Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/B4F9B59C58A911F195C2275394833773.roa
File:                     B4F9B59C58A911F195C2275394833773.roa (raw, json)
Hash identifier:          00zQFkHzvRJ0Tkas9ws+/6cP+I3mCAoiRqheMA8N5Rw=
Subject key identifier:   17:6B:53:5E:8C:FD:92:FB:E5:DE:97:97:D9:7F:F5:09:A6:AD:6F:5E
Certificate issuer:       /CN=A9188C27/serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
Certificate serial:       0E
Authority key identifier: ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/B4F9B59C58A911F195C2275394833773.roa
Signing time:             Fri 05 Jun 2026 09:41:08 +0000
ROA not before:           Fri 05 Jun 2026 09:41:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56111
IP address blocks:        103.54.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl
                          rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188C27, serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
        Validity
            Not Before: Jun  5 09:41:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2299b4-7422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:82:dc:c0:9a:0e:92:d5:cc:c5:c4:fe:ad:
                    13:d5:39:65:c4:85:6c:a5:26:f1:f6:a8:86:a3:b7:
                    bc:c6:ed:2f:8f:ee:0f:f5:f8:38:dc:16:f8:14:0b:
                    d5:15:4c:79:28:bc:0f:27:ec:11:22:89:e7:0e:5b:
                    b6:ec:6c:0a:6b:fe:17:bc:c4:f8:0b:3e:54:09:c4:
                    f2:f2:f2:76:19:35:60:79:22:65:21:e1:56:92:6c:
                    1d:d6:57:3f:8d:05:98:42:f7:58:d7:a8:84:a7:8f:
                    70:08:f6:d4:42:40:57:0c:2e:61:89:a2:00:2b:ee:
                    b0:f6:9b:87:f5:a8:ec:62:01:6c:7e:fe:c5:39:36:
                    c8:aa:dc:a4:b2:42:9d:62:a2:c3:10:0b:64:89:1b:
                    60:06:6c:d2:d4:ac:03:de:eb:a2:3a:4d:46:0d:cc:
                    92:eb:28:05:3e:9e:c7:9c:d6:9e:3e:3f:18:50:41:
                    38:04:67:de:22:7e:9d:85:b0:fd:2b:06:04:a3:a9:
                    b6:ce:d4:ab:f0:c1:43:64:d1:46:60:1a:95:e4:ca:
                    10:39:c1:79:82:0e:54:c9:42:39:50:97:ed:a8:82:
                    23:16:d2:eb:02:44:61:d6:0d:ef:9f:80:9f:ec:15:
                    c6:a2:8e:ab:8f:1c:a5:b0:f5:7c:2e:2c:e3:65:30:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:53:5E:8C:FD:92:FB:E5:DE:97:97:D9:7F:F5:09:A6:AD:6F:5E
            X509v3 Authority Key Identifier:
                keyid:ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/B4F9B59C58A911F195C2275394833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:40:09:57:c6:94:c0:8a:df:56:4e:53:fc:a3:be:56:c6:45:
         f9:d6:00:64:ec:7d:8e:66:cf:c5:8a:53:93:bb:61:67:26:33:
         26:cf:b7:a4:ec:b4:76:6f:cb:ab:1c:b5:4c:cd:7b:f3:0a:2a:
         71:67:c3:77:18:96:f4:f7:b8:55:00:ca:e8:82:f5:3f:93:10:
         f3:56:11:95:f9:c0:6a:36:5d:0c:63:e3:d5:7d:eb:b8:ef:db:
         29:e3:1d:66:33:a9:f7:50:46:b9:29:59:73:9e:27:fa:a0:d4:
         79:6b:8a:d2:b9:d7:d2:1a:2b:4d:a2:46:dc:c7:2f:33:d0:25:
         a5:c8:2d:0c:f0:6e:98:ff:26:b9:70:4a:c3:2c:c8:0f:fd:02:
         fc:a0:7e:3a:51:56:e9:60:36:08:68:44:7b:fe:e0:bf:ce:37:
         21:63:40:5a:20:ab:da:c1:51:9e:d3:cd:8b:95:e0:cb:a0:b1:
         87:7f:fc:41:fe:1d:73:ac:ad:8c:ba:6c:21:a0:c6:28:09:fa:
         d4:16:71:79:8f:a6:ef:76:d4:57:2c:24:c7:be:47:60:75:7c:
         50:62:3d:28:9f:40:81:86:ac:fc:46:65:46:43:99:f7:75:21:
         b5:95:06:cb:81:9e:83:2f:72:a4:ba:14:08:2e:1d:bf:cf:a5:
         34:29:7a:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:41 2026 by rpki-client