Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
File:                     EF1B381EF93911ECBD1E663DC4F9AE02.roa (raw, json)
Hash identifier:          zMxGyE5l+wN63Ue+f2QHW8frHPvryEu4lFcEqxA7DAk=
Subject key identifier:   DC:FC:9B:82:0A:39:63:93:FB:4A:5B:DF:EA:AD:3B:CA:2A:61:12:8F
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       0372
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 01:31:04 +0000
ROA not before:           Fri 05 Jun 2026 01:31:04 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142017
IP address blocks:        103.187.104.0/24 maxlen: 24
                          2001:df0:cdc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Jun  5 01:31:04 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2226d7-cd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f5:19:59:6d:da:0d:30:bd:60:c7:95:04:86:
                    dd:86:0c:81:6e:8e:e1:5d:54:21:4d:c7:a5:fd:f4:
                    b5:b7:da:44:f2:c3:58:42:01:15:76:c5:5c:4b:52:
                    89:d1:3b:1f:a8:74:cc:ff:36:67:21:71:04:ee:a0:
                    a9:9f:c0:03:6f:c8:0c:3f:3e:ec:5c:76:40:f1:44:
                    31:fc:1e:84:39:62:59:20:89:d2:dd:74:81:86:61:
                    09:6e:6f:37:69:d5:e1:d8:a4:91:c7:1f:f9:ae:63:
                    d0:0b:01:a4:6e:b3:88:6c:e0:d5:54:a3:43:0b:d6:
                    f1:bb:10:d0:e4:e1:53:61:7a:16:bc:ff:42:7f:d5:
                    c4:6a:9b:f8:7c:fa:71:c5:ad:07:0f:b3:40:30:db:
                    bf:2d:4f:80:41:d3:f2:82:a0:c7:5d:5c:9d:18:69:
                    23:53:2a:39:38:35:6c:07:78:b1:5c:85:1f:d0:ea:
                    ce:37:6f:69:bd:ca:00:5e:28:23:4a:b5:16:64:b8:
                    0a:74:24:f8:86:26:8c:d7:df:d5:90:8d:bf:e2:ad:
                    70:93:88:db:bc:cd:5f:4b:dd:9d:45:3c:ca:af:d1:
                    25:40:ab:c9:8f:49:cf:e1:30:56:f2:9c:06:52:82:
                    5c:4b:0f:93:9d:0c:34:a1:3c:49:6f:08:c9:1f:38:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:9B:82:0A:39:63:93:FB:4A:5B:DF:EA:AD:3B:CA:2A:61:12:8F
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.104.0/24
                IPv6:
                  2001:df0:cdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:2f:9b:61:f3:d2:5f:f4:32:b9:14:66:dc:07:30:cf:21:
         ae:9c:79:5d:01:ae:d9:7e:1c:9d:c9:88:23:f6:80:55:81:52:
         b8:41:83:a8:2d:cb:32:44:9f:3f:94:aa:3d:16:89:1c:b1:5f:
         e9:c3:b8:6a:d7:06:b4:24:99:20:f3:86:31:4d:f6:35:fc:5e:
         22:0f:b4:b5:ca:41:49:51:3a:99:48:a8:16:85:49:c6:5f:f5:
         98:95:24:c2:dc:57:55:45:f6:7c:a5:e0:14:ec:0c:69:31:b7:
         59:9b:81:04:77:61:3d:3b:a0:ff:32:24:71:66:90:9e:be:fd:
         11:c2:9b:d2:09:01:6c:d5:fe:50:a7:13:6e:2a:7c:ae:6d:41:
         7a:56:21:d7:96:5a:21:eb:58:ce:b0:c0:c1:ca:26:dd:6c:a5:
         6b:45:c5:a2:64:0b:d4:72:8b:99:67:e6:f9:e1:45:8d:4d:c9:
         c5:a3:8e:15:0a:cc:ff:ea:1c:41:a1:1f:49:01:5e:04:92:21:
         b3:d7:37:6d:d9:f7:b2:c4:35:8c:b9:8d:f2:c9:32:f1:c0:11:
         b1:dc:61:de:61:bc:ae:34:5f:dc:d5:41:78:5c:a9:5e:13:9d:
         88:d9:d0:3a:9d:86:41:e2:6c:9f:ef:dd:f0:ae:6a:f5:d1:28:
         8b:34:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:47 2026 by rpki-client