Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa
File:                     AEACE2F45FED11F1B089404D7B47A888.roa (raw, json)
Hash identifier:          8qt7Nk+q7mX3XH4uLY+f1lds3c65NXoG7uS8l6CZVxE=
Subject key identifier:   96:28:7B:45:5A:68:7C:5A:C9:12:BF:03:84:A8:70:36:25:86:42:75
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0BFB
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa
Signing time:             Thu 04 Jun 2026 08:16:27 +0000
ROA not before:           Thu 04 Jun 2026 08:16:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     216138
IP address blocks:        103.6.20.0/24 maxlen: 24
                          103.6.21.0/24 maxlen: 24
                          103.6.22.0/24 maxlen: 24
                          103.6.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Jun  4 08:16:27 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a21345b-cf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:5d:dc:51:6e:0f:57:d6:a2:42:be:b1:3a:
                    f6:b1:9c:31:4f:00:3b:d3:d5:d4:35:11:99:9f:21:
                    c3:81:cd:83:c4:c3:0f:54:e5:8e:3b:75:c5:68:f3:
                    bb:29:be:d4:1d:8d:29:fd:40:b5:5f:8f:89:6c:f5:
                    6d:78:b0:13:99:0e:ff:fe:10:5b:fd:c7:b8:97:66:
                    85:10:ac:e2:14:11:05:8c:0c:8b:0a:01:2c:b9:1b:
                    8b:de:cf:d3:71:5f:39:e7:97:5f:cd:62:96:42:66:
                    fd:19:f6:da:ce:be:e6:f4:10:7b:08:3a:94:10:56:
                    b2:d4:e1:cc:be:ad:78:ba:a6:5d:4d:ba:67:59:b3:
                    c2:68:06:37:c4:e9:94:09:de:40:3c:21:ca:08:2a:
                    dd:e7:76:d1:95:f9:41:5e:53:e8:74:39:f2:13:02:
                    08:85:c9:51:e2:ee:e1:b4:0a:48:77:49:24:e1:7b:
                    af:71:1e:72:0a:58:ef:48:5c:56:09:b1:ba:c1:f5:
                    19:00:a3:19:a5:92:c0:43:2d:2f:19:79:9e:ab:1f:
                    0b:57:b1:48:a8:b6:e6:4b:c8:21:ed:d5:2a:89:5b:
                    7f:74:58:f8:35:b2:35:54:dd:db:98:94:dd:1d:3f:
                    32:b5:7f:87:4b:1b:28:0f:36:af:46:32:db:8b:de:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:7B:45:5A:68:7C:5A:C9:12:BF:03:84:A8:70:36:25:86:42:75
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/AEACE2F45FED11F1B089404D7B47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:08:f5:ad:8b:ee:39:1b:be:79:06:35:ab:5f:72:7f:77:
         37:8d:1e:92:c0:b3:9d:8d:7e:7b:26:c7:bc:d5:48:62:cf:7a:
         53:82:79:96:4f:03:9c:ba:36:fb:73:5a:d0:e0:3c:27:30:0f:
         62:95:85:ca:b1:91:18:fd:90:45:31:2a:fe:36:d8:ff:d8:ef:
         d8:ea:26:0a:45:02:65:93:d6:37:fa:dc:82:cc:52:85:08:7f:
         3f:4a:7e:f3:a6:6e:41:20:e9:f0:63:62:c7:2e:c3:32:4c:9a:
         6a:c8:e3:2b:4f:34:14:9d:ee:79:b4:d2:76:5c:bc:55:1f:00:
         c6:a9:b1:63:9e:ed:5d:b1:ff:28:b9:58:70:de:46:8e:dc:79:
         91:54:0c:9b:29:ab:43:6a:c3:22:96:13:74:76:5f:86:a1:3b:
         83:d9:ef:f6:91:d4:e3:51:ad:c4:e6:6c:40:de:b5:3c:c7:d9:
         10:96:31:7f:54:12:fb:b2:58:b7:d1:1c:47:8b:45:14:d7:a1:
         87:ca:4f:79:7e:cd:d3:49:58:67:8a:c9:19:48:92:16:32:cf:
         d6:1c:40:27:45:b4:69:56:c8:9b:e0:c1:bb:5f:0e:04:fe:2a:
         53:e2:80:a1:34:c6:b7:93:6c:03:e8:4a:ad:e6:a3:ec:ae:ff:
         ef:1a:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:50 2026 by rpki-client