Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/6C9E3B36803311F1AD95C63B68A30FBC.roa
File:                     6C9E3B36803311F1AD95C63B68A30FBC.roa (raw, json)
Hash identifier:          o8dV47+n+UlXYBpwopVlH11KiJaiqwp0xkampY+WyhA=
Subject key identifier:   02:4F:74:99:7D:5E:E0:B8:A7:DD:67:75:22:4E:05:0D:98:6A:6C:F0
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       0239
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/6C9E3B36803311F1AD95C63B68A30FBC.roa
Signing time:             Wed 15 Jul 2026 09:56:18 +0000
ROA not before:           Wed 15 Jul 2026 09:56:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135130
IP address blocks:        103.239.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: Jul 15 09:56:18 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a575942-93a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:0a:e9:d1:da:93:b2:e1:d7:17:fc:83:65:
                    3a:93:02:3d:eb:9c:7f:da:9e:65:f5:69:27:57:dd:
                    9b:3a:25:c4:27:07:c0:0d:98:9d:46:23:a2:12:af:
                    df:95:a8:06:66:3b:35:a0:fa:e0:91:85:81:7d:52:
                    84:9b:07:ff:31:66:f4:3f:7c:e2:b0:4c:0e:91:e0:
                    aa:f0:c1:1c:54:5a:32:ec:97:17:44:f7:a0:75:4b:
                    cf:73:11:7f:71:e2:13:d7:56:b7:a8:e6:27:0b:c9:
                    b8:f9:6c:2e:f6:94:bd:3e:8d:e0:18:78:b5:00:49:
                    95:81:c0:a1:f4:b1:f9:86:c2:7e:a5:c9:9e:92:d2:
                    36:c0:c6:e6:2d:a5:40:bb:28:11:43:df:b8:95:41:
                    6c:41:1d:79:3e:30:8f:18:30:31:54:b1:06:83:2a:
                    0c:aa:12:a3:23:fd:d8:a4:03:23:2f:b6:70:7a:23:
                    72:f3:c2:52:c3:03:f7:28:ce:82:97:84:92:7d:88:
                    42:9a:00:53:b4:83:a9:75:ae:6e:92:a7:b2:ab:fe:
                    56:b6:b7:8f:19:a8:89:a5:3f:0e:c3:3a:39:57:60:
                    2a:75:61:70:1d:16:c6:98:8a:c4:aa:7e:63:fe:d5:
                    9a:c8:27:b0:7f:fd:96:2e:6e:93:27:c6:78:56:75:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4F:74:99:7D:5E:E0:B8:A7:DD:67:75:22:4E:05:0D:98:6A:6C:F0
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/6C9E3B36803311F1AD95C63B68A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:21:96:b8:ef:ef:47:39:a8:d2:48:5a:57:83:54:70:a2:6e:
         4e:a0:98:4e:f3:59:ea:1f:76:e9:6c:af:5d:cc:c8:a2:44:28:
         46:5b:4e:a6:7d:2a:d8:72:62:e9:c0:b9:9a:17:2a:d4:8c:a3:
         55:35:20:21:03:ab:e1:0d:ed:3e:d8:78:6d:c4:8c:89:68:33:
         85:d9:a7:57:11:e8:13:d4:4c:ee:0e:97:a7:be:e3:4c:3f:8b:
         3c:2f:50:2c:6b:fe:e3:3b:03:48:46:18:5e:cd:14:3c:45:c3:
         bd:dc:c4:05:12:92:5e:a2:7b:b3:c0:a9:fd:a6:52:ba:12:fa:
         e1:9a:ea:c8:1c:ed:ab:23:e9:78:b6:6c:0f:48:24:b7:5d:7c:
         f6:dc:e6:e0:24:8d:19:a3:c3:13:81:23:91:23:2b:7d:84:97:
         7f:85:bd:78:f3:e9:60:62:09:45:6a:13:07:0b:25:a4:32:5c:
         67:df:ae:74:af:c8:46:86:78:dc:cf:fd:6c:62:dc:c3:a1:49:
         d5:cf:9a:29:fd:74:24:ea:82:01:3b:da:e2:76:2e:1e:dc:ef:
         3d:b4:ff:32:35:3d:92:1c:a2:23:37:74:9e:06:83:1a:8c:42:
         32:84:e9:b6:d7:af:46:e7:29:ba:38:bb:54:b9:62:93:6f:21:
         b6:93:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:04 2026 by rpki-client