Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa
File:                     6B7E8FC670DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          CZD8DnkvSuecJc1rAO4JQy1E4lxowJK/FQipvSL/+xU=
Subject key identifier:   B0:AB:31:69:8B:EF:BD:61:77:1B:2C:CF:86:D6:2D:80:41:B7:58:9C
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0EE8
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:35:08 +0000
ROA not before:           Wed 02 Sep 2026 18:35:08 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139470
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24
                          2405:22c0::/32 maxlen: 32
                          2405:22c0::/36 maxlen: 36
                          2405:22c0:1000::/36 maxlen: 36
                          2405:22c0:2000::/36 maxlen: 36
                          2405:22c0:3000::/36 maxlen: 36
                          2405:22c0:4000::/36 maxlen: 36
                          2405:22c0:5000::/36 maxlen: 36
                          2405:22c0:6000::/36 maxlen: 36
                          2405:22c0:7000::/36 maxlen: 36
                          2405:22c0:8000::/36 maxlen: 36
                          2405:22c0:9000::/36 maxlen: 36
                          2405:22c0:a000::/36 maxlen: 36
                          2405:22c0:b000::/36 maxlen: 36
                          2405:22c0:c000::/36 maxlen: 36
                          2405:22c0:d000::/36 maxlen: 36
                          2405:22c0:e000::/36 maxlen: 36
                          2405:22c0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3816 (0xee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:35:08 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c5c-7928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:fa:0d:11:5a:9e:20:7f:a2:b3:29:ce:63:
                    93:89:08:51:6b:7f:a7:26:57:d2:30:a7:20:57:9c:
                    c6:da:9b:26:31:3d:61:75:4a:d2:49:48:d4:61:eb:
                    2a:07:ef:01:0e:5a:db:91:14:e2:50:17:de:02:e3:
                    ad:d3:a1:c0:5e:ed:5c:c4:b1:3c:b0:9e:a9:e7:91:
                    a7:af:96:57:65:97:07:aa:e8:78:58:7c:45:43:a0:
                    4d:64:f2:07:26:b5:59:50:42:7d:16:91:60:ad:a6:
                    7a:2f:dc:7a:77:38:4b:a3:f9:18:28:ac:5f:10:69:
                    55:c6:b6:f6:f4:e0:e3:ca:f5:3d:8e:74:1d:b4:81:
                    bb:ab:8a:7b:92:05:67:15:7e:24:9f:61:b6:97:6c:
                    84:ea:7c:7c:4b:3f:96:49:a8:1f:c6:f4:c6:cb:6b:
                    11:34:e2:be:d1:e7:c4:4f:43:5e:e1:44:76:95:3c:
                    1a:df:34:dd:bd:38:b2:f8:aa:e4:0f:8b:52:7c:43:
                    e8:fa:34:bc:23:00:86:db:0a:c0:3a:3f:04:d3:51:
                    05:47:1f:dd:e7:da:a8:3c:52:65:e5:ca:91:6e:b5:
                    10:fd:41:17:42:39:2c:77:17:5a:55:38:ae:a0:7f:
                    cd:dd:6c:2c:20:05:75:1a:41:74:20:74:44:71:e5:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AB:31:69:8B:EF:BD:61:77:1B:2C:CF:86:D6:2D:80:41:B7:58:9C
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6B7E8FC670DE11EC8B944928C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23
                IPv6:
                  2405:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:82:30:6d:e7:1a:57:a0:d3:8c:08:8f:ff:69:b5:7d:49:cc:
         09:cb:55:50:74:bb:23:89:c4:66:5f:32:62:6d:c8:36:85:15:
         8d:e7:6e:1e:62:04:f7:b9:c3:32:29:56:1c:d1:49:e4:50:42:
         96:70:b1:99:f2:d3:a8:52:d8:cc:ce:1d:f6:67:2d:d3:a9:a6:
         9d:4f:61:a7:5e:bd:7e:35:6e:69:a6:83:4a:05:84:74:0c:c6:
         85:87:47:75:43:64:e3:f9:70:27:f6:99:84:65:e2:0e:c9:92:
         90:47:7a:64:d7:f4:49:18:de:d1:ce:26:39:e1:37:4c:0b:52:
         f7:84:40:00:19:99:72:79:14:d0:74:5f:54:fb:84:10:e3:14:
         8a:58:75:ad:c0:81:80:df:68:b6:1c:d7:5c:61:04:57:70:b7:
         06:2b:df:79:9f:e7:bc:33:13:46:df:fe:3a:d6:cb:61:74:1b:
         c5:81:7b:f8:58:b5:89:db:4f:04:95:80:20:6d:24:05:5c:be:
         f0:1c:64:e9:c8:90:bb:c6:9b:d1:9c:c1:1d:e9:58:04:8c:de:
         08:b9:d4:44:a5:7c:e5:ba:6e:fd:63:38:cc:5a:db:2c:58:c7:
         af:c4:0b:97:15:a8:3a:e6:91:32:7f:ba:b9:36:cc:f7:e4:bd:
         20:7d:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:41 2026 by rpki-client