Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
File:                     C41C3B7C2A9F11F1AEE17D7A9B833773.roa (raw, json)
Hash identifier:          BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=
Subject key identifier:   B9:95:C1:C3:2D:00:4A:56:F9:3E:C7:E9:D7:E7:BA:4C:D1:11:CB:C8
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       02B6
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
Signing time:             Fri 05 Jun 2026 02:31:32 +0000
ROA not before:           Fri 05 Jun 2026 02:31:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138385
IP address blocks:        103.113.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Jun  5 02:31:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a223504-6340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:e4:09:a4:83:5c:cd:f5:40:08:80:11:4f:
                    a2:ce:c9:84:f1:92:55:1c:a5:e9:9b:57:e8:86:5e:
                    ab:05:98:90:80:34:01:23:81:b7:d5:af:0b:5e:20:
                    24:93:42:74:e8:33:b3:b2:4c:f8:9c:87:4c:49:17:
                    f6:56:d6:32:48:cf:d4:f6:98:ce:ba:c0:a7:cf:84:
                    b4:83:94:02:77:c0:54:a4:69:31:fe:58:21:c1:44:
                    d5:0e:24:e6:70:32:b0:b3:40:6e:46:3b:7e:9e:4b:
                    f9:24:84:cb:cc:2f:14:d5:e9:d0:30:39:af:83:01:
                    02:40:99:97:1f:c1:2c:f8:9d:be:93:a2:58:6b:dd:
                    14:a8:ea:95:09:de:5d:4a:f8:ed:ec:a5:37:90:ad:
                    20:24:97:be:0f:81:1e:e1:d8:94:3c:4b:4e:48:20:
                    95:12:f0:4a:ff:2b:ce:d4:5c:ef:87:ad:2d:9e:e0:
                    5f:49:62:0b:5e:88:b9:18:33:d3:fc:aa:eb:ad:d5:
                    cc:d9:3c:ba:1f:1a:a0:7a:e8:2c:2d:d5:7b:ac:e0:
                    a2:05:f1:9f:95:82:0d:9d:f7:2a:a0:15:08:55:b9:
                    47:b5:79:9c:3e:c5:b0:86:10:82:f9:75:53:c3:77:
                    a2:37:d0:17:89:a6:9e:6b:58:3e:86:17:0a:ee:39:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:95:C1:C3:2D:00:4A:56:F9:3E:C7:E9:D7:E7:BA:4C:D1:11:CB:C8
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:7b:fe:93:ef:cc:c5:9c:66:be:30:b2:9e:90:75:69:fc:
         fc:ca:07:96:ef:c7:3b:7c:86:7f:fe:31:6d:46:e7:4c:97:2c:
         64:24:5f:da:98:e1:54:6f:70:cb:c2:f4:86:b2:e4:1a:c8:39:
         6c:35:a7:3c:2c:40:df:a2:4f:a9:ae:b6:c4:14:d3:69:07:d2:
         b5:6d:ce:ae:d5:65:bf:b8:5e:3c:9a:8c:6b:fc:52:ea:09:5a:
         a3:1a:93:ac:9a:b1:c4:42:71:b9:da:0c:93:d6:40:24:92:df:
         01:33:b4:05:7c:a1:bf:12:9b:e0:80:fc:4f:4c:c8:29:57:4b:
         ec:d1:01:a3:a9:a1:34:74:52:e2:bc:09:a2:fc:50:67:1e:21:
         2e:83:d6:33:1e:39:da:4f:46:87:fc:3d:93:76:6f:7f:e5:51:
         54:6b:52:27:8b:b7:56:e0:5b:63:4e:c9:cb:96:54:53:67:e8:
         33:9b:aa:6b:8a:d5:6c:35:f2:83:ec:95:e2:6c:d8:85:51:30:
         f6:77:4a:f0:02:2c:71:a2:ab:22:fe:b5:d3:c9:90:2d:dc:1c:
         9e:6c:9f:c8:bd:87:36:9f:a1:77:c9:e7:83:93:95:fc:70:be:
         64:ee:35:21:9a:9c:ee:91:48:66:15:bc:06:37:41:b6:0c:c5:
         fd:b7:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:33 2026 by rpki-client