Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa
File:                     15DF0B709C5211EFB58CEA09C4F9AE02.roa (raw, json)
Hash identifier:          UstPSB4qmcMV5Tk9wNjfM45Bg37nQfe8qxzaS6CBRD4=
Subject key identifier:   2F:16:28:C3:EF:48:D6:BF:45:B8:9D:15:E4:98:CA:2E:B3:84:9B:D8
Certificate issuer:       /CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Certificate serial:       0133
Authority key identifier: 5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 06:37:36 +0000
ROA not before:           Fri 05 Jun 2026 06:37:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132890
IP address blocks:        103.166.206.0/23 maxlen: 23
                          103.166.206.0/24 maxlen: 24
                          2407:5bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl
                          rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139504, serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
        Validity
            Not Before: Jun  5 06:37:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a226eb0-f648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:bd:2f:cf:e9:e1:73:2b:c5:ed:a3:08:92:
                    53:60:6e:fa:08:25:4a:78:7d:1e:d3:06:fd:83:91:
                    ae:28:87:48:c6:74:b7:12:36:52:40:03:f5:c7:91:
                    94:68:fb:af:c6:b0:fc:1b:ce:29:5c:3e:ec:be:59:
                    e0:0e:ba:1d:33:91:53:dc:de:42:a2:f8:93:b6:0c:
                    3c:88:2a:99:15:8f:c1:ae:97:21:1e:68:b1:ec:13:
                    e0:a9:10:07:4a:13:fb:07:1c:74:85:9d:0b:a7:7b:
                    6e:fb:1b:0d:15:ba:78:90:10:e4:e8:3d:3f:55:f1:
                    b0:d5:b1:1a:80:73:fa:3d:52:e5:c8:ba:99:87:e6:
                    24:f9:a8:b9:f0:02:30:9a:da:a4:ad:53:57:0a:21:
                    42:93:25:d3:65:cd:ac:9f:1a:ae:41:d9:25:e2:3a:
                    15:65:5d:da:a1:ab:76:e8:23:a0:00:4d:03:fb:d9:
                    1c:a9:c6:9d:5b:3e:6a:63:d5:0e:4d:71:89:8d:ca:
                    97:d0:ec:37:7f:4b:29:c0:5b:a1:6c:6d:85:78:fd:
                    bf:f3:ea:4d:2d:cc:7e:6e:a6:7a:1b:1c:b6:01:4b:
                    9f:f1:75:86:06:f3:54:b2:95:1f:74:c3:19:57:b1:
                    da:0d:5c:38:24:a8:a6:df:90:98:0a:7a:5c:65:2a:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:28:C3:EF:48:D6:BF:45:B8:9D:15:E4:98:CA:2E:B3:84:9B:D8
            X509v3 Authority Key Identifier:
                keyid:5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.206.0/23
                IPv6:
                  2407:5bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:2d:af:86:6b:a0:9a:20:69:ca:ea:e0:a5:7a:2d:96:d6:
         96:5f:02:37:bf:51:f2:b8:8d:ef:0f:bb:5d:9d:0d:6a:a1:ea:
         57:05:a5:35:b6:e8:de:cc:df:8a:48:d1:85:77:7e:23:5d:1e:
         ae:a7:69:ca:e6:00:86:de:6a:98:1e:7f:8a:1a:e0:16:2d:60:
         5e:81:bc:b5:cb:82:83:1b:26:ec:ee:cc:f5:75:fc:6a:78:10:
         74:a8:8e:99:74:f8:45:e9:bd:90:5f:e5:b4:85:fd:ed:b2:6a:
         46:63:29:b7:74:5b:2f:03:a2:f2:2c:a9:de:d2:ba:96:9a:b1:
         2e:23:39:46:5a:88:96:29:5b:0d:02:1a:5e:4a:b8:23:28:fe:
         50:76:1e:6e:4a:ec:69:38:03:0d:fe:16:3e:d7:f0:40:cc:0f:
         13:87:6e:34:4f:cb:78:f0:04:41:1b:08:c1:ae:f9:95:67:a9:
         7d:e7:3f:c1:8d:62:f3:44:79:ff:f8:95:00:8d:02:25:4f:3e:
         79:62:70:7d:92:e6:1e:c5:76:af:fe:42:00:ea:79:41:4a:3d:
         a5:97:1a:0d:f8:5d:e5:47:13:a1:9f:32:dc:59:a6:0b:f6:06:
         50:12:b0:82:bc:0c:9f:f9:3b:80:26:14:c4:1a:9a:fe:5e:4b:
         6f:3b:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:11 2026 by rpki-client