Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/AE497F78EFD311F08FDE80E8366F56BC.roa
File:                     AE497F78EFD311F08FDE80E8366F56BC.roa (raw, json)
Hash identifier:          jb9UKuqTBDNLge81sH2Ob2LCjSeByXkf9TNa/jZaMJc=
Subject key identifier:   80:3A:D1:AF:D2:F7:8D:26:19:94:A2:CC:63:10:63:79:D0:72:F3:CD
Certificate issuer:       /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial:       01F6
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/AE497F78EFD311F08FDE80E8366F56BC.roa
Signing time:             Sat 06 Jun 2026 22:27:14 +0000
ROA not before:           Sat 06 Jun 2026 22:27:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142192
IP address blocks:        103.165.161.0/24 maxlen: 24
                          2001:df6:6d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
        Validity
            Not Before: Jun  6 22:27:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a249ec1-8350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:83:05:86:d8:02:25:23:6d:61:7d:8c:41:
                    9a:6a:4f:7e:77:bf:3b:30:a4:18:7c:c6:5f:5f:2d:
                    0d:19:32:30:6b:4c:39:34:ac:1a:e7:3a:4d:ea:0c:
                    be:4d:2e:47:18:a8:07:65:8c:6a:4a:0a:dc:78:22:
                    2a:69:c8:cf:bc:85:f3:5c:ec:c6:64:58:7d:12:86:
                    cf:d1:8e:11:bd:ae:b7:8c:a7:d3:1b:27:b9:c0:2c:
                    5a:86:7b:2e:68:aa:f9:9b:4e:fc:d3:01:2d:10:7b:
                    7e:38:fb:08:86:fe:4e:0b:ca:e8:87:0c:14:f9:42:
                    da:44:e7:7f:0d:d6:da:ba:76:5c:3e:08:16:72:11:
                    dc:49:39:ac:42:24:00:16:d4:ec:5b:df:d1:a7:e1:
                    9f:20:1e:82:a6:38:e1:62:93:e7:98:62:96:4e:51:
                    7b:3c:86:96:de:d3:33:b6:88:a4:7b:50:9f:c5:90:
                    17:51:c2:23:9c:d4:1a:e7:90:2d:79:c6:78:e1:d3:
                    75:77:ce:7e:54:d5:cf:8b:30:26:ff:0a:c6:e5:12:
                    8a:45:6d:3f:b0:e6:26:ee:40:a1:ff:39:a2:70:39:
                    2b:a3:f5:dc:71:79:9a:9f:74:c9:f2:d0:18:da:5f:
                    4b:59:b0:e8:f9:3d:d5:c7:1f:47:12:14:b6:e9:13:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:D1:AF:D2:F7:8D:26:19:94:A2:CC:63:10:63:79:D0:72:F3:CD
            X509v3 Authority Key Identifier:
                keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/AE497F78EFD311F08FDE80E8366F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.161.0/24
                IPv6:
                  2001:df6:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:ef:9c:bc:56:d0:90:8d:2a:ad:cc:c0:3a:b2:c2:e4:e9:
         ec:a3:82:38:68:df:54:25:b3:1f:b3:b7:67:7b:e9:37:86:09:
         71:cc:6f:84:3d:b7:87:80:6b:b1:e4:78:99:01:0d:fb:5f:0c:
         f7:65:4c:77:b1:81:56:c5:54:ee:95:0e:f3:57:8f:62:fa:b7:
         42:75:23:d2:a0:44:82:47:41:3a:a9:59:c5:25:22:71:07:e3:
         24:11:54:e0:23:19:a9:d4:ae:7b:60:62:05:1e:d6:99:81:55:
         6a:81:8a:f8:c2:96:41:56:74:ba:48:28:55:6c:be:8a:22:df:
         1f:fa:6b:76:fb:70:7c:8f:92:4c:83:94:88:1b:db:92:76:80:
         33:6e:2a:f7:c6:e8:62:82:c6:c8:bf:f7:c8:3a:0c:fd:90:a2:
         de:5e:5c:ac:b1:5f:37:56:48:c3:38:09:90:9f:90:7b:53:59:
         75:41:f8:61:40:e5:8a:51:60:61:47:f6:2b:75:ff:1e:79:e9:
         b8:14:fb:75:17:79:5e:4a:43:f0:a8:b5:1a:c3:c2:59:59:e4:
         92:42:37:f7:5d:78:89:af:17:df:15:22:0f:e3:b6:98:a0:52:
         14:72:c5:bd:c2:ee:7f:b9:fc:ed:b4:7b:4b:8a:be:e9:62:f2:
         65:03:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:01 2026 by rpki-client