Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/75417ABE781411F0BDF7A723C4F9AE02.roa
File:                     75417ABE781411F0BDF7A723C4F9AE02.roa (raw, json)
Hash identifier:          CCfmB5nos7EF41BAAoxKCuLPSODNK5W/+bRi8fs1z+4=
Subject key identifier:   6B:EA:F9:67:73:6E:D0:93:A8:7F:D7:EA:69:DE:FA:55:81:38:54:B0
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       162E
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/75417ABE781411F0BDF7A723C4F9AE02.roa
Signing time:             Wed 10 Jun 2026 17:19:31 +0000
ROA not before:           Wed 10 Jun 2026 17:19:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151781
IP address blocks:        103.114.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
                          rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5678 (0x162e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
        Validity
            Not Before: Jun 10 17:19:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a299ca3-4e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:68:ad:c4:12:a1:33:87:bb:6f:e2:c7:f2:
                    7a:8e:06:3c:32:71:8b:ce:42:75:91:39:f1:c6:ac:
                    87:44:85:4b:36:cd:c2:87:62:62:28:c1:4f:f3:2a:
                    08:d1:3b:4c:23:fe:37:a3:12:2c:05:f5:40:7f:9f:
                    ab:98:d2:c7:4c:e1:83:38:5a:e6:23:c7:49:cd:92:
                    a1:b2:08:f7:df:b5:06:b6:82:25:61:d5:ac:05:5a:
                    00:fe:b7:f7:25:de:5a:f3:bb:9f:eb:a6:56:fa:2c:
                    bf:61:5c:3b:d1:c8:4a:cf:a1:73:ae:3a:d8:4f:2c:
                    72:06:0c:ae:31:66:20:50:75:58:06:e9:29:a3:a6:
                    86:fe:c6:77:95:59:f7:5c:9d:ac:42:21:dd:42:0d:
                    00:39:9a:a9:60:49:df:6a:2e:ad:14:4b:a9:86:e6:
                    11:41:81:14:e3:94:72:90:b1:c0:76:d9:36:d2:e5:
                    64:6f:1c:d9:00:dc:ce:4a:c2:5d:a9:13:06:6d:bd:
                    da:69:6b:6e:a8:31:2f:cf:76:e6:cd:82:41:44:70:
                    50:f1:5b:3d:e1:d6:7c:0d:bd:0a:f0:7d:7c:fe:0b:
                    90:a4:c8:1e:84:b0:87:e1:8e:b1:fb:e1:ec:ec:01:
                    e6:18:20:26:cc:a8:c2:5c:d5:d0:95:ef:2c:4c:ab:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:F9:67:73:6E:D0:93:A8:7F:D7:EA:69:DE:FA:55:81:38:54:B0
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/75417ABE781411F0BDF7A723C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:b7:28:48:31:c8:af:08:4a:ea:c3:91:dd:ec:0d:9b:9a:
         b1:0a:5c:6b:ce:de:bd:29:2a:3a:20:15:c5:48:d8:8b:c1:64:
         eb:4d:9d:36:3c:9d:ff:52:67:48:dc:60:a2:7b:cd:5f:8d:3a:
         73:0e:a3:61:3d:fb:7f:86:94:3c:26:ac:47:fa:75:4a:f2:90:
         45:c8:fb:6e:89:7e:a0:17:74:36:e2:2f:8c:89:8f:27:07:d2:
         f3:b1:e3:46:f6:b6:3e:53:13:cc:7e:b4:e6:b9:d4:dc:d3:69:
         17:15:f5:f0:93:be:e8:a7:de:1a:b5:14:b5:ef:f0:70:ec:be:
         52:87:57:08:70:27:b3:cc:8e:25:a7:29:33:81:04:25:30:77:
         bb:de:ce:2f:28:0c:85:e5:35:02:39:75:75:6d:c4:bb:8b:ce:
         54:3a:c9:35:f8:bb:02:af:80:1d:11:b0:a4:f0:25:72:a4:e5:
         5b:47:9c:67:ed:54:04:79:74:7c:ca:bc:f2:d8:d3:af:be:b2:
         bf:d6:6f:4d:ff:e2:3a:51:73:a1:ad:1a:4b:2f:5e:b4:96:ec:
         83:63:bd:0a:f5:47:2e:20:a8:33:9d:af:5c:52:cb:8c:63:ea:
         12:25:e1:1f:17:80:b0:96:55:5e:ab:e6:ff:8c:04:a8:cc:b2:
         21:a1:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:32 2026 by rpki-client