Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C412618E8F5211F1B6983DE74611F970.roa
File:                     C412618E8F5211F1B6983DE74611F970.roa (raw, json)
Hash identifier:          udVxj7Kv9QzqON/2o72zWPCyyC8DoSrlCIA9/M2w4Xw=
Subject key identifier:   61:BB:D0:42:5C:6E:E6:DF:F1:75:4D:EA:F5:18:1C:82:12:E3:C3:A1
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       14B3
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C412618E8F5211F1B6983DE74611F970.roa
Signing time:             Mon 03 Aug 2026 15:48:27 +0000
ROA not before:           Mon 03 Aug 2026 15:48:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     202036
IP address blocks:        103.129.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 16:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5299 (0x14b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Aug  3 15:48:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a70b84a-9374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:00:e9:40:e0:07:b4:49:8d:4c:bb:21:b3:
                    f4:b6:82:17:6e:6f:c5:24:12:f7:6e:b9:ee:65:f9:
                    8f:04:26:37:33:ef:26:64:d2:57:2d:21:6c:65:32:
                    ce:7f:54:d3:fe:50:63:c0:01:34:6f:74:d6:eb:f8:
                    e8:14:9c:56:d5:8a:16:42:7b:3e:78:49:2d:7d:eb:
                    4c:4b:37:87:14:77:c7:db:3d:03:6a:08:72:85:a8:
                    c2:cc:d8:01:e9:cc:ab:14:5b:82:b8:a6:fd:2d:34:
                    0f:f6:98:b0:8b:34:50:fb:6e:c9:80:e2:74:96:a7:
                    36:19:87:b3:69:2e:af:fe:e3:3f:65:ac:cf:70:ac:
                    ca:28:8a:7d:86:e7:92:c1:a5:97:2f:3d:a6:63:f0:
                    b6:ad:35:fa:21:d1:0f:f6:51:e7:c0:7f:d3:76:ea:
                    0e:89:29:23:c9:c0:47:e3:88:ef:33:86:8b:ff:17:
                    50:2c:a7:4c:cc:1b:9d:78:e8:93:c2:ee:f0:0d:4d:
                    47:42:e3:58:d5:8d:e6:7b:3c:70:7b:dc:f6:79:4d:
                    07:24:62:0e:c1:a6:81:bf:d6:46:4e:3d:0e:6f:df:
                    75:a9:8f:5e:66:3f:d8:5c:f3:03:26:7e:9e:00:f2:
                    1d:aa:d0:dd:86:45:3c:0b:d9:51:04:52:49:d3:a0:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BB:D0:42:5C:6E:E6:DF:F1:75:4D:EA:F5:18:1C:82:12:E3:C3:A1
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C412618E8F5211F1B6983DE74611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:4b:d9:00:90:2d:ee:a1:7b:32:17:56:bb:08:7c:06:fb:
         0d:8c:62:46:d2:22:02:79:2b:38:3d:a0:ce:d0:fc:9e:fd:05:
         8d:81:f1:2d:4d:cf:a9:bd:f7:72:6d:61:ba:b5:3d:88:56:95:
         63:69:78:95:fc:5c:8f:6f:dc:4f:c0:1e:b3:fc:b6:b8:2a:0c:
         ac:5b:af:98:b9:3c:85:03:e8:3f:6e:88:9c:6f:0a:52:ba:b3:
         67:51:61:f5:b5:b6:2f:9a:3c:0d:c5:62:31:a4:4b:dd:b8:96:
         96:72:c7:3c:de:b5:e4:b7:c2:50:2f:b3:f7:12:84:cc:87:ab:
         56:50:6b:c1:f3:db:27:28:bb:bb:dd:80:7e:4f:84:0b:2d:62:
         da:a9:e9:96:a3:c4:f3:23:bc:9e:a1:f3:6b:f0:82:e2:e1:60:
         04:08:95:d4:d9:f0:a6:f3:c8:cb:3d:d8:f6:65:ab:bb:4f:bd:
         52:d2:da:a5:72:04:56:56:53:5d:a5:cd:c5:72:4b:d4:5e:47:
         6d:a9:f7:45:cf:0d:18:b4:f3:5e:55:61:28:7e:5a:94:a7:9c:
         b1:4b:6c:ea:00:23:78:f6:0e:0d:23:26:be:39:63:fd:a5:d8:
         64:d8:4d:eb:95:5b:6c:3c:17:97:3d:14:b9:83:cd:45:3e:eb:
         f6:2a:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 22:44:07 2026 by rpki-client