Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
File:                     C7B754BEF85311ED8D59CA87C4F9AE02.roa (raw, json)
Hash identifier:          rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=
Subject key identifier:   7D:CD:30:05:40:89:72:8E:D8:41:5C:D5:F3:17:4D:72:BA:8F:30:CF
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       0614
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
Signing time:             Wed 24 Jun 2026 23:28:20 +0000
ROA not before:           Wed 24 Jun 2026 23:28:20 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45352
IP address blocks:        103.230.56.0/24 maxlen: 24
                          103.230.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jun 24 23:28:20 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3c6814-f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:d9:4a:0e:2b:7a:1c:6f:e7:91:06:ea:af:
                    39:31:31:5f:22:20:91:67:c1:ea:3c:df:21:c2:b6:
                    d3:96:1a:4b:f3:ff:f3:73:08:49:46:9b:7e:c3:dc:
                    6c:d6:52:03:f7:f4:1b:11:16:5f:89:9c:16:02:e3:
                    75:4d:b3:07:09:07:b3:77:94:8c:4d:23:78:7d:84:
                    68:0d:7d:a1:db:a7:fd:02:0d:b5:f0:08:8a:27:41:
                    b0:70:7e:ce:75:fd:76:49:8a:55:1a:05:bc:dd:00:
                    f9:e4:df:22:11:1e:d2:c6:42:38:e1:12:89:ab:90:
                    dc:73:79:82:4a:06:d7:3c:03:46:59:9b:25:e1:94:
                    e0:12:38:8a:9d:45:41:ae:87:f6:90:66:0f:10:3b:
                    64:66:bf:7a:29:18:cc:8c:7c:c6:71:26:3f:44:d9:
                    e8:c2:d0:3b:55:e2:39:b5:ac:26:f7:51:b3:b4:d3:
                    cc:4b:bc:4e:4b:bb:5c:1b:d9:70:b7:a8:1a:ea:9e:
                    88:d2:0e:1c:af:b5:5b:5b:b7:c3:8c:11:2a:6e:58:
                    a5:46:86:67:2f:d6:5c:0d:d0:2a:90:b7:9c:f6:e2:
                    78:67:78:97:20:f8:c8:93:a2:41:40:6c:28:fe:53:
                    48:fd:cc:76:32:48:60:8d:d8:86:a4:5c:ab:24:d3:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:30:05:40:89:72:8E:D8:41:5C:D5:F3:17:4D:72:BA:8F:30:CF
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0/24
                  103.230.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:df:31:73:19:fd:b3:43:64:c0:c8:9d:98:4e:73:f5:b6:9d:
         8d:6a:fe:af:e6:19:16:52:55:07:cc:de:f8:5d:dd:48:16:85:
         2c:47:d5:a5:45:2a:73:15:86:18:b1:2e:af:ce:94:b6:37:f7:
         da:bc:eb:63:73:3b:8e:a0:51:50:b7:63:80:9e:a6:ac:c5:2b:
         ee:ea:44:47:dd:03:cd:cb:52:36:6a:72:5b:b3:64:6f:41:01:
         ed:25:22:4f:0b:f2:b3:8a:99:69:0c:95:83:68:94:bc:c3:f8:
         94:0e:2a:cb:78:1e:f5:44:ce:59:e0:fe:ee:36:97:12:cd:c9:
         16:30:bd:06:08:85:74:81:1d:8e:3d:c2:9b:a3:e7:22:34:49:
         d5:ee:eb:7a:48:aa:ad:ce:34:d2:6d:d5:b0:a6:53:2d:d1:6f:
         53:52:be:34:bc:0f:4e:69:d5:84:cd:c0:2a:82:0b:e8:d0:20:
         53:23:e0:e5:d8:6e:34:b3:8d:e1:d5:6e:ab:75:8c:f6:57:c1:
         b6:bc:60:72:e1:8d:3f:57:85:f3:d5:dc:ac:19:7d:d0:ec:6c:
         e7:e4:7f:9c:af:02:e5:a1:35:97:e3:f3:c9:63:8d:38:36:c2:
         64:06:41:5e:1f:15:ff:11:1e:a4:af:7a:fe:75:66:9c:2c:ed:
         9d:af:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:20:22 2026 by rpki-client