Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
File:                     E1201A0422D611EFAE700044C4F9AE02.roa (raw, json)
Hash identifier:          VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=
Subject key identifier:   B0:39:16:AF:4B:5B:A6:46:DC:60:AA:E3:3A:20:A9:67:67:85:7A:1D
Certificate issuer:       /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial:       0740
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 22:28:34 +0000
ROA not before:           Thu 04 Jun 2026 22:28:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        103.15.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
                          rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
        Validity
            Not Before: Jun  4 22:28:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21fc12-a6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:4f:31:89:21:b9:ff:d6:f4:9f:64:01:7d:
                    b7:0f:67:61:78:f6:d4:68:0b:41:eb:36:df:0f:97:
                    75:41:12:17:66:c3:5b:ce:d8:65:72:10:2e:58:12:
                    93:39:2d:e8:c4:b2:04:f0:e6:64:df:a2:34:08:08:
                    b1:b2:84:ef:5f:99:70:ea:1c:3c:7a:4f:59:2c:40:
                    3f:b4:f2:f0:66:bc:5e:a6:b1:1c:8f:fd:98:bd:e7:
                    7a:09:0c:93:e6:69:31:ec:62:77:0e:e8:16:31:78:
                    b9:eb:b4:39:c0:85:79:15:4c:d1:4d:e7:ba:c2:25:
                    09:8a:f1:81:45:58:97:42:34:99:90:c0:94:c5:16:
                    8b:46:11:c0:40:e9:d8:34:77:3e:aa:89:2c:00:c3:
                    a8:0d:af:54:ce:d7:3e:cd:87:fb:ce:71:57:cd:a8:
                    d8:d1:b6:91:9e:53:64:56:ee:0b:80:3b:47:21:45:
                    af:c6:83:16:3d:a9:03:be:a7:25:01:9b:4a:51:e1:
                    79:f9:11:1a:22:09:82:3e:8c:26:d0:92:b1:5d:23:
                    39:61:76:2f:3d:7b:46:96:44:bc:c1:9f:55:9e:be:
                    fb:7f:fe:3b:5d:8e:e0:0f:d4:91:c5:71:8f:31:3b:
                    17:b9:a4:10:5a:73:32:9e:7c:67:fc:cf:52:7a:e6:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:16:AF:4B:5B:A6:46:DC:60:AA:E3:3A:20:A9:67:67:85:7A:1D
            X509v3 Authority Key Identifier:
                keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:07:38:7f:78:7d:a7:1d:08:8d:0c:0f:44:ba:c2:ba:46:
         4e:16:e7:11:f6:a4:f7:77:ee:62:2d:30:f9:75:f2:36:e7:e0:
         d6:2d:7e:63:f8:29:ae:1a:1f:d1:c8:fe:ab:33:98:bb:f7:e1:
         45:1f:f9:9a:8d:c7:a3:69:99:6c:68:ce:c8:4f:fa:f7:38:b8:
         fc:bf:17:85:3c:dc:73:1b:a7:1c:91:5b:41:b9:69:e5:aa:f6:
         0e:13:e0:1d:6c:f8:05:b4:55:0e:45:ff:49:af:1f:31:4a:ad:
         27:7b:e0:49:99:b1:25:a0:d0:ed:34:7c:a7:10:5a:82:18:9e:
         f7:cb:fd:10:e6:32:5a:43:1c:cf:c6:ce:cf:91:ab:e7:0a:d9:
         23:30:c7:77:de:b3:1d:85:7e:bd:12:8a:b6:4f:8a:8e:fe:02:
         10:57:e6:67:d3:af:08:fb:c8:1d:9b:37:b5:c8:3a:28:e0:a0:
         e2:50:7b:fe:47:f2:0e:51:b3:37:8b:e3:fa:94:60:b1:24:be:
         28:17:ac:7b:88:61:14:ec:e2:fb:b1:62:c8:f8:f6:a0:21:ec:
         b8:8d:e7:d8:a6:06:75:99:55:d4:52:93:9d:91:34:1b:b5:af:
         57:d8:e0:f5:4f:de:12:65:27:c9:66:92:0a:7b:1f:72:ac:94:
         0f:23:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:03:21 2026 by rpki-client