Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/9DD99914B85311EBA5D4171FC4F9AE02.roa
File:                     9DD99914B85311EBA5D4171FC4F9AE02.roa (raw, json)
Hash identifier:          b0xMGqoJhcRuZZYrYPWwI2on2YjL0scpzyLdzXi4VTk=
Subject key identifier:   32:B2:11:43:45:42:FF:FB:6E:6B:71:01:CC:E8:43:75:37:92:E1:EB
Certificate issuer:       /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
Certificate serial:       06A5
Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/9DD99914B85311EBA5D4171FC4F9AE02.roa
Signing time:             Wed 10 Jun 2026 23:26:51 +0000
ROA not before:           Wed 10 Jun 2026 23:26:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134163
IP address blocks:        103.55.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
        Validity
            Not Before: Jun 10 23:26:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a29f2ba-3c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:a4:c7:94:bb:be:84:fb:fb:81:67:63:17:
                    db:c9:33:2d:77:50:37:1f:4e:2b:9c:1a:74:26:f1:
                    6f:86:9e:aa:bd:06:1c:f5:a9:e0:cc:0c:07:6e:21:
                    9a:75:84:70:bf:5a:2b:81:04:9c:52:1c:2c:77:52:
                    1a:55:0d:02:07:cb:25:e3:86:65:a0:d7:9f:bd:69:
                    8d:62:bd:4b:b0:46:6a:cf:78:b1:30:f3:6a:2e:32:
                    21:7f:07:ba:d1:19:e1:5f:c0:e0:62:0f:aa:45:35:
                    a7:c5:a5:39:e4:60:f3:94:0d:45:81:b3:6b:58:f8:
                    0d:b2:70:ad:a6:cc:ef:29:e7:f1:ed:e8:1d:da:1f:
                    93:cc:43:f7:e3:5a:31:8f:3d:46:3e:df:85:c4:b2:
                    02:11:b8:f8:00:a8:98:69:10:25:80:42:6c:55:03:
                    e4:f1:ea:09:fa:63:a8:08:92:5d:82:7f:63:90:17:
                    4f:f9:bf:be:53:1d:10:5b:70:3a:f0:d7:c8:ce:1e:
                    4f:48:db:33:74:72:00:0b:49:d4:77:1c:17:0e:5b:
                    36:74:23:ba:89:7c:7e:61:df:dc:b4:29:e2:c5:ec:
                    7a:1a:ab:1e:f0:5e:b3:47:4f:d9:f1:1a:1f:7e:4e:
                    f5:91:6d:ef:08:8e:c9:78:35:04:da:d6:83:c7:08:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:11:43:45:42:FF:FB:6E:6B:71:01:CC:E8:43:75:37:92:E1:EB
            X509v3 Authority Key Identifier:
                keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/9DD99914B85311EBA5D4171FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:03:1c:34:b4:79:9d:10:5b:54:35:ce:13:7d:61:24:73:
         9d:eb:47:f4:1c:c5:ef:77:92:e8:60:92:6e:76:af:55:22:36:
         4f:10:26:46:48:1a:71:b4:92:26:fd:1b:f8:25:ef:4b:36:1e:
         25:22:be:8b:31:cf:a3:58:9a:15:20:48:37:a9:3b:eb:8e:13:
         8f:f0:05:52:eb:be:ca:5b:a9:49:cf:45:e1:33:07:d0:a8:02:
         89:e0:99:c9:c1:95:56:64:53:df:6c:9c:17:26:da:05:c6:b2:
         c9:a5:b0:54:61:d1:6c:92:36:c5:04:05:ba:78:45:2b:f1:96:
         3c:dd:1b:65:9e:1c:46:68:a4:25:3e:ad:a4:1f:c3:e2:5c:69:
         08:a3:08:3f:85:ea:87:a2:c3:ed:37:f7:d3:80:14:9a:be:ef:
         2d:70:49:01:f0:27:57:89:06:8f:6c:9e:47:ab:97:49:89:76:
         13:7d:d3:6d:ff:a0:9f:4a:45:95:13:68:da:ef:07:d1:16:84:
         fc:a5:fa:78:df:23:a0:30:a3:d2:25:3d:ea:c0:04:ab:fd:2b:
         94:4e:be:f6:ad:72:23:23:8e:2c:29:ac:f9:33:31:47:30:0f:
         81:bf:51:98:d8:f3:29:c8:5f:20:11:d0:85:0b:43:77:6e:9f:
         4c:c9:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:01 2026 by rpki-client