Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa
File:                     BA767AE8584A11EA91887312C4F9AE02.roa (raw, json)
Hash identifier:          NnmkTMEjqLBth5zyPrTV0vLNmyNAm7RuK7t9HNVhKHo=
Subject key identifier:   22:B8:00:0A:C4:87:81:81:8F:58:52:82:6B:AC:19:2C:A7:23:82:BF
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0B62
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa
Signing time:             Tue 26 May 2026 19:27:30 +0000
ROA not before:           Tue 26 May 2026 19:27:30 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138961
IP address blocks:        103.137.178.0/23 maxlen: 24
                          2400:b860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: May 26 19:27:30 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a15f422-0bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:a8:43:77:06:28:a4:1b:5f:64:65:af:a6:
                    68:50:63:1a:51:2e:e3:92:b1:62:f0:20:81:d4:61:
                    86:ed:96:01:2a:2c:fb:40:df:24:85:c6:d1:c5:26:
                    2f:56:a1:a9:2e:78:41:d8:be:36:7e:f6:41:35:47:
                    3b:d0:6f:87:b6:a2:28:fa:2f:b4:2b:21:6e:b1:ab:
                    f1:54:8b:41:f7:31:df:da:20:84:29:0b:6e:85:66:
                    f7:c7:2d:1f:7b:7e:99:7b:cb:5d:56:f6:cd:0b:cf:
                    0f:55:3b:60:4d:14:a9:b2:3a:f2:36:9a:51:a1:d6:
                    f6:8c:ff:9e:e8:65:a7:32:eb:b7:96:7e:a1:e8:11:
                    d7:19:67:a3:d0:4d:0f:6f:02:62:a0:48:8a:47:76:
                    44:0e:15:00:3a:b8:54:8c:da:c6:e0:86:71:f8:59:
                    74:71:fe:ea:c4:29:2f:0f:70:c4:36:17:25:52:f0:
                    2c:f8:86:12:66:0c:4f:e6:fe:b8:c9:26:b6:b1:4f:
                    6a:c3:95:42:48:96:25:0b:f6:3a:f0:16:a3:63:5d:
                    b2:56:dc:db:8b:02:b9:af:aa:4b:f2:68:4d:c6:1b:
                    d9:95:cc:31:66:36:98:11:22:df:37:fb:e7:68:59:
                    8e:ec:4b:37:10:71:49:fc:b9:2a:aa:11:a1:65:e5:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:00:0A:C4:87:81:81:8F:58:52:82:6B:AC:19:2C:A7:23:82:BF
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/BA767AE8584A11EA91887312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.178.0/23
                IPv6:
                  2400:b860::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:bd:39:92:41:74:2a:76:84:7d:4c:e7:f4:b7:3c:72:0d:
         05:05:7a:9f:04:7d:b1:ea:67:43:8f:b4:fe:a8:cf:39:a5:ac:
         07:15:3e:99:0c:8f:11:b2:e3:63:20:57:e1:64:0b:96:e9:c7:
         08:72:61:c7:5c:ec:1f:08:40:d7:84:59:9d:86:41:e8:bd:ed:
         6c:4b:8e:2d:bc:9e:7e:6f:1e:bb:c4:53:88:d7:44:e5:c2:6c:
         53:37:8d:9d:98:6e:3a:f9:04:83:68:df:fd:b0:75:65:a6:ff:
         4a:1e:20:1f:a0:56:f1:89:e8:6d:60:53:f5:81:53:9f:e1:24:
         28:fe:7b:51:df:7a:6f:1e:be:6d:02:e6:2c:e4:7c:2a:9f:63:
         de:c4:17:b4:12:89:43:e2:39:54:5d:44:f2:24:ad:ca:40:58:
         19:59:7f:c9:53:b2:83:95:62:08:e9:66:28:50:5d:16:a4:89:
         8d:87:b4:5e:25:66:32:6c:3c:eb:55:08:db:21:6a:88:55:43:
         97:a7:fa:51:21:be:43:59:8b:1b:9d:0f:a6:73:88:7d:43:b3:
         7c:09:18:72:5f:cc:9f:1b:75:3a:1a:ba:f8:7c:37:24:0f:03:
         31:5d:5c:8d:f2:9a:5e:68:b4:d6:49:7d:de:be:a4:a9:5e:aa:
         40:d3:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:38 2026 by rpki-client