Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
File:                     63EF8E3C2EA711F1ABA05366B9833773.roa (raw, json)
Hash identifier:          TaPyl/iXeZ9rNTtgrZn2/CMrZ6ZTV/1ABox1PHZOxkE=
Subject key identifier:   28:52:C4:E4:AF:B7:FA:6A:51:50:87:C0:4E:B8:47:87:BA:79:D2:13
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       0A24
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
Signing time:             Wed 10 Jun 2026 20:24:00 +0000
ROA not before:           Wed 10 Jun 2026 20:24:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154320
IP address blocks:        103.151.134.0/24 maxlen: 24
                          103.151.135.0/24 maxlen: 24
                          2402:5060::/48 maxlen: 48
                          2402:5060:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596 (0xa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Jun 10 20:24:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29c7e0-bd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:44:a7:e2:ee:69:55:25:78:07:20:22:60:
                    24:5c:6c:48:76:be:f2:2b:b9:a9:8d:46:40:45:e7:
                    62:8e:46:af:23:49:bd:64:02:0c:bb:61:73:26:e6:
                    33:c6:cf:0f:e6:bd:52:b2:3e:02:a9:16:0f:e0:65:
                    2a:e0:18:d7:47:67:fa:ed:4c:ba:29:e1:34:8b:ae:
                    33:d0:30:97:49:39:4c:09:e3:80:fa:04:3f:05:c3:
                    2d:e4:be:9a:f3:9a:e2:78:63:c9:43:26:ca:4a:11:
                    ec:56:f7:60:d1:9b:89:5b:8b:e7:43:7a:f5:cf:10:
                    dc:6d:f6:37:89:6e:d4:a9:f9:0f:21:fc:99:79:4a:
                    d5:62:d5:1b:5c:3f:68:75:8e:e4:8c:51:62:8c:a1:
                    7a:67:d8:dd:9e:47:ab:69:b5:da:ca:1d:9c:f6:c5:
                    0d:a6:fe:15:d2:4b:d2:23:8c:af:c5:f1:86:fc:cf:
                    43:8a:bf:2d:00:3b:c7:3d:75:35:27:6c:dd:ba:da:
                    e5:ec:25:9b:1e:7f:5f:bd:d1:32:98:84:58:88:c1:
                    e6:24:aa:69:b9:b8:42:98:c6:e8:ac:50:e2:9d:4e:
                    1c:e4:bf:9b:63:de:4e:a0:8e:4a:0e:78:a1:7a:f6:
                    15:be:46:78:12:1b:49:58:5d:f2:f0:11:3a:b3:74:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:52:C4:E4:AF:B7:FA:6A:51:50:87:C0:4E:B8:47:87:BA:79:D2:13
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.134.0/23
                IPv6:
                  2402:5060::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:8c:f5:38:cf:0d:e5:d9:b3:72:ec:29:9a:85:00:4f:45:
         27:54:d0:0c:eb:cd:cd:15:b6:49:ea:46:d2:60:f9:1d:94:62:
         c2:5f:45:0e:57:68:68:04:20:f2:1d:74:ff:38:76:db:d1:ac:
         e1:3b:08:1e:68:cd:59:83:c2:9a:5b:4b:e9:00:70:6d:db:d3:
         29:24:05:84:7c:d6:a9:6e:8c:7b:34:ff:c4:d5:10:e1:82:1e:
         5c:29:a9:c2:10:aa:fd:df:d4:3b:e0:de:68:f1:6c:88:ce:77:
         31:59:c6:82:ba:96:a8:32:7c:be:6f:41:0d:1a:0f:54:4a:4f:
         ea:17:66:9d:02:de:b5:f9:37:8f:69:b3:87:9a:33:bb:44:44:
         39:ed:e3:a7:a8:03:c1:69:c6:f4:57:f8:0c:bd:ef:4e:78:bd:
         e6:80:63:63:48:9b:46:d2:cf:b5:1c:75:dd:4d:f1:b1:eb:15:
         14:10:6e:a4:c2:72:0a:9b:cb:50:84:60:2a:e4:2e:1d:78:0c:
         2e:0b:9d:45:66:c7:4a:57:eb:da:1c:0f:ee:96:a3:14:25:08:
         96:59:c9:d1:63:4a:81:ab:07:b6:30:08:9b:4f:6c:ce:6d:1a:
         51:4a:ab:e4:10:46:23:92:ad:ed:f1:a5:1f:81:22:a2:be:22:
         18:08:72:0b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0
ODI1OTFDQkMwHhcNMjYwNjEwMjAyNDAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5YzdlMC1iZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1EtEp+LuaVUleAcgImAkXGxIdr7yK7mpjUZARedijkavI0m9ZAIMu2FzJuYz
xs8P5r1Ssj4CqRYP4GUq4BjXR2f67Uy6KeE0i64z0DCXSTlMCeOA+gQ/BcMt5L6a
85rieGPJQybKShHsVvdg0ZuJW4vnQ3r1zxDcbfY3iW7UqfkPIfyZeUrVYtUbXD9o
dY7kjFFijKF6Z9jdnkerabXayh2c9sUNpv4V0kvSI4yvxfGG/M9Dir8tADvHPXU1
J2zdutrl7CWbHn9fvdEymIRYiMHmJKppubhCmMborFDinU4c5L+bY95OoI5KDnih
evYVvkZ4EhtJWF3y8BE6s3QYfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFChSxOSv
t/pqUVCHwE64R4e6edITMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD
NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjNCOEIvN0FDQ0NCNDA5QzZGMTFFQThDNjU5QjNGQzRGOUFFMDIvNjNFRjhFM0My
RUE3MTFGMUFCQTA1MzY2Qjk4MzM3NzMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5eGMA8EAgACMAkDBwEkAlBgAAAwDQYJKoZIhvcNAQELBQADggEB
ACTcjPU4zw3l2bNy7CmahQBPRSdU0Azrzc0VtknqRtJg+R2UYsJfRQ5XaGgEIPId
dP84dtvRrOE7CB5ozVmDwppbS+kAcG3b0ykkBYR81qlujHs0/8TVEOGCHlwpqcIQ
qv3f1Dvg3mjxbIjOdzFZxoK6lqgyfL5vQQ0aD1RKT+oXZp0C3rX5N49ps4eaM7tE
RDnt46eoA8FpxvRX+Ay97054veaAY2NIm0bSz7Ucdd1N8bHrFRQQbqTCcgqby1CE
YCrkLh14DC4LnUVmx0pX69ocD+6WoxQlCJZZydFjSoGrB7YwCJtPbM5tGlFKq+QQ
RiOSre3xpR+BIqK+IhgIcgs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:21 2026 by rpki-client