Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/C435BF20EE8E11ED8FA7F510C4F9AE02.roa
File:                     C435BF20EE8E11ED8FA7F510C4F9AE02.roa (raw, json)
Hash identifier:          BZscUCX7IhkjB5Rqk/Ke36ARUEJ+TcCUWg6alfYd0Kg=
Subject key identifier:   7D:82:E4:8B:DE:65:65:20:C8:BC:29:FE:B3:69:F2:75:72:28:03:05
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       025E
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/C435BF20EE8E11ED8FA7F510C4F9AE02.roa
Signing time:             Sun 07 Jun 2026 02:33:11 +0000
ROA not before:           Sun 07 Jun 2026 02:33:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134806
IP address blocks:        103.132.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Jun  7 02:33:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a24d867-6ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:30:00:38:dd:9b:c0:b4:55:c9:42:9b:ca:
                    71:6b:d2:ee:b5:18:13:7a:e3:71:91:10:35:af:65:
                    81:a2:d5:8c:8c:55:3a:a7:17:d6:d5:c9:bc:e7:01:
                    6a:6b:f1:26:5f:3d:c5:28:0b:0d:03:39:27:df:10:
                    d9:28:76:4a:8c:5b:19:5e:61:9e:b6:83:31:e8:18:
                    cf:aa:1e:ab:b1:60:33:e1:a4:82:a4:ad:11:53:50:
                    03:88:8a:b8:7f:23:83:53:21:59:28:72:c8:69:7a:
                    e7:78:cf:e6:b9:34:c1:c9:34:87:41:a0:69:9c:6e:
                    50:96:49:85:a7:a4:a1:4b:6c:ed:ee:2a:9a:cb:ff:
                    15:28:e0:1c:0e:ee:58:28:f4:53:92:83:18:bf:a3:
                    a3:cc:d2:89:63:c7:4f:19:46:46:20:9e:a9:34:44:
                    c1:09:15:68:a5:2d:d3:75:39:01:b0:21:9f:ea:02:
                    58:ca:2c:33:27:d2:83:8d:7e:db:d2:ed:2e:5f:35:
                    51:38:22:cd:e0:35:39:67:83:86:a2:04:a8:f0:e7:
                    b1:8e:78:0d:53:20:f2:6f:47:c9:7d:fd:54:c4:d7:
                    81:2a:2a:32:51:ea:59:90:c9:00:b3:61:4d:1f:a6:
                    ed:fe:63:38:71:4b:b8:c8:86:b8:63:8f:f5:3a:2b:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:E4:8B:DE:65:65:20:C8:BC:29:FE:B3:69:F2:75:72:28:03:05
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/C435BF20EE8E11ED8FA7F510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:46:98:ba:3b:3d:d9:f1:93:47:db:d6:59:39:08:8d:6e:
         72:98:6a:f8:6b:c1:94:72:74:a3:37:80:fc:67:bb:ef:35:4b:
         53:25:53:53:3b:f8:cc:b5:ff:78:db:df:1d:79:6e:c7:bf:1f:
         b7:36:32:22:af:8a:3c:58:fe:21:f6:72:71:f1:95:4c:50:0a:
         4c:02:35:df:26:c2:6a:df:85:e1:25:b8:4c:c3:4e:4c:cd:4a:
         90:c6:fc:5a:a9:9e:84:67:3a:f5:4a:ab:2e:cb:70:80:94:ac:
         91:2d:4b:ac:69:df:4d:58:19:b9:74:2d:a8:c3:1b:62:6f:7a:
         2c:4c:a2:13:15:e7:60:74:f0:29:04:4a:4a:52:d3:1c:a5:03:
         48:d8:0b:8c:2c:e9:78:9f:61:9f:99:42:d4:40:85:c3:03:f3:
         4a:2b:9d:26:31:b1:ba:7d:5f:3b:3b:4b:36:a2:57:80:a0:4d:
         41:62:59:25:f9:02:b2:c6:37:89:fb:b0:b1:bf:e4:01:aa:39:
         72:0b:a2:65:db:64:d9:d6:15:7d:6c:96:33:3f:31:f9:d5:ca:
         fe:cc:4f:9a:b2:ff:72:bc:15:b9:c2:6a:de:c3:c6:1d:45:22:
         a2:a7:cc:3f:f8:af:80:ee:65:4b:1a:4d:63:1b:b2:29:ad:1d:
         2f:19:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:30 2026 by rpki-client