Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa
File:                     6EA165728E8F11EEA8A9EE68C4F9AE02.roa (raw, json)
Hash identifier:          1r78Cw9IeJC6CpYd3j+dPo0qxllZkMG1MVsCtdbq0zU=
Subject key identifier:   A1:64:A4:C0:4B:C5:A0:62:71:D7:C9:46:3D:88:6F:AF:B9:63:B4:20
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0B61
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 19:39:16 +0000
ROA not before:           Wed 16 Sep 2026 19:39:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58895
IP address blocks:        103.104.96.0/23 maxlen: 24
                          103.193.18.0/24 maxlen: 24
                          203.109.40.0/24 maxlen: 24
                          203.109.41.0/24 maxlen: 24
                          203.109.42.0/24 maxlen: 24
                          203.109.43.0/24 maxlen: 24
                          2401:f8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Sep 16 19:39:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aaaf064-7b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:d6:10:db:57:e7:f6:f6:87:f6:a5:86:63:
                    23:2c:4d:59:2b:00:47:97:cd:d7:54:b8:96:13:1f:
                    db:ea:e2:37:52:1e:8b:44:de:6c:c4:8f:97:e5:6a:
                    83:77:58:3e:ee:b3:5a:1d:63:b7:ea:f3:e4:e4:e2:
                    3d:8c:c8:53:b0:3b:fe:4f:ea:7e:d9:c2:49:86:26:
                    bd:43:c7:37:bb:7b:65:db:68:2f:40:78:ba:de:eb:
                    8a:29:54:5f:10:9e:ad:75:4b:46:aa:a4:8c:6d:bd:
                    94:b3:2a:3b:09:1a:00:76:03:e4:82:71:12:ba:40:
                    4a:e7:c6:48:7a:e4:cf:4d:2f:8c:55:32:09:eb:65:
                    0e:f1:5b:85:36:0c:f6:38:b9:4a:18:55:3f:0d:98:
                    9c:c4:c3:42:42:22:3b:25:d8:32:c2:1c:33:46:17:
                    89:16:33:1f:90:45:ae:50:5d:29:88:1d:e6:54:67:
                    a8:33:88:43:47:76:03:37:9e:2a:9b:e9:42:a8:6a:
                    66:31:40:0d:f5:6b:50:22:5e:7f:61:c2:d6:36:f0:
                    9b:48:79:4f:7b:2e:5c:d8:92:a9:5c:9e:eb:8b:ac:
                    7a:8d:ce:f5:13:2e:7f:6d:5f:cf:24:54:ea:ca:16:
                    7f:e2:a0:ea:c3:56:f4:8f:1e:05:0a:08:4a:73:5b:
                    82:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:A4:C0:4B:C5:A0:62:71:D7:C9:46:3D:88:6F:AF:B9:63:B4:20
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/6EA165728E8F11EEA8A9EE68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.96.0/23
                  103.193.18.0/24
                  203.109.40.0/22
                IPv6:
                  2401:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:69:53:03:5d:1c:3b:24:2d:e8:89:f4:f1:bc:8f:87:1f:ac:
         a2:7f:cf:6d:ba:b1:a1:bb:44:a3:be:19:38:8a:1f:22:95:eb:
         36:a4:37:5e:b6:67:6f:5a:14:26:18:44:cc:9a:93:d9:bd:cb:
         14:9d:0b:01:e3:7b:be:e8:25:fe:4c:f0:82:9b:e2:41:ed:3a:
         6c:77:05:80:bd:be:ff:c7:da:05:8a:66:13:e4:75:5a:28:4a:
         0e:9a:1d:7e:5c:25:0c:92:84:ba:2b:28:23:c2:a3:57:44:d5:
         b9:82:7c:ba:ed:5b:56:a9:27:5f:63:e0:44:53:6e:ae:ee:c4:
         d3:84:b5:ef:18:cc:6f:77:88:9a:94:de:71:83:30:7b:55:e3:
         f8:5c:aa:28:2c:bf:74:b1:e1:fb:de:2b:92:fa:00:dd:24:f9:
         cd:0a:da:27:5b:b4:f7:b5:6c:91:b3:01:47:08:51:09:a6:10:
         f3:d2:74:c2:30:29:ad:c0:51:61:df:3b:5d:80:43:1a:12:95:
         87:d0:ef:c8:17:fc:bc:9a:0f:28:20:82:1b:70:68:e5:ea:05:
         0c:0a:b6:ce:9b:eb:c1:50:06:81:56:1f:e2:5a:58:e4:6b:0f:
         97:ec:ea:ad:f1:50:f0:53:aa:0c:ef:87:49:b0:90:8d:f4:dc:
         2c:22:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:04:56 2026 by rpki-client