7:16:6b:f1:34:ce:c9:53:
                    a4:7f:c9:73:65:7b:11:9f:d3:4f:a7:b0:ff:e3:7e:
                    82:f1:a5:3f:8e:8d:91:10:c0:56:a7:f3:c9:ea:87:
                    de:c8:63:93:de:2c:75:b0:91:9c:4b:ec:2f:75:58:
                    02:4c:12:13:7a:45:18:6f:96:dc:25:01:5e:1d:c8:
                    5c:b3:7d:49:46:fa:0f:16:16:9c:16:11:01:58:7b:
                    7d:4f:2b:15:0a:c1:47:e3:7d:f4:75:46:1c:80:13:
                    1a:54:cc:59:f3:23:b9:1c:a5:43:6d:31:47:02:f4:
                    ab:9c:70:af:7a:8f:e6:c0:ee:29:d5:c1:7d:8f:6f:
                    80:0b:01:4b:4b:8a:79:18:14:62:37:46:a8:01:38:
                    20:6d:99:e1:c0:9f:3d:c2:66:15:b8:87:1d:b8:8a:
                    8a:30:7f:d6:d5:da:d3:07:d5:69:c5:6e:58:fc:28:
                    54:0e:e4:a0:71:92:05:41:0a:3d:44:0b:ba:2f:41:
                    a0:b1:1d:93:de:e6:51:01:03:78:8e:b1:23:85:a7:
                    36:8b:ea:b7:ed:f0:ef:87:77:77:28:a6:00:a8:a3:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:6D:24:10:A0:7D:D0:CA:DF:76:D0:0F:D4:87:D9:32:A0:4C:FA
            X509v3 Authority Key Identifier:
                keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/735B6F567A3511F1B2F58C8D7FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:8d:89:11:5c:87:60:79:8a:d6:91:d6:82:6d:7f:18:6d:
         42:0a:3b:1b:90:5f:c1:86:f5:f6:94:e0:c7:70:fd:87:71:49:
         84:a6:6b:9c:cd:eb:0b:b1:bb:08:86:af:eb:ac:fe:1c:40:fc:
         48:55:98:d3:dd:ba:2a:cf:d0:78:53:9b:0b:68:da:94:25:3e:
         11:99:b2:86:3b:90:29:d7:25:d3:dd:d7:5c:c7:d1:dd:d3:53:
         c5:ba:d6:7d:53:f5:9f:e9:9c:92:c0:c6:e5:9b:58:74:1f:e8:
         1b:59:44:ef:39:09:40:b2:06:57:50:50:b5:09:8d:d8:b8:78:
         9c:58:d9:22:f6:70:c7:6e:7f:10:a1:ac:94:ea:f5:bf:f0:df:
         5b:ef:7c:ae:ce:f3:b1:58:ab:56:2d:71:26:0f:48:41:3f:66:
         2c:dd:85:69:ec:5e:cd:a2:3a:4f:5a:22:c9:aa:4a:73:39:5a:
         70:4b:51:13:71:5f:33:57:8e:48:3d:e4:06:b3:7c:bf:16:4b:
         8b:9c:58:63:42:a4:b9:28:4e:ce:60:4e:ea:1a:99:05:01:e2:
         b7:56:2a:96:df:2d:b1:63:b4:d2:c7:42:6f:e2:92:b2:74:6d:
         d4:03:d0:9a:e5:9a:5e:5e:a6:3e:e7:f0:43:6c:c8:44:50:90:
         e1:36:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:01 2026 by rpki-client