Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/6F9A7DE294BD11F18E4E5AC33611F970.roa
File:                     6F9A7DE294BD11F18E4E5AC33611F970.roa (raw, json)
Hash identifier:          uFv51XBK3RWGA/CwhcUXDDGp2GzyLFE65hHtEAqVXzw=
Subject key identifier:   98:F7:0E:F6:B1:BF:32:F7:65:B5:60:54:EE:82:5E:02:94:F0:E6:42
Certificate issuer:       /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial:       0906
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/6F9A7DE294BD11F18E4E5AC33611F970.roa
Signing time:             Thu 20 Aug 2026 20:41:09 +0000
ROA not before:           Thu 20 Aug 2026 20:41:09 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153610
IP address blocks:        103.153.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
                          rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310 (0x906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
        Validity
            Not Before: Aug 20 20:41:09 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a876665-e510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:45:a0:f7:93:25:49:f1:b9:0b:09:fa:10:
                    a1:e7:9f:00:79:59:91:38:a8:77:9d:87:eb:85:89:
                    38:fa:3e:15:56:91:a3:66:d9:92:19:38:34:00:49:
                    64:06:37:bc:26:ba:c2:40:3b:4b:d6:61:34:0f:3d:
                    53:37:a2:15:2f:44:a7:05:c0:3a:e3:09:ca:3f:58:
                    76:c3:19:f7:13:2d:c4:4c:07:fc:ea:c9:4e:68:ad:
                    a1:61:f2:a3:7b:49:05:84:44:c3:a9:80:0a:5d:d7:
                    94:a1:32:3a:21:8c:aa:a7:3b:29:e3:34:44:de:51:
                    c1:3a:37:4d:28:54:ea:c1:8d:f4:1b:2e:5e:5d:1e:
                    5b:22:2d:c4:d1:1d:4a:98:de:20:b7:3a:58:e7:9f:
                    85:ec:aa:2d:69:cb:4a:6c:e8:c0:bf:91:27:17:76:
                    6c:a1:be:91:bd:ec:6e:75:a8:76:af:ca:77:c2:15:
                    e2:b6:65:a7:40:42:df:52:d1:8a:4a:c8:62:1e:9f:
                    dc:6d:c9:2c:ae:83:f5:c6:cb:c9:ca:5d:97:4d:07:
                    0a:a8:f7:f7:fb:d0:96:c5:60:ab:c6:32:ab:15:64:
                    bb:a8:6c:5e:39:e8:54:57:1e:e2:bc:a5:d2:89:e4:
                    c8:ac:90:e3:df:5d:81:fd:c8:29:63:9f:d8:75:1a:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:0E:F6:B1:BF:32:F7:65:B5:60:54:EE:82:5E:02:94:F0:E6:42
            X509v3 Authority Key Identifier:
                keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/6F9A7DE294BD11F18E4E5AC33611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:3d:84:27:44:0b:4e:bd:c4:61:58:d1:e5:23:f2:77:05:03:
         8f:3b:4b:f5:d2:56:14:00:ea:a5:01:c8:68:2e:fe:fa:7e:fa:
         df:75:ee:bb:54:dd:97:02:7d:3b:9c:ea:98:a3:1b:96:9d:38:
         34:75:cc:da:c0:a5:a6:6c:ed:1c:26:53:81:24:56:f4:70:db:
         43:9c:4c:67:40:1e:67:a4:fb:d5:5e:7d:b5:4c:5c:f4:a3:f7:
         61:15:5b:80:6a:10:a8:b3:ea:9c:51:b3:e7:ff:b2:89:09:17:
         12:07:b2:ef:e7:b7:e7:77:92:08:6a:0f:41:8a:10:2d:fd:d4:
         0f:31:ff:93:77:b8:bd:e1:5f:38:18:88:bf:e9:af:c8:f4:49:
         27:af:4f:a4:ef:04:f6:8a:d3:30:a6:4f:2d:78:d9:4b:a3:56:
         f5:8a:26:11:9c:40:6b:29:a3:d9:8d:c4:48:88:71:99:cf:5e:
         3f:cd:b8:d0:06:a5:01:b7:b7:16:b0:9c:de:ef:28:6b:2c:69:
         40:a9:01:b8:27:9a:d3:cf:64:58:06:10:f8:5e:7c:27:cd:15:
         2b:9d:13:2f:aa:ad:e1:a8:42:24:df:3c:75:38:6c:41:cf:14:
         2b:e9:35:3c:f2:6e:fd:78:73:10:a7:c2:4c:28:54:19:74:c0:
         15:c6:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:10 2026 by rpki-client