Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/6EC5F1A8420611ECB8345E7DC4F9AE02.roa
File:                     6EC5F1A8420611ECB8345E7DC4F9AE02.roa (raw, json)
Hash identifier:          QL8eCd1UUQ8tPRua7/qYkbeS3Uvn3JGTL2tO1zoMLLE=
Subject key identifier:   29:D6:61:1B:FC:46:F8:9B:7E:CA:27:8F:4F:B0:FB:1E:B7:BE:6E:AB
Certificate issuer:       /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial:       054C
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/6EC5F1A8420611ECB8345E7DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 00:28:28 +0000
ROA not before:           Fri 05 Jun 2026 00:28:28 +0000
ROA not after:            Sat 30 Sep 2028 00:00:00 +0000
asID:                     147068
IP address blocks:        103.142.126.0/24 maxlen: 24
                          103.172.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
                          rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
        Validity
            Not Before: Jun  5 00:28:28 2026 GMT
            Not After : Sep 30 00:00:00 2028 GMT
        Subject: CN=6a22182c-9308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:0c:7b:de:24:00:47:d0:31:46:1c:ba:67:
                    60:a1:98:a9:c0:73:26:49:d2:f8:a3:53:66:1e:d5:
                    0d:b6:7e:2c:53:b3:cc:57:a9:3e:f3:3b:62:48:d6:
                    13:40:a6:36:aa:f4:f4:f7:e3:9a:3d:72:ca:5a:8b:
                    56:db:b0:bf:21:a1:9f:93:2c:2c:fb:e0:bb:30:01:
                    8a:4f:73:2d:9e:36:ff:7c:e1:57:1d:e6:b6:e4:b1:
                    1a:15:04:f6:1e:a4:95:e9:ae:67:54:9c:8b:68:d7:
                    42:a1:d0:b6:2f:1e:00:2d:c7:1d:81:4d:df:1d:78:
                    b0:ea:0b:57:a9:5b:0f:a7:33:b1:00:d8:02:9f:b0:
                    bc:e2:0c:20:53:da:38:14:60:07:cf:86:86:4b:32:
                    1d:86:34:b5:76:c1:3d:37:3d:9f:99:15:d1:f4:00:
                    cc:9a:74:aa:d9:33:9c:4f:18:fc:72:39:8f:3e:a2:
                    87:32:b9:ee:51:18:8d:fe:ed:df:a7:fc:a1:c7:43:
                    37:69:d0:a4:9b:13:87:42:7c:ca:76:5e:ab:7c:86:
                    8f:10:e7:76:e0:58:a9:3c:81:63:11:c3:15:ea:4b:
                    92:de:cf:a6:70:ce:8b:00:3a:43:c8:be:de:fa:92:
                    43:6f:25:a7:3c:98:39:3a:45:12:bf:b0:d4:d6:27:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D6:61:1B:FC:46:F8:9B:7E:CA:27:8F:4F:B0:FB:1E:B7:BE:6E:AB
            X509v3 Authority Key Identifier:
                keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/6EC5F1A8420611ECB8345E7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.126.0/24
                  103.172.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:2b:84:16:74:21:f7:49:96:fe:9c:ea:ef:30:3f:5e:99:
         3f:3a:9c:82:e6:0a:99:25:7c:5c:ca:1c:ed:a2:8b:9d:02:70:
         25:3f:cf:dd:f9:f7:ce:e1:bb:cc:2d:e7:b4:27:bf:69:47:95:
         c2:49:82:fd:90:ea:29:f1:0a:0c:0d:79:88:31:fc:c5:ff:6e:
         95:41:c2:b7:13:cf:64:0b:4b:1e:13:d9:bd:8f:6e:a5:8f:3d:
         2b:37:88:ce:99:e3:e8:62:d3:35:91:cf:60:ef:8c:e5:b9:6a:
         32:3a:79:b2:4c:54:98:d1:3a:96:15:aa:73:d4:87:af:2e:3b:
         44:18:fd:a1:dc:c5:de:18:3b:f2:85:78:4b:a8:cc:19:6c:55:
         ee:9a:56:d2:2b:e5:2c:75:10:4a:76:fa:26:f8:c0:d8:29:7f:
         12:7a:99:03:03:23:b6:11:ce:fd:c5:ec:8a:36:ef:2c:68:cc:
         d7:69:14:2c:8c:8f:a6:0e:8a:d1:b1:32:03:80:a8:03:1c:73:
         92:d9:1c:ab:0c:d5:21:03:3a:f0:19:8a:5b:85:79:52:0a:72:
         09:f4:e5:45:7e:62:69:ef:8d:dd:7e:cb:cb:31:a4:3e:0a:5f:
         20:f1:87:2f:cd:f8:5c:e4:23:09:12:b1:53:2f:f8:c5:0c:16:
         da:a2:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:50:42 2026 by rpki-client