Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
File:                     B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          qXwwSahc5SDSu2cztbYsQi7Fi0xXTRlGm5hU5T5x44Y=
Subject key identifier:   6A:42:DD:2B:70:47:8D:E4:0F:8C:BC:0F:A8:D3:47:72:77:76:54:A5
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       0694
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Wed 10 Jun 2026 23:27:14 +0000
ROA not before:           Wed 10 Jun 2026 23:27:14 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63961
IP address blocks:        103.140.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 10 23:27:14 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29f2d2-84b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:a3:6e:da:d0:63:01:a8:84:d5:35:04:85:
                    e4:a0:89:79:76:32:e8:f5:18:6e:3e:17:32:f4:fa:
                    51:4a:4b:65:58:77:22:2c:17:e8:8d:b8:1f:10:68:
                    e8:fc:e2:40:52:05:e5:14:87:68:25:75:52:bf:ef:
                    7d:e7:80:f1:1c:fa:be:27:1a:f1:32:78:3c:94:ff:
                    4e:d4:b7:da:ef:f4:f6:64:f0:e3:26:c8:32:bc:d8:
                    b2:98:c3:80:b4:23:86:a8:e0:b1:fb:1f:ac:66:e3:
                    09:ed:25:ca:ef:74:3e:6f:38:f2:73:53:9e:70:4d:
                    3f:73:57:27:f0:72:17:ec:a1:4a:aa:9f:56:bd:e8:
                    8f:74:eb:b5:61:35:80:ae:1d:4d:81:cc:1f:b3:27:
                    60:2a:8d:dd:99:f2:90:74:a3:2b:a3:b0:d4:29:dc:
                    36:73:fc:f0:d5:fd:dd:a8:23:5f:a9:69:58:00:6a:
                    19:44:08:b7:49:81:d2:c4:1b:c3:44:6b:f8:b6:95:
                    1b:f6:fb:bb:4a:f6:3d:fd:90:a1:4f:5b:07:53:8e:
                    27:61:3f:dc:8e:35:c3:87:23:ee:15:1c:6b:a6:c4:
                    fd:c5:eb:18:09:4d:99:57:68:93:2a:54:57:d4:18:
                    b3:a9:bf:78:4b:8f:83:9c:c1:76:26:2d:8f:69:a9:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:DD:2B:70:47:8D:E4:0F:8C:BC:0F:A8:D3:47:72:77:76:54:A5
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:76:3f:0f:15:4e:01:eb:72:63:ec:a1:d7:45:86:e7:8f:1c:
         f5:cd:86:5b:41:67:b6:a9:78:da:ea:9a:9c:9f:0a:f4:fc:49:
         70:ba:39:a6:2d:0f:c6:ac:6f:07:4f:c3:6e:11:da:d6:54:6f:
         51:db:3c:b8:53:6f:9b:be:b5:20:be:28:6b:0f:d6:6f:0a:aa:
         b3:99:b6:87:69:5f:98:5f:7d:05:ca:34:6e:8e:2a:9f:c0:91:
         23:b8:57:62:6f:30:8d:17:23:a9:39:73:21:e0:e3:12:11:ba:
         a0:b2:52:cb:c7:ac:5e:51:2c:43:59:df:2c:f2:d9:cb:6d:71:
         90:5c:f4:7a:8a:29:62:d7:98:ff:1f:36:ce:c1:6b:39:f2:04:
         1c:9d:0b:4a:35:49:39:28:fc:82:c7:71:ff:92:0c:d4:f1:33:
         f8:61:8c:1c:ac:98:86:c8:d4:ca:48:6d:98:38:8b:d7:83:3b:
         96:0a:39:44:7a:53:af:42:46:75:d8:d1:4b:d3:dc:8c:ac:2f:
         2e:03:40:73:79:db:ef:5c:de:60:36:3e:e0:f7:4d:32:10:e6:
         35:f3:6d:d7:5a:22:24:7b:4b:b7:44:5f:d4:f3:bc:6e:b8:84:
         cb:65:42:74:6d:fb:c4:72:8f:1b:9b:de:31:bf:e2:ed:df:14:
         9c:3b:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:04:02 2026 by rpki-client