Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa
File:                     8C6A656045C211EE9E812B5BC4F9AE02.roa (raw, json)
Hash identifier:          FhcGuFtYWPB3/UMlAbb6s+HgN6NpeJak3M+SLvTkxXg=
Subject key identifier:   84:CE:A8:34:0C:77:9E:FC:F9:04:A1:94:65:11:1E:41:26:D2:9A:A8
Certificate issuer:       /CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED
Certificate serial:       07A8
Authority key identifier: 35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa
Signing time:             Wed 10 Jun 2026 17:20:41 +0000
ROA not before:           Wed 10 Jun 2026 17:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138903
IP address blocks:        103.136.230.0/23 maxlen: 23
                          103.136.230.0/24 maxlen: 24
                          103.136.231.0/24 maxlen: 24
                          2001:df0:1680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl
                          rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918779B, serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED
        Validity
            Not Before: Jun 10 17:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a299ce9-00af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:a2:05:f0:0f:ca:4a:89:15:19:10:fc:8a:
                    6d:ec:4c:80:bf:4c:f5:0a:5f:17:c4:21:2b:1c:23:
                    97:03:2a:01:b1:9e:76:15:64:02:3e:67:9b:09:58:
                    eb:da:93:06:b7:bb:70:47:12:7b:78:36:c3:da:46:
                    64:d3:cb:fe:95:2c:57:f4:d2:b5:7f:46:fb:e2:2e:
                    6e:9c:29:31:ae:fb:85:f2:00:16:ad:81:2e:b4:67:
                    ea:d6:74:14:a0:22:f7:8f:a5:93:7e:f2:90:68:48:
                    9b:7b:64:cb:b7:b1:53:0f:d8:94:db:85:6a:22:40:
                    84:48:9f:3a:b4:01:50:42:a9:01:22:2a:a4:7b:a1:
                    ae:39:59:e5:35:05:29:a4:ed:6a:a1:cd:88:eb:a9:
                    29:ef:55:f9:21:87:0e:68:63:45:10:89:70:01:1a:
                    1c:a1:d0:a6:71:a1:12:ac:fe:ff:7a:6e:fc:bf:ee:
                    36:02:8b:e3:3c:a8:8c:7c:24:eb:12:59:47:95:ea:
                    6f:f7:61:0a:68:e8:f2:57:ac:3a:23:be:c1:95:5d:
                    d5:0a:d3:53:f3:f2:55:b1:a8:a9:7a:8a:5e:44:77:
                    36:57:23:a3:bc:76:3c:f3:bf:e4:3b:75:61:fc:ae:
                    b5:7b:35:67:87:45:35:e2:6a:d7:0f:0a:5d:fd:2f:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:A8:34:0C:77:9E:FC:F9:04:A1:94:65:11:1E:41:26:D2:9A:A8
            X509v3 Authority Key Identifier:
                keyid:35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/8C6A656045C211EE9E812B5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.230.0/23
                IPv6:
                  2001:df0:1680::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:81:42:c5:6c:03:59:68:e1:3a:63:9e:72:25:72:7b:26:31:
         84:75:f4:4e:36:84:40:fe:92:6b:3e:63:64:70:57:21:ac:8d:
         80:d0:08:2c:b7:29:5d:c7:3c:24:74:ca:7b:f0:cc:b6:c0:65:
         78:63:13:5d:86:fa:cc:d1:f8:3a:b4:95:18:19:4c:92:e0:b9:
         b5:52:43:a4:37:0e:7e:be:26:d0:e2:9a:5b:44:7a:10:3d:0f:
         0c:19:a4:c8:a0:5d:19:b4:7e:b5:cc:31:b4:81:d5:c7:c3:75:
         bb:c6:05:75:45:5c:05:5c:2a:46:68:d5:c3:a5:09:52:68:45:
         7b:37:28:28:de:dc:f7:dc:11:0f:c7:f5:4e:d8:97:d5:ed:4f:
         0b:66:b3:f9:d2:67:22:49:5d:28:d0:e0:3e:8b:56:83:4c:34:
         a3:44:6f:78:92:d3:ce:60:e4:ac:5f:77:dd:71:dc:79:d5:ec:
         3d:54:de:a3:1c:ec:00:ac:e9:61:ed:f3:b0:d7:bc:3f:d6:9d:
         bf:18:f4:bc:42:9a:5b:36:aa:55:9a:73:57:a2:19:30:94:4d:
         df:f0:7b:a3:c5:ca:0d:b1:54:4c:48:4e:82:85:26:94:57:a1:
         36:42:b2:1a:51:72:ea:2f:7a:61:d6:01:d9:10:66:a3:f2:7e:
         bf:da:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:04 2026 by rpki-client