Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/503D70161E0111E9A590C837C4F9AE02.roa
File:                     503D70161E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          mvj4riWFQ0OBlYlN7klaqX2iE8M3m7GYlHyknPWaaW8=
Subject key identifier:   FA:CC:94:7B:B8:6C:3E:74:29:23:DD:28:8C:09:B8:AC:ED:0C:48:1B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C1F
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/503D70161E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:56 +0000
ROA not before:           Mon 06 Jul 2026 15:12:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45807
IP address blocks:        119.46.66.0/24 maxlen: 24
                          171.102.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15391 (0x3c1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5f8-40fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:00:ef:92:f9:fd:cd:f2:a1:7c:14:38:c6:
                    c2:33:d8:17:0e:6b:bf:e3:69:9b:98:a7:60:36:b5:
                    a7:da:c4:e1:72:24:e0:02:f2:24:28:16:fa:cd:5a:
                    85:98:e9:91:fa:29:28:89:05:ba:21:87:b4:b8:83:
                    9b:de:78:6a:b7:dc:c9:2a:67:9f:df:07:2c:27:5d:
                    76:77:2b:11:e0:fe:0a:87:93:72:ac:87:cb:d7:39:
                    22:e3:48:2d:fb:e0:e5:ae:d7:c4:34:07:50:a4:a1:
                    b8:8c:f3:d8:48:53:55:ef:ca:2a:31:00:89:fc:83:
                    19:bc:0b:d1:05:ab:2e:a7:2a:7a:34:a3:a6:f5:84:
                    67:4e:71:58:03:b3:17:cf:6b:70:5d:64:6c:98:4e:
                    28:cd:85:f6:13:1a:da:d6:1e:1f:c5:b2:af:2c:f0:
                    75:4a:fd:ee:8b:9d:c2:7a:85:fd:98:1a:48:bf:0b:
                    81:cd:72:e1:a6:fd:a9:64:91:34:bd:e3:b8:59:e5:
                    0d:a1:fb:56:6c:8a:d0:ac:d0:4c:0e:4b:9a:3b:df:
                    6b:46:ff:e7:a9:b8:9e:fe:c5:30:66:62:45:2c:3e:
                    80:0e:ea:fd:14:f1:5e:89:e9:19:d5:2a:72:62:84:
                    1b:47:f3:8c:92:89:48:f5:09:6c:74:78:48:96:4c:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:94:7B:B8:6C:3E:74:29:23:DD:28:8C:09:B8:AC:ED:0C:48:1B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/503D70161E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.66.0/24
                  171.102.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a0:78:36:8c:bb:aa:9a:8e:2c:e2:01:51:e3:52:c7:c1:45:
         3f:e8:63:9c:dd:6e:73:d6:28:f5:2d:2d:bd:a9:ac:48:5f:5d:
         3f:0f:0f:15:4f:96:a1:d0:a2:86:cf:64:9e:58:b0:86:45:22:
         99:b5:24:5b:6a:7c:23:84:50:86:5b:c7:b4:ed:30:b3:33:71:
         75:e0:dc:3f:4c:9a:56:1a:1a:49:79:bc:70:25:bf:f9:e5:a9:
         b4:7e:50:45:ba:60:d5:78:12:f8:32:95:72:cf:5f:70:78:cf:
         ee:ec:ba:c2:c2:e9:cc:1a:fc:be:30:90:10:64:6e:cf:6c:a4:
         83:3e:37:2b:22:22:38:20:a8:64:a0:3b:74:72:05:a1:da:50:
         34:d4:3e:0f:5f:0e:37:39:47:c3:32:d6:fd:b3:5b:0e:89:36:
         14:8f:52:d4:e2:6e:02:d3:d7:86:29:97:e5:19:4b:f9:da:ed:
         8a:0d:e9:43:76:82:2d:67:00:e5:d8:cf:14:a2:36:71:61:e7:
         86:1e:e4:bd:29:e2:72:60:2d:d5:39:41:92:5e:65:3c:2c:d7:
         92:06:2c:26:eb:c6:95:cf:7f:45:6c:6e:2d:d6:1b:b1:51:fb:
         90:75:55:86:99:d6:c1:b3:23:9d:53:0a:fa:66:76:c2:3f:ea:
         76:05:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:06 2026 by rpki-client