Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6891872A27D711EA8E7B5876C4F9AE02.roa
File:                     6891872A27D711EA8E7B5876C4F9AE02.roa (raw, json)
Hash identifier:          K2JfqFAMQRKbluo/PWUtmve+6VxIWpT6OI4rpfTdcPw=
Subject key identifier:   5D:86:43:78:4D:80:02:CE:C5:AA:C0:7C:CF:B2:64:08:E3:A9:20:8E
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3691
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6891872A27D711EA8E7B5876C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:52 +0000
ROA not before:           Sat 02 Aug 2025 15:52:52 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136835
IP address blocks:        103.100.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13969 (0x3691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:52:52 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3453-caba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:94:c5:99:a8:b9:cf:ee:2b:76:5a:7b:1c:
                    8b:d1:40:1c:91:f9:bd:b3:ac:a1:ff:1a:48:a8:bb:
                    fd:0d:7a:a7:2d:00:be:09:fd:3a:cd:5b:8d:06:e9:
                    7f:94:8d:a7:4b:6d:92:72:66:7c:77:2c:03:c8:f1:
                    c8:70:54:8d:8c:fa:01:9e:b4:71:49:97:30:0e:c2:
                    49:55:39:8f:a1:8c:ad:a9:26:03:9b:15:20:b6:e4:
                    12:1f:c5:f4:47:fd:2b:42:ff:f3:2d:39:69:5f:a7:
                    79:0a:ef:ef:9b:4c:bc:f0:92:24:1f:e7:cd:ad:bc:
                    64:d2:5f:c9:4a:21:57:f2:0b:26:1b:68:fd:a2:71:
                    e6:a1:92:a0:d4:f0:b5:52:d8:04:7c:93:4f:ff:85:
                    18:59:40:af:2e:4e:40:12:88:45:64:36:69:a2:4a:
                    d8:60:0a:7d:26:d0:7e:68:6e:bb:8b:5c:46:f2:28:
                    ee:c6:d5:a3:98:67:1d:ae:6c:d9:cb:9b:4b:ff:46:
                    98:4d:e3:9e:c5:74:86:3a:dc:f6:ed:e1:38:42:59:
                    fe:65:be:1f:aa:9d:56:2a:4e:6c:f3:06:b8:6a:34:
                    c5:5c:6a:ea:97:1b:94:58:b9:71:19:e2:d7:1a:7f:
                    cd:f2:88:5e:d6:63:86:22:dd:ee:1e:37:5a:7f:f7:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:43:78:4D:80:02:CE:C5:AA:C0:7C:CF:B2:64:08:E3:A9:20:8E
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6891872A27D711EA8E7B5876C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:08:56:e3:8b:1c:1d:9e:f5:68:a2:16:c4:4c:6b:d8:d3:
         89:2f:e4:ab:d3:1f:f0:c3:5c:4e:9c:68:84:20:ab:5d:5d:f2:
         5f:2a:20:de:4b:aa:e6:47:93:32:fa:48:d3:f6:ec:bf:99:20:
         a6:e6:4c:88:80:b6:83:5a:ca:39:f1:00:25:7e:ed:5e:25:9c:
         23:82:e2:e0:7d:56:98:12:bf:e5:69:99:60:15:60:5f:d2:88:
         e5:c1:46:9f:07:ab:90:ad:84:32:fa:07:cf:79:7f:35:31:ae:
         cf:00:7f:32:cd:09:9d:f5:8e:8d:aa:84:b7:92:b9:58:0a:43:
         3f:86:2f:c2:71:3c:43:fd:49:ca:3e:72:0d:c2:97:74:98:7d:
         5e:e1:b6:a5:db:a2:da:3a:0e:ba:b1:c6:3c:8a:2c:74:d1:1f:
         47:1f:46:f1:5a:21:b1:14:d4:55:a0:6f:bf:02:8d:a5:14:0c:
         84:d8:ad:2a:23:be:7d:c0:51:f7:09:a2:5c:26:eb:75:c2:17:
         2a:86:0f:fc:77:55:ca:6d:84:2f:3a:a1:d8:3a:c9:39:2e:fb:
         32:6f:f9:31:e2:e8:1a:de:04:bd:86:e5:de:5c:b5:79:1e:ec:
         5f:7e:c2:e6:63:d3:a7:f4:82:3a:40:4b:8d:17:13:4c:f0:f1:
         42:7f:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:29 2025 by rpki-client