Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/26E6B114EB2B11ECBE328172C4F9AE02.roa
File:                     26E6B114EB2B11ECBE328172C4F9AE02.roa (raw, json)
Hash identifier:          ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=
Subject key identifier:   65:27:69:5A:85:63:11:1A:C8:FA:74:87:39:0E:B6:FB:54:CA:6F:D2
Certificate issuer:       /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial:       0391
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/26E6B114EB2B11ECBE328172C4F9AE02.roa
Signing time:             Fri 29 May 2026 01:30:44 +0000
ROA not before:           Fri 29 May 2026 01:30:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149792
IP address blocks:        103.186.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
                          rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
        Validity
            Not Before: May 29 01:30:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18ec44-ea25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:20:90:82:43:e3:a9:ed:07:4c:df:49:e2:d5:
                    7b:fa:bd:ba:24:ad:2f:24:fa:a2:4d:1b:78:62:28:
                    ff:a6:d5:d9:fb:0c:6b:66:4c:7f:b8:24:4c:e4:d9:
                    6a:a4:ac:78:a6:3c:25:7e:79:76:c9:b7:d7:4f:e1:
                    bd:3b:8e:d4:96:f2:a2:81:48:40:b3:6b:b7:9a:fa:
                    b8:2a:e7:13:43:12:5b:c2:88:ab:73:0f:92:da:01:
                    90:96:43:26:7c:31:5c:4c:bf:c6:2d:f3:f1:f0:e6:
                    38:41:f7:57:9c:99:7c:40:79:ca:e6:7d:30:14:0e:
                    26:3b:63:9b:c2:8f:80:a0:f1:ae:40:1e:74:5e:75:
                    2b:49:89:89:c3:f3:94:ed:a1:ff:36:cf:46:d2:1d:
                    91:d8:0e:19:62:29:65:f6:c9:37:f5:c8:46:f4:2f:
                    c7:16:7f:1c:d3:de:61:53:8f:69:23:cd:2b:56:c7:
                    f7:2a:23:a9:ad:c6:7a:7b:18:a3:47:4c:44:fe:1a:
                    bf:bd:69:36:48:28:47:14:0c:ad:5f:48:b0:96:b1:
                    a4:13:59:03:e6:9e:53:3a:b5:2d:fd:65:19:07:df:
                    0b:29:6e:7d:b0:7e:21:47:45:13:30:0e:4d:be:f3:
                    aa:f6:ca:25:d5:cd:45:1a:dd:fa:cb:3f:04:a9:57:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:69:5A:85:63:11:1A:C8:FA:74:87:39:0E:B6:FB:54:CA:6F:D2
            X509v3 Authority Key Identifier:
                keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/26E6B114EB2B11ECBE328172C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:0e:93:05:0c:19:10:8a:24:e8:bc:c8:ca:3b:22:9d:51:
         51:e5:6a:13:d3:3f:7a:71:33:44:ff:cf:f4:6f:85:f7:1b:78:
         6e:f3:50:ac:5d:a1:6a:76:1e:8c:7a:0f:c9:8d:b4:a9:2a:47:
         79:fe:1f:e5:33:b2:ae:30:ab:9a:6d:02:f9:e6:50:20:32:38:
         96:65:f3:85:6c:6e:88:cc:88:41:3b:c9:e2:47:71:be:5a:37:
         b3:71:56:c3:3d:43:56:b0:17:1b:23:a0:05:db:cf:65:3d:76:
         5c:1d:2c:5c:bf:0e:04:1c:cb:50:b6:7e:f6:df:7f:ae:81:b7:
         7a:a8:bd:cc:34:05:89:61:b6:7f:10:3c:d9:41:60:3b:35:81:
         3f:00:01:64:61:a7:ea:51:b3:9c:a4:c3:a3:3f:45:87:22:99:
         a1:f7:40:ba:63:2f:44:f0:ea:07:d7:57:53:3c:67:ca:ff:9e:
         74:ac:ae:aa:82:9a:50:53:67:c1:bd:b5:c9:8a:bb:f2:4c:59:
         7a:8a:72:44:15:2f:d9:a2:e6:1a:b0:66:6e:d0:5e:10:a7:36:
         60:fa:c9:e1:f6:65:8f:57:8d:ca:f4:ad:99:8c:86:e7:d7:e1:
         98:a8:5f:c7:13:7c:cc:18:11:20:61:97:a2:8f:6a:9e:27:0c:
         a3:74:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:16 2026 by rpki-client