Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa
File:                     9ECB1908653F11F1B667060D8D47A888.roa (raw, json)
Hash identifier:          DbvXdABic1KJzkxyhPlZ4fRbKrDPMh8Orj+aI7Km8vs=
Subject key identifier:   73:66:B6:9E:15:20:7D:7D:35:65:56:42:78:A3:91:1C:6F:6E:72:9F
Certificate issuer:       /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial:       0162
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa
Signing time:             Thu 11 Jun 2026 02:45:35 +0000
ROA not before:           Thu 11 Jun 2026 02:45:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     8796
IP address blocks:        103.135.112.0/24 maxlen: 24
                          103.135.113.0/24 maxlen: 24
                          103.135.114.0/24 maxlen: 24
                          103.135.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
        Validity
            Not Before: Jun 11 02:45:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a2a214f-b87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:99:ae:e9:08:32:9f:a9:ba:f2:49:17:bf:
                    29:25:1c:69:45:3e:b3:16:8e:9f:09:0a:6d:57:1b:
                    9f:04:9a:10:f6:51:95:4e:9c:aa:e0:5a:3c:f4:e0:
                    85:05:e3:a9:7e:3e:25:e5:e0:0f:b2:fc:8f:bb:8e:
                    39:e4:40:a7:3b:f4:03:8e:81:e2:a8:0f:fb:4d:39:
                    77:ff:8f:a0:9b:59:69:f0:db:a4:69:90:d7:6a:5d:
                    06:14:ac:9e:5f:d7:10:3b:6b:90:19:fa:f4:13:a7:
                    b9:56:f3:5a:5c:a4:80:6b:4f:37:44:65:b9:e8:92:
                    51:57:ba:43:ff:e9:8e:46:24:cf:25:d4:a2:4b:6f:
                    21:c3:3b:31:58:6d:f1:83:d6:1d:0d:c2:af:40:87:
                    e7:f9:12:de:be:b3:b5:3f:7b:7e:23:d1:02:fa:6a:
                    8a:ca:b7:ae:6f:83:ec:92:45:a4:6d:39:5b:76:f9:
                    4f:ef:a3:1b:fb:a4:c6:40:15:6a:0c:50:0c:e6:82:
                    eb:98:39:6c:b6:e2:f5:c6:e5:5e:1f:4c:67:30:13:
                    c5:05:b7:37:86:49:80:7c:d9:20:60:bd:3a:aa:50:
                    b5:1d:fc:fa:ce:b8:b4:b3:2c:75:a8:7b:fb:6a:e3:
                    78:bb:63:4a:09:93:65:0c:b0:2f:4c:f1:9c:eb:09:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:B6:9E:15:20:7D:7D:35:65:56:42:78:A3:91:1C:6F:6E:72:9F
            X509v3 Authority Key Identifier:
                keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:96:4a:ef:c7:6a:1a:cf:5e:87:6e:58:08:51:28:44:fc:
         11:6e:6a:fd:ed:32:ef:84:53:bc:ed:2f:59:18:c8:4d:61:39:
         1c:14:04:13:16:b2:26:9a:c9:39:d4:71:a1:3c:7e:28:1c:2f:
         1e:78:93:da:13:11:d9:f4:d7:ea:7a:66:1a:b6:0d:71:9e:ff:
         75:fb:2d:54:45:8e:08:d2:f3:6f:f0:ca:a3:6b:38:eb:77:fd:
         85:6a:b0:b3:e9:fc:66:01:b1:34:c0:7e:69:ce:db:eb:8b:4a:
         79:c8:95:b0:40:81:4b:6e:42:ca:f2:db:dc:46:1f:3c:01:d0:
         bc:63:2b:36:6d:26:16:0e:bf:7f:07:a7:43:0e:c4:e8:37:2d:
         2e:6c:08:59:3b:a3:32:3c:02:d0:58:65:78:5b:bc:55:cc:5f:
         95:f5:f6:84:f4:07:2e:5d:b6:86:90:e6:a0:f8:a8:d4:26:94:
         d7:4f:c9:ce:97:2c:99:bf:1a:74:30:33:75:24:fb:49:e9:ce:
         8e:43:92:c3:fd:1c:fd:53:01:27:9e:29:4a:c8:f8:9f:1c:38:
         b3:b9:73:09:04:15:45:01:66:c0:79:4c:7d:41:03:30:32:75:
         31:b4:2a:52:02:e8:8c:ae:0c:2f:5f:00:cc:b2:9f:58:7c:e6:
         10:64:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:26:38 2026 by rpki-client