Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
File:                     6A5EC93A70DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          zDVZOx/RnTHyqu+JHRSyRqE5JFgxRqECtSMYFaFDkBc=
Subject key identifier:   E6:68:5A:92:B0:1A:1C:5B:64:CF:EB:16:B4:2D:CD:BA:BD:CC:39:B7
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0EEA
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:35:12 +0000
ROA not before:           Wed 02 Sep 2026 18:35:12 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     398542
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:35:12 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c60-da4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:8e:c0:1e:2c:67:15:20:6b:c6:80:f2:53:
                    7e:72:26:e0:c3:06:26:84:2a:5d:ef:a0:22:6b:1c:
                    a7:66:2f:1d:43:06:76:c6:bc:2a:cc:85:d7:82:18:
                    99:2c:b5:c1:06:fa:2b:e6:11:ba:ba:b2:4b:c0:da:
                    19:99:ad:98:c5:36:1d:4b:83:a0:6c:56:63:7b:75:
                    d6:ec:4b:8d:6e:d0:b9:bf:44:77:b7:b5:08:9c:1b:
                    70:3e:ef:b5:cc:a6:c2:60:c6:be:e3:b1:87:32:f5:
                    11:a8:73:d8:2c:b6:16:4b:13:43:c4:8d:6e:d4:fd:
                    10:22:11:1c:8c:af:e8:2c:7b:82:da:0d:86:37:de:
                    d5:7f:88:49:7d:01:86:06:63:a1:b9:8a:28:5b:00:
                    24:c2:97:89:9a:13:d9:15:0a:90:64:b9:ea:bb:b8:
                    48:79:3d:1b:9b:51:23:41:eb:4f:dd:7a:96:1a:8a:
                    db:36:dd:c7:20:1e:07:fa:91:9b:91:08:4e:9e:82:
                    d2:19:35:14:13:16:e0:e7:92:8e:02:59:0c:94:d8:
                    c1:ed:00:f4:49:a0:b9:63:eb:6d:91:3c:9b:95:59:
                    4a:47:50:4d:74:c4:fd:46:a4:69:f2:47:b5:99:9c:
                    3d:7e:27:06:d7:91:99:d8:05:cf:f5:64:70:41:1c:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:5A:92:B0:1A:1C:5B:64:CF:EB:16:B4:2D:CD:BA:BD:CC:39:B7
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:85:1e:cf:4d:15:e4:36:68:8e:46:de:09:e1:cf:46:39:7c:
         6f:6b:78:0b:ac:4e:06:14:60:b9:13:2a:83:b6:e6:06:e8:64:
         21:aa:32:4f:8a:a0:6e:78:25:25:58:41:cb:50:ee:9b:87:c9:
         75:9c:e4:64:cb:50:b0:87:2f:0f:ac:f2:08:3d:5c:30:0c:ec:
         9c:1b:86:97:41:c4:5b:fe:5a:a2:6c:14:e3:5d:60:50:18:5f:
         8a:3f:82:2d:9c:69:57:ad:1d:ab:60:83:ba:ec:0d:59:e6:d0:
         35:39:44:5b:65:66:af:a1:71:dc:f6:f4:70:28:dc:ff:56:cc:
         e3:f6:dc:c7:12:32:d5:4c:c5:2b:b4:3d:8a:5c:de:cb:cb:af:
         b0:e3:54:94:70:9e:0e:0b:df:04:f6:81:32:74:27:55:2f:27:
         9e:a7:79:a0:f4:09:bd:8e:0e:7c:07:0e:9c:4e:22:2a:d3:58:
         d7:2e:d7:46:44:4d:7b:f7:eb:07:eb:64:e1:ac:1d:88:e3:a7:
         51:6a:95:84:55:26:4c:ff:ea:8b:e8:b8:13:0a:bd:79:5a:d2:
         17:f1:e5:63:33:41:c0:6a:c8:ea:55:99:8d:7e:a1:b6:38:f7:
         60:a6:23:a6:98:4b:16:9b:bf:95:60:55:5a:56:39:53:8d:3d:
         86:56:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:26:43 2026 by rpki-client