Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa
File:                     E23B9C48F97D11EDB12DE418C4F9AE02.roa (raw, json)
Hash identifier:          8Olp3JSJvstaBbTqUKuFXzKQ0iGuTK8M0EIzyJHsbfg=
Subject key identifier:   58:C5:3E:B5:18:63:6A:CB:1C:64:BA:DA:44:0C:F7:2D:19:75:C1:51
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       101F
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 18:20:54 +0000
ROA not before:           Mon 08 Jun 2026 18:20:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     61112
IP address blocks:        103.232.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4127 (0x101f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  8 18:20:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a270806-c291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:ea:25:bd:e7:09:10:c1:90:7b:32:39:af:
                    0d:eb:99:6d:d2:d4:39:f3:53:6e:38:de:b4:f4:7a:
                    6b:a3:c1:fc:0a:e2:05:8b:00:99:ed:64:ce:c5:a7:
                    d9:8f:c0:8b:09:af:20:22:30:79:f1:82:b8:d5:f9:
                    17:9c:04:a5:8b:6e:9c:29:ba:1b:9a:df:38:c3:6f:
                    da:a0:ea:4f:0c:58:d9:16:c2:7b:1f:92:1c:a2:d6:
                    db:0e:76:c6:f4:43:77:77:3a:5f:af:f6:0f:97:de:
                    33:57:68:1b:f0:72:98:61:c5:67:90:6c:88:0f:5a:
                    f4:27:37:8e:01:0c:2c:1c:d0:4a:bf:9b:c0:e3:12:
                    0b:7a:5f:d9:0a:14:24:ce:eb:4f:39:5f:2e:2b:5f:
                    59:e7:e7:a0:b9:05:f1:1d:a0:31:a7:66:6a:53:00:
                    c7:69:e3:9d:b9:05:44:11:5b:5c:df:76:2e:f7:98:
                    ff:15:0f:ee:20:10:91:e1:18:3c:2c:27:4f:88:9e:
                    4c:cc:cb:f9:33:f2:45:c3:c2:fd:9f:fa:e4:5a:96:
                    eb:d4:50:c6:21:e7:04:18:ad:69:08:5c:58:78:32:
                    55:ce:99:cf:16:48:ce:e3:8d:ab:8c:29:e9:ec:57:
                    fc:d6:60:5e:0e:36:48:ec:9f:d4:f2:6b:eb:0c:27:
                    20:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:3E:B5:18:63:6A:CB:1C:64:BA:DA:44:0C:F7:2D:19:75:C1:51
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/E23B9C48F97D11EDB12DE418C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:87:0b:f1:47:14:23:a0:5c:5d:e6:64:63:5a:66:00:98:7b:
         92:5d:15:94:a7:d4:a9:09:8a:73:2c:77:0a:e8:1d:8a:b2:24:
         58:43:51:ae:5b:b6:1f:05:33:26:9c:cf:90:f6:9e:17:b3:fe:
         14:2b:2a:bb:07:83:f0:64:c3:46:1f:e2:cc:37:60:25:e4:09:
         22:ea:91:96:a2:62:3c:fa:44:d9:18:7f:02:b0:8b:6c:aa:c9:
         c6:be:f8:e5:ad:9c:eb:f5:b3:d4:1f:07:35:b7:a1:4a:83:19:
         fd:50:cd:36:ec:1c:87:98:0c:70:ab:f7:d6:78:84:43:2e:74:
         c6:15:aa:93:ef:c9:07:d0:9b:26:2e:2a:03:6d:29:8e:c1:cf:
         a7:dc:1c:71:d6:d9:fb:05:92:b1:81:88:05:e5:0d:96:f7:2c:
         96:31:d5:a1:6d:ca:61:ae:a4:68:bc:9f:df:da:13:0b:2b:05:
         48:e4:32:be:a2:4e:84:f7:a7:df:9c:6d:3b:54:d7:0e:68:a3:
         e8:b2:38:91:d5:43:b7:c1:2f:4e:c4:2b:a3:91:9f:bb:5b:88:
         04:d5:b4:21:3c:7d:0a:e6:98:e7:4b:62:3e:30:60:52:5f:03:
         bd:52:64:26:7c:9a:62:13:34:e1:86:44:a6:93:de:24:73:24:
         15:c9:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:11:59 2026 by rpki-client