Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
File:                     3C70D06076D011EDBAECD665C4F9AE02.roa (raw, json)
Hash identifier:          hYHdnr2oFJt+0Y0EftReU0/2zxETIJpzujXYr1vfHyc=
Subject key identifier:   2C:BA:93:16:33:5B:D8:3D:71:D9:FC:D2:6C:43:C1:E4:16:8E:E9:C2
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       0430
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 00:31:18 +0000
ROA not before:           Fri 05 Jun 2026 00:31:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38141
IP address blocks:        103.186.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: Jun  5 00:31:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2218d5-659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:be:ff:2f:7f:61:cc:81:0c:e5:20:25:be:
                    d0:9f:0a:d5:07:7b:52:7c:79:4f:55:4f:d1:7f:81:
                    61:39:60:31:6a:fe:13:27:d2:32:06:9f:a4:f2:d4:
                    7e:b9:bd:4b:ec:49:0d:83:d5:64:b7:46:ae:f6:fc:
                    03:ab:7b:76:90:5b:f5:bf:e2:c1:d5:2d:fc:32:bb:
                    5f:ec:45:2e:f7:5d:52:10:2f:c8:07:3b:c2:98:26:
                    e3:db:61:7b:36:23:70:47:47:a4:ea:47:32:b4:75:
                    8a:1c:e3:bd:d6:35:d7:bf:cd:96:00:14:69:a4:b9:
                    4b:cd:7d:a6:b8:cd:d5:43:e9:61:04:99:35:d0:33:
                    f5:d9:7b:73:e5:02:2e:b6:de:80:8a:5b:55:26:2e:
                    18:63:30:2b:a2:f2:43:f2:e7:18:0e:5f:43:6b:f6:
                    09:c5:d4:65:f3:75:77:f5:19:77:61:3a:95:28:8c:
                    c2:27:5f:f1:af:e0:2c:61:57:fd:d8:f5:5f:14:27:
                    b1:e5:95:f0:3c:dd:29:47:d6:0b:04:c0:43:4b:10:
                    37:0a:69:13:f4:f8:0d:fe:6d:63:18:22:35:27:eb:
                    71:c8:5c:dc:16:87:19:52:7b:02:f4:2a:46:d3:24:
                    6c:62:27:a8:0f:49:dd:df:06:2d:d1:41:aa:e0:4f:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:93:16:33:5B:D8:3D:71:D9:FC:D2:6C:43:C1:E4:16:8E:E9:C2
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/3C70D06076D011EDBAECD665C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:be:7a:06:3d:62:4c:a4:44:58:8c:08:e8:0d:12:11:29:93:
         c3:26:73:2c:5e:76:1d:94:b5:2e:ad:86:0c:89:cc:6f:7e:8b:
         9e:5e:27:29:db:01:d8:e7:20:14:ad:d4:32:ae:73:55:51:2e:
         96:5f:d4:fc:fe:08:10:59:f0:b8:9c:13:b7:9d:3c:3c:ed:b8:
         ae:dd:00:53:4f:fb:e7:e1:94:33:31:09:a9:53:df:b8:5a:aa:
         df:9b:46:a1:9c:0f:f5:72:cc:44:1d:56:f6:a0:b3:2d:66:ce:
         92:3f:cb:a4:ae:9d:ff:79:69:71:f0:cf:d6:ca:d7:74:55:5f:
         56:73:fb:60:ad:49:58:2a:7b:58:4d:69:91:af:d2:f8:03:a5:
         1f:b0:68:71:6c:12:98:8a:c2:be:dd:d9:54:34:d1:88:99:71:
         dc:8c:dd:88:63:f2:cf:23:96:a3:be:0e:7c:56:f3:42:1d:03:
         61:29:03:08:6e:49:4b:e8:11:c6:b6:2a:23:b5:c0:35:ff:16:
         1a:4b:50:ec:ad:70:b5:7a:b4:d5:bf:0f:8a:dc:a7:8b:b7:95:
         66:bb:47:18:22:1b:c4:55:67:8f:7b:36:c5:67:c9:50:aa:46:
         e5:10:e5:89:9c:2a:20:12:9e:2d:88:40:04:37:7a:f7:3e:41:
         8e:f6:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:27 2026 by rpki-client