Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
File:                     6534CB6AA60711EFA9497E10C4F9AE02.roa (raw, json)
Hash identifier:          +LlWfDPiKDdUCs+xHkkWz7phXd+8+cijStN/OwLrfmY=
Subject key identifier:   33:B1:BA:BE:97:52:89:42:03:CD:77:B4:6E:23:8C:10:41:BD:42:AE
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       019D
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:30:09 +0000
ROA not before:           Mon 21 Jul 2025 05:10:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        103.65.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jul 21 05:10:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a41531-488f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:59:d4:47:6a:1f:d1:61:5d:ab:64:ea:2d:
                    5d:a7:7b:3f:85:04:cd:fe:4c:fb:8b:dc:b4:1e:08:
                    af:5a:fb:d1:8a:07:8d:54:f5:c6:94:24:77:44:cb:
                    8c:5b:fe:d4:7c:0e:a9:7f:90:87:e6:16:af:e7:73:
                    33:8e:d5:67:07:f5:48:c0:21:86:34:44:92:35:d0:
                    67:43:0e:7c:0d:5d:7c:f2:8b:93:14:66:c9:21:b9:
                    34:87:1b:c5:07:79:a3:e4:dd:c0:38:69:ca:dd:0c:
                    44:99:04:74:d5:c4:54:4d:79:2e:53:73:e9:d6:06:
                    17:20:af:1d:c4:72:78:7a:01:05:66:f6:7f:5f:65:
                    c7:48:29:13:c1:09:53:8f:d9:55:08:aa:5e:58:c0:
                    38:0c:51:10:c9:19:86:01:99:da:73:7e:60:79:39:
                    6c:b6:46:35:83:15:43:79:e7:3d:00:1e:fa:84:3e:
                    05:c1:e4:cc:99:a9:e5:80:8e:bb:e6:44:65:b5:e3:
                    d1:33:88:e1:ec:ae:3b:f6:f9:55:99:f4:d4:de:a5:
                    93:38:d7:51:d4:3e:3c:38:b2:90:be:f2:b6:f7:13:
                    00:ac:71:8a:b5:62:6c:c4:2c:4e:37:eb:68:a6:05:
                    84:d4:7b:66:15:eb:8e:f8:14:23:7c:aa:6e:11:94:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:BA:BE:97:52:89:42:03:CD:77:B4:6E:23:8C:10:41:BD:42:AE
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:ab:3f:36:ac:ac:ec:5e:c8:97:ff:02:b5:95:c5:26:8b:
         bb:2d:67:0f:fb:4c:bd:09:ed:5c:8a:db:9c:c8:11:cd:e8:ff:
         3b:a7:09:6a:1e:6e:42:af:a8:36:ed:09:48:2c:01:18:8d:a9:
         06:61:1e:15:8b:f9:15:2d:ed:2c:c1:6b:8e:21:f0:ce:6f:09:
         85:02:e6:1a:8a:bd:77:5e:89:46:3b:90:bd:cd:c6:e9:19:80:
         da:60:41:ac:69:08:56:22:6a:70:db:63:fd:08:4d:12:9a:27:
         be:da:7e:b5:03:e9:da:20:e9:5f:49:0c:4c:60:1e:46:ee:f0:
         1a:b0:37:6b:b3:34:04:f7:1e:8f:f2:a8:30:50:13:82:33:df:
         69:6a:d6:a9:78:9d:84:2e:dc:7a:0f:ad:1e:21:d7:e2:50:07:
         02:28:3f:3a:49:04:ec:b3:dd:95:cd:87:96:3e:c0:0a:48:dc:
         69:ce:4a:6c:38:2a:33:c3:45:9d:fc:71:83:32:2d:6c:11:5d:
         d6:46:94:c6:e0:f9:43:c3:33:de:23:b0:a2:77:a5:9b:cf:2d:
         4e:01:70:1e:8b:ab:54:b2:cd:20:da:a6:33:c3:e2:fa:88:3f:
         8c:ea:c6:8c:f9:7d:cb:64:78:02:fd:ba:3f:d4:e1:3b:75:8f:
         a4:46:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:46 2026 by rpki-client