Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa
File:                     42CD71AEE33511EC9EDB371BC4F9AE02.roa (raw, json)
Hash identifier:          BmkDfGNwDvTFPWcc2oNSmzFiujBl/Zzlp/ccZkQmaXc=
Subject key identifier:   E3:A2:5E:A4:EA:82:CE:F5:F2:01:B2:FF:F2:A5:39:B1:84:CF:7B:C1
Certificate issuer:       /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial:       03D8
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa
Signing time:             Sat 29 Aug 2026 00:49:39 +0000
ROA not before:           Sat 29 Aug 2026 00:49:38 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     56264
IP address blocks:        103.189.6.0/24 maxlen: 24
                          103.189.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
        Validity
            Not Before: Aug 29 00:49:38 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a922ca2-824e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:f2:27:e4:c5:13:ff:0f:1b:0b:5c:97:10:
                    b4:c0:19:70:b8:e7:74:3c:cf:36:d1:81:b4:69:6b:
                    74:76:74:42:82:f8:c7:f4:2a:0b:f8:64:4b:1e:0c:
                    50:e8:c1:2f:af:e7:0d:fa:4f:ae:fa:40:a2:5a:34:
                    ce:43:0e:21:4d:05:d0:1c:39:79:6e:08:9d:e3:09:
                    11:54:b7:e6:44:5c:2c:a5:8f:48:f6:1d:be:42:0f:
                    71:cb:a6:dc:95:52:45:8c:e0:73:d1:50:72:b8:8a:
                    f6:e0:21:1b:bd:f3:8a:0d:0f:6c:c3:a3:ff:12:4f:
                    29:8a:58:b9:ec:1a:4c:1d:dc:e5:0d:2e:13:49:5d:
                    02:bb:22:cd:02:b3:28:45:76:01:ee:34:8b:0d:1d:
                    02:28:90:0d:4e:50:f8:ee:b5:d3:fb:dc:34:74:85:
                    53:ed:95:05:7d:04:41:9c:4f:f5:50:57:de:da:25:
                    a4:1d:31:d4:b7:dc:65:10:fc:1a:56:c5:68:7a:8c:
                    7c:2b:71:86:90:91:b6:4d:83:0e:c8:8e:28:a6:3e:
                    43:3a:18:e9:e9:73:74:8b:b5:54:78:d3:1d:cc:ca:
                    c4:55:f6:35:c1:06:d1:49:7a:7a:f7:c0:29:b5:8b:
                    1b:9f:ae:93:83:28:90:f4:5e:de:e0:b5:ed:59:37:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:5E:A4:EA:82:CE:F5:F2:01:B2:FF:F2:A5:39:B1:84:CF:7B:C1
            X509v3 Authority Key Identifier:
                keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:75:20:8f:21:64:68:4d:41:52:6d:75:df:96:4b:89:2c:60:
         0a:06:70:d3:64:69:c7:b9:20:0c:03:36:d4:a9:6b:d4:ec:4f:
         3c:2a:9d:42:68:79:60:08:05:14:0d:90:71:c8:60:68:2a:b5:
         7b:a2:10:96:f3:e0:aa:df:eb:87:d4:be:aa:92:23:ca:25:c1:
         35:5f:f9:d0:ac:b3:b0:87:a8:7f:7c:f3:d7:6b:ab:72:a8:b1:
         16:8c:63:01:f8:f4:34:78:c7:75:37:37:12:64:f8:90:5a:59:
         63:cf:36:82:63:3b:5f:0b:3d:67:70:a3:b6:e7:22:01:49:91:
         26:f1:c8:fe:44:dd:d7:a9:e6:61:a0:df:06:19:af:39:b3:70:
         bb:02:be:af:a9:4a:69:ec:8f:a6:6f:92:54:36:cb:ef:3b:7d:
         52:57:81:4c:05:77:8b:3a:00:a2:18:05:cd:75:65:d0:72:6b:
         9d:22:96:17:25:cb:3f:b5:3e:37:9e:17:5b:33:1c:82:bd:b9:
         1b:e9:70:b2:d8:19:17:a6:4d:f1:0b:ac:2e:86:3a:05:7b:1d:
         51:a3:a9:6a:20:c8:35:01:41:e5:78:a5:7f:e0:95:83:d5:42:
         03:87:09:8c:8b:0c:71:85:a0:e3:5c:93:b6:22:54:cc:d4:7e:
         47:52:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:17 2026 by rpki-client