Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa
File:                     68A35F78831411EC90E07C19C4F9AE02.roa (raw, json)
Hash identifier:          nmSajl93syLonToAepyIBTZIeFMb1rAz42BPhTJ/USw=
Subject key identifier:   53:71:6F:B5:99:0B:69:2C:37:77:F8:B1:60:38:F1:3E:9A:7A:E6:A5
Certificate issuer:       /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial:       0D06
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:37:19 +0000
ROA not before:           Wed 02 Sep 2026 18:37:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134383
IP address blocks:        103.121.140.0/22 maxlen: 22
                          2001:df6:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3334 (0xd06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
        Validity
            Not Before: Sep  2 18:37:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986cdf-32ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:ea:77:6e:d3:bd:4c:9f:b9:d6:30:30:8d:
                    7a:c8:89:b5:1d:55:5c:e0:4f:9b:47:15:e9:b7:c0:
                    6a:8a:13:ad:08:b8:bf:53:02:df:2d:4c:69:16:89:
                    18:5f:21:be:c5:fa:3a:a5:50:67:d5:70:23:14:87:
                    a7:b4:79:47:c2:7e:e2:ec:11:b6:e2:aa:b5:0e:de:
                    f7:1d:dd:8d:a8:e7:1e:ac:e2:18:58:33:e9:08:14:
                    6d:00:db:89:84:4a:b3:be:76:b3:b8:af:e7:3e:c1:
                    28:bc:12:75:0d:5a:7d:50:ec:6d:ba:5a:67:40:75:
                    7b:97:52:87:70:78:97:22:10:e9:22:f9:06:f2:2b:
                    24:ae:bd:05:39:b7:1f:11:83:59:5d:94:43:fd:77:
                    9e:07:53:28:a8:c2:f8:45:0a:69:8c:cf:49:27:63:
                    6d:af:3d:9e:a9:b3:3d:2b:55:d5:5b:6d:fb:27:0d:
                    0e:2b:a6:30:c2:a5:8c:0e:63:5c:d5:ca:46:65:83:
                    87:46:36:5d:69:37:a7:ba:d3:00:64:ca:a1:c5:dd:
                    5d:4d:87:e9:f0:e1:c6:51:3c:ad:05:b9:66:6b:50:
                    4d:80:5b:13:e9:23:6b:95:33:66:ef:c6:ca:cb:b9:
                    00:51:92:47:62:89:1b:79:86:37:cc:f4:b3:7b:ed:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:6F:B5:99:0B:69:2C:37:77:F8:B1:60:38:F1:3E:9A:7A:E6:A5
            X509v3 Authority Key Identifier:
                keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.140.0/22
                IPv6:
                  2001:df6:4300::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:08:7f:9f:fa:43:ac:19:70:a5:2b:38:61:c2:7d:0a:1e:
         48:e1:10:11:15:8d:85:df:e6:41:8b:ea:56:2a:ad:f0:11:da:
         ce:d2:70:f1:b6:34:e6:29:0f:e2:fa:6d:ac:f0:d8:34:3a:21:
         d2:bb:55:07:87:58:05:97:4c:bb:3e:7b:42:7f:94:1c:fc:59:
         a8:f8:c1:7b:d5:b6:68:a0:51:c3:d2:0b:cd:42:bb:ba:15:39:
         b2:89:6d:81:0b:83:fa:e4:69:a7:aa:d6:4d:6d:de:4d:b7:2e:
         00:14:df:5a:8f:d1:25:fc:82:d0:90:53:2c:64:7f:a6:bf:af:
         77:66:f0:ff:fb:37:aa:6d:62:54:49:1d:b6:14:e6:2e:63:88:
         d1:2c:e2:a0:0d:29:29:c2:59:7e:78:4f:44:7f:f9:d9:52:ad:
         96:d1:6f:31:49:50:d3:4f:79:53:68:87:e3:45:f4:d3:06:8c:
         63:4c:58:d6:3e:18:c7:e0:6a:93:7e:25:4c:e8:6c:ae:41:5c:
         14:39:b3:49:20:b3:8e:f6:be:b2:da:2c:44:90:51:53:64:e7:
         3f:57:7b:3e:92:9a:e9:12:21:d1:db:db:32:16:d7:80:f3:10:
         be:53:9c:d7:02:10:69:d4:63:83:98:90:15:28:24:1a:f9:37:
         c0:56:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:50:43 2026 by rpki-client