Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/6CB9551A8C4511F1B0CFC09199EE528E.roa
File:                     6CB9551A8C4511F1B0CFC09199EE528E.roa (raw, json)
Hash identifier:          hX7ktXUSiZRzd9TstTCBDxwvCb/2uwG8u057MXQlwt0=
Subject key identifier:   06:8D:3D:6A:32:D4:E9:95:A4:BE:C7:FF:3B:A7:47:D7:50:29:BD:2D
Certificate issuer:       /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial:       0D51
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/6CB9551A8C4511F1B0CFC09199EE528E.roa
Signing time:             Sun 16 Aug 2026 18:35:50 +0000
ROA not before:           Sun 16 Aug 2026 18:35:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134106
IP address blocks:        103.115.82.0/23 maxlen: 23
                          103.115.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
                          rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
        Validity
            Not Before: Aug 16 18:35:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a820306-bfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:21:ec:07:ce:ad:a8:d2:75:fd:65:6b:4c:
                    e1:70:ae:e6:5c:01:50:96:e3:82:c6:39:a8:7f:07:
                    42:8d:59:ec:29:53:91:97:60:2f:49:52:de:7d:c6:
                    ff:ee:e0:fc:da:57:91:c2:3d:bb:1d:73:82:35:35:
                    6a:3f:69:bc:f8:67:0e:de:55:ce:51:39:36:4e:40:
                    59:4d:b1:5b:f3:b6:4a:f0:15:58:5b:42:4b:b0:bf:
                    2e:16:36:db:bd:5e:ba:a7:0f:4f:9f:b2:f7:c3:f3:
                    18:1a:a9:d6:70:17:59:80:4e:64:75:3f:0a:80:7c:
                    3d:f4:dc:89:33:69:68:ba:98:a8:d6:66:39:31:ff:
                    90:c6:02:b6:23:2a:2e:5f:97:34:a1:0b:65:c9:33:
                    1b:de:93:75:64:6d:a2:7b:d6:f2:47:ed:cb:2b:9e:
                    74:fa:1e:cd:2b:f1:3e:1a:e6:ce:8b:09:cc:81:35:
                    ce:71:98:17:e2:ef:74:1b:88:24:17:2d:6b:21:e9:
                    79:b1:86:74:9f:40:03:19:b5:c9:b2:25:1c:a3:49:
                    86:6b:46:e7:88:a4:43:b8:b8:08:9d:27:ea:b2:a0:
                    ea:a2:f3:3a:97:37:38:5a:67:79:9e:d2:ca:a9:94:
                    d3:16:dd:59:3e:b7:12:34:48:f4:0e:1f:9c:d6:e9:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:3D:6A:32:D4:E9:95:A4:BE:C7:FF:3B:A7:47:D7:50:29:BD:2D
            X509v3 Authority Key Identifier:
                keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/6CB9551A8C4511F1B0CFC09199EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:c5:75:95:4d:b3:23:1b:99:6a:77:be:e1:1e:37:d7:17:
         a0:43:c6:d0:19:7a:7e:e1:c9:6c:92:19:2d:59:fb:61:e5:64:
         54:92:65:04:72:32:bc:1a:a6:ca:c9:0e:72:70:33:ff:be:71:
         82:62:cf:84:55:4f:56:84:83:bb:97:19:e3:ab:cf:db:25:5d:
         4a:71:fd:e6:db:f1:cd:5c:7d:15:0b:9f:e7:20:c5:f4:45:8f:
         47:bf:4c:5c:16:10:1a:fa:48:35:61:fb:93:22:84:61:0c:45:
         da:bf:7b:9f:ba:6f:3f:9e:0f:83:31:24:0e:60:01:97:4d:25:
         38:49:a6:2c:d5:bf:2d:3c:ed:55:01:c2:72:a3:a4:2b:3c:26:
         27:5f:32:de:b2:1c:ef:e8:dd:1e:5c:e8:3a:f1:d9:3f:bc:6d:
         37:6a:35:c8:d5:5b:78:a8:36:47:2c:81:f3:b9:f9:5e:01:84:
         43:2a:3f:8a:76:03:77:51:6e:c9:fb:de:65:d5:06:d9:aa:5a:
         b7:29:30:4f:c3:d2:6a:e0:b7:ab:6f:ac:f1:a7:f7:44:0e:d6:
         55:b3:25:f9:55:be:e8:87:fa:0e:be:b8:04:a1:fb:e8:d5:94:
         82:c6:a5:23:88:cf:a8:26:74:b6:7a:b7:0a:92:ec:c8:39:89:
         8b:f1:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:28:55 2026 by rpki-client