Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
File:                     602678F8252A11EEA290E91FC4F9AE02.roa (raw, json)
Hash identifier:          axIru7MKX6ecXQsiWBKjZkKaXNLS528jv/SfOGQ616U=
Subject key identifier:   0C:EA:ED:0D:CF:3C:59:DD:92:E7:09:3D:58:7A:6C:29:73:E6:36:15
Certificate issuer:       /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial:       0243
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 04:51:59 +0000
ROA not before:           Sat 01 Aug 2026 04:51:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136928
IP address blocks:        103.215.186.0/24 maxlen: 24
                          2001:df2:9140::/48 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
        Validity
            Not Before: Aug  1 04:51:59 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d7b6f-a84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:58:0c:5f:3c:90:03:3c:f9:1c:02:94:3d:
                    62:e6:0d:3e:d9:f4:61:9b:92:13:32:5b:a0:e9:9c:
                    76:ce:f2:de:0d:c7:a0:32:8c:14:e7:84:93:e8:ca:
                    ae:d4:ba:79:2e:5b:3e:f0:46:3c:98:b7:91:4d:42:
                    7e:02:a3:d8:8b:04:b6:02:74:2b:30:bb:5d:d3:7d:
                    57:39:58:35:0f:2b:6d:17:6b:e6:51:fd:ea:11:83:
                    70:58:aa:90:ef:1a:14:f9:84:66:8a:e5:36:e1:93:
                    e0:cf:6f:b0:7a:a4:5d:cf:1c:37:53:0f:4d:38:7f:
                    2e:05:00:42:08:c0:18:a5:44:d1:50:aa:74:87:46:
                    15:65:b7:80:bd:51:69:aa:ee:9c:7d:57:27:c6:ff:
                    3a:89:8e:33:ce:11:31:fc:74:02:7a:d8:af:25:3f:
                    81:3d:80:f8:b2:8d:ee:8e:ef:c3:aa:43:5a:55:70:
                    02:c5:07:81:1a:9f:f5:61:ca:93:15:fd:3c:6c:6d:
                    db:47:2d:b8:97:1a:73:3d:86:5c:fa:94:30:a2:d8:
                    46:0c:f5:44:ea:65:f4:68:fb:8b:df:7c:55:29:c5:
                    f6:18:81:90:99:c9:0a:c3:8d:77:e4:a8:82:c4:62:
                    91:84:81:83:00:77:eb:d4:fd:e1:dc:be:cb:00:b6:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EA:ED:0D:CF:3C:59:DD:92:E7:09:3D:58:7A:6C:29:73:E6:36:15
            X509v3 Authority Key Identifier:
                keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.186.0/24
                IPv6:
                  2001:df2:9140::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:47:04:d3:c7:d8:29:39:3a:f7:50:6b:d9:4b:b4:cb:c7:
         9c:04:1d:20:69:05:29:04:60:19:d6:e6:0c:ce:a9:75:01:b2:
         08:fb:c6:3a:33:4d:da:d0:9b:be:49:f9:66:42:f0:31:02:64:
         60:3f:d0:db:8d:e8:ef:f4:97:5f:09:91:e8:25:b5:1a:56:37:
         81:d7:44:20:b1:5c:af:7e:58:9c:9b:bb:f0:40:f5:c1:ec:aa:
         80:49:48:0d:9e:74:fa:e5:5f:c8:21:13:a4:f6:ff:41:55:24:
         aa:dc:8c:7d:bb:49:86:b5:a0:d2:fc:c8:ef:aa:1e:57:17:2c:
         82:d0:64:72:a6:d3:a0:14:0d:2b:8c:35:11:78:63:6d:0e:af:
         6f:c2:66:0a:66:bd:55:5c:f7:39:a4:0d:7f:77:16:a5:7b:fd:
         2a:76:20:9c:9a:6b:ed:a0:f0:70:42:c8:78:38:1c:e2:2a:ab:
         b0:4a:ba:6d:55:15:0e:cc:f0:3f:0e:d0:07:b7:b0:35:2d:97:
         97:6f:db:1d:ec:0d:bb:4a:7f:21:70:b1:c6:a3:fc:58:8f:63:
         86:d5:b6:83:11:7c:45:a1:f4:34:d2:a5:46:35:78:96:66:d6:
         96:79:39:25:2e:a7:c8:1f:c0:e6:72:97:ad:17:44:ea:38:69:
         6c:53:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:02 2026 by rpki-client