Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa
File:                     2C6BA5E82EB511EFBCC65925C4F9AE02.roa (raw, json)
Hash identifier:          UnpOkcR9u5eKywT+w4rSWhWUjIXGRQvQXM5rtwc0R1E=
Subject key identifier:   EB:23:2F:A2:16:64:78:E4:CC:22:07:2D:50:43:36:A3:4C:83:52:CA
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       01D3
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa
Signing time:             Thu 29 Oct 2026 04:52:19 +0000
ROA not before:           Thu 29 Oct 2026 04:52:19 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     138194
IP address blocks:        103.122.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 04:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Oct 29 04:52:19 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae2d103-64f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:86:00:df:11:f9:cd:3d:a0:7a:7b:4e:2c:
                    f8:f6:82:ce:6b:32:b9:50:bb:74:06:8c:c1:3c:49:
                    35:bc:f1:8f:24:50:58:46:6d:ce:17:29:ba:6d:72:
                    c8:31:03:f2:db:04:87:f6:9c:4e:1f:9f:83:11:ca:
                    1c:bf:e9:36:b0:98:cf:95:06:ca:62:a9:db:e2:0e:
                    94:a3:b9:53:f2:34:91:a8:c5:fb:3c:b9:1f:1c:46:
                    8b:08:f7:30:71:ac:4e:a7:23:b9:27:b6:20:76:34:
                    75:62:62:48:9e:95:50:fe:00:d8:2d:c3:8f:0c:2f:
                    b5:40:40:cb:cb:90:0d:d4:b8:49:a8:39:55:9f:18:
                    3e:bb:cb:23:3b:12:98:27:14:73:a7:c2:35:46:db:
                    42:42:d0:06:78:8a:f6:5d:22:45:b7:e4:53:56:3c:
                    42:8e:93:7b:bb:57:a4:46:78:51:5c:03:c4:d3:d9:
                    68:ac:e1:62:a5:73:db:1d:93:67:86:aa:c3:d9:65:
                    cf:1b:72:04:bc:9f:a8:89:21:de:10:dc:ed:f7:13:
                    d8:36:e6:82:fb:11:51:5d:6a:2e:94:9b:42:57:40:
                    7e:03:f3:b9:4e:fd:05:a4:bd:d9:a1:5a:8f:3e:42:
                    c4:6d:1b:4d:2e:f3:7e:d5:91:d7:ff:70:ef:a8:40:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:2F:A2:16:64:78:E4:CC:22:07:2D:50:43:36:A3:4C:83:52:CA
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:93:e1:ce:29:15:b7:d8:11:d5:f8:09:3a:23:c3:03:e4:82:
         08:3c:7a:fb:3e:a0:de:3a:68:6c:22:73:09:38:17:69:e8:6e:
         2b:30:2d:11:e1:94:95:c6:37:e1:5c:a0:3c:28:87:24:92:59:
         5e:27:b8:37:29:45:32:84:ac:62:7f:4f:07:7f:fd:76:64:01:
         cd:ee:f7:86:ab:88:b7:51:e8:18:d8:37:9f:85:3e:4f:18:d9:
         90:d5:c4:71:4c:82:d5:56:02:5f:0f:3d:b0:79:09:60:b6:1f:
         f7:7d:d4:5e:2f:25:0a:f7:1a:02:bb:58:55:b5:1c:ff:05:57:
         45:22:16:93:04:a7:c3:c1:86:b7:c7:eb:31:bc:76:2f:19:32:
         16:b3:1b:db:58:c1:dc:d2:75:3e:b0:ed:e8:bf:08:56:d9:37:
         83:f2:52:cd:4b:19:0c:05:3b:c5:46:e0:ed:ee:1e:8f:7b:c4:
         a0:66:28:93:3a:27:60:11:f0:b8:f6:88:e7:76:56:b3:f0:5f:
         f5:a1:1f:8c:9e:8e:c0:8d:d2:a7:94:e2:4f:da:ad:f1:44:81:
         58:0f:ff:0a:00:0f:5b:a8:07:98:ac:a7:2c:17:9f:99:ed:91:
         96:06:f3:5b:b5:4c:68:7b:ae:52:0a:88:e5:8c:84:3d:3c:b6:
         db:10:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:30:11 2026 by rpki-client