Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
File:                     63EF8E3C2EA711F1ABA05366B9833773.roa (raw, json)
Hash identifier:          EA6d672FegDLOWHoAcJLbYpa0U9r/Z+33amyClBYG4o=
Subject key identifier:   09:BD:64:9B:5C:86:47:1E:33:9A:E8:38:3D:37:9F:9E:BC:FB:76:9C
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       0A03
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
Signing time:             Thu 16 Apr 2026 15:51:47 +0000
ROA not before:           Thu 16 Apr 2026 15:51:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     154320
IP address blocks:        103.151.134.0/24 maxlen: 24
                          103.151.135.0/24 maxlen: 24
                          2402:5060::/48 maxlen: 48
                          2402:5060:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Apr 16 15:51:47 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e10593-3859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:fb:87:ff:6a:13:0a:25:2d:a1:f9:5c:97:
                    4b:f3:fc:ae:dd:da:1e:5e:77:6b:04:7c:b9:d8:b0:
                    fa:89:19:b0:0c:e0:af:12:78:81:25:9d:2d:47:b5:
                    8e:f8:c8:c0:86:fc:fe:04:0f:33:2a:5f:5a:02:c4:
                    22:bc:e4:84:8b:f7:d4:41:b3:c5:e3:94:27:9f:a7:
                    13:40:4a:dc:9e:d1:86:28:a5:4c:01:ef:b2:fb:f0:
                    78:65:31:76:46:f2:c6:19:4c:83:f8:c0:17:8a:22:
                    bb:bc:ef:44:25:78:55:d9:a8:ed:b6:92:a8:79:64:
                    5d:8c:20:99:53:e7:40:65:94:69:20:31:a8:61:1e:
                    28:1e:e9:bc:b1:72:96:f6:b0:1d:c1:b4:09:39:d4:
                    94:5f:31:ba:a7:5f:da:d6:bc:5e:3f:ae:a7:c7:41:
                    07:3b:fd:54:56:da:91:01:ff:e1:d6:ce:2d:58:9f:
                    5c:8d:fa:c7:e7:f9:f8:29:49:41:13:d1:21:aa:3c:
                    94:40:c5:43:a9:2d:46:3f:ee:c0:34:7d:28:12:8f:
                    65:01:c4:23:57:47:6a:19:d8:26:e5:59:0f:cd:80:
                    76:60:f4:6f:79:a1:9e:0e:ad:72:37:e8:08:0a:db:
                    ad:08:03:64:64:68:71:13:39:e7:d7:9f:8b:4e:57:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:64:9B:5C:86:47:1E:33:9A:E8:38:3D:37:9F:9E:BC:FB:76:9C
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.134.0/23
                IPv6:
                  2402:5060::/47

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:37:d4:5c:b2:3e:a4:b5:2c:46:0d:52:98:14:38:2b:7a:
         fb:53:c1:b5:41:0a:43:05:50:77:2c:b8:98:97:22:0a:3d:c2:
         2f:e6:e5:bd:67:47:ff:81:2e:1e:6e:25:4e:6a:44:20:f7:43:
         94:29:52:d6:f0:bc:4c:86:06:67:2b:d9:4f:65:a5:2c:ae:ee:
         50:61:f0:9e:15:4a:fc:a3:8d:a5:41:b2:23:30:2d:48:5f:ce:
         f5:da:27:b0:85:9b:2f:bc:7c:fc:38:b6:0b:81:82:4d:52:2d:
         33:bf:7c:51:7c:4c:a0:67:81:4a:4f:71:67:e2:25:37:6c:fb:
         47:4a:ed:3d:fc:3c:f8:7e:e0:bf:8b:7a:99:50:17:2e:df:99:
         e8:44:04:7c:4d:0e:3e:7a:f2:d9:3c:a2:60:8d:63:7e:19:31:
         84:86:11:49:7b:3e:4b:47:c0:7e:d7:b4:85:89:2c:60:c2:d6:
         70:63:a5:29:19:64:e5:46:9d:1a:a1:70:9f:1e:a1:92:22:cb:
         96:de:1a:17:6b:99:6f:5d:b1:ac:8c:ee:1d:7e:07:93:bc:b0:
         0d:94:89:9e:9e:e5:bb:ee:19:df:b2:89:de:3e:08:1b:fa:e8:
         e1:f5:17:6e:28:30:ed:b6:45:8f:5e:8e:e6:c4:c6:67:af:85:
         a6:f5:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:04 2026 by rpki-client