Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa
File:                     C6F2B810858711F1BFD2CAA18FA30FBC.roa (raw, json)
Hash identifier:          ZMTrBfsMxmzIzO9B7U8qM9itshNtWwyMLZ+DyDQjh0o=
Subject key identifier:   13:64:A3:5E:D7:AD:F6:46:3A:06:A0:D8:E7:FD:EA:23:42:23:D9:F6
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       0219
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa
Signing time:             Thu 03 Sep 2026 03:52:49 +0000
ROA not before:           Thu 03 Sep 2026 03:52:49 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.84.0/24 maxlen: 24
                          103.142.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29
        Validity
            Not Before: Sep  3 03:52:49 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98ef11-cb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:10:52:ff:c9:88:83:5e:30:31:46:e8:f7:
                    4d:54:96:64:c3:8a:78:ae:a0:65:75:81:2e:d3:f0:
                    0f:cb:3f:69:35:af:97:fa:dd:45:55:64:e5:b0:67:
                    0c:84:05:13:07:6f:a5:b0:22:cd:9d:f0:b5:33:c7:
                    b8:a9:e8:08:13:a9:85:b3:5b:38:7f:78:89:12:b2:
                    5c:66:39:51:71:8d:26:a8:31:b3:5c:93:51:14:7f:
                    58:95:06:a1:4c:86:8a:e6:b9:6b:fb:71:43:56:bd:
                    ec:53:58:8e:82:2b:32:f5:25:42:fb:93:0b:4f:5a:
                    0e:6d:bf:4d:cc:df:e3:fb:db:17:cd:f1:13:5f:ad:
                    7c:a4:6d:48:1a:c6:bd:72:51:d5:7b:bf:7e:57:06:
                    bf:ef:63:74:43:f1:bb:6c:30:f6:e3:d9:6a:00:b1:
                    de:a3:31:29:68:ad:b1:f9:5c:db:46:61:99:5e:4a:
                    74:cc:03:bd:f0:dd:a2:30:d4:5a:d9:a0:aa:5d:40:
                    9e:69:54:09:2c:aa:32:03:37:d5:8f:e1:ea:f2:b5:
                    ba:3c:c6:5c:5c:88:79:27:f7:bd:dc:20:26:ca:41:
                    c2:e7:7a:f3:e5:08:01:91:7a:85:16:fd:3d:d3:bb:
                    42:ea:24:4f:8d:70:21:d4:16:97:00:da:11:6a:8a:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:64:A3:5E:D7:AD:F6:46:3A:06:A0:D8:E7:FD:EA:23:42:23:D9:F6
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/C6F2B810858711F1BFD2CAA18FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:bd:c0:bc:ed:76:3b:e3:e7:50:b8:02:c6:b2:40:83:91:
         43:2b:a2:b7:c4:4f:b4:22:88:de:54:9d:94:59:de:77:18:86:
         96:35:0b:6f:e6:41:9f:f3:0d:e7:42:90:a2:1d:13:af:4a:45:
         e1:a9:f2:a8:4d:67:54:5c:9d:d2:0f:0e:0f:14:24:b9:43:27:
         5a:fd:2a:0a:ae:ca:b4:d3:51:08:fc:31:d0:4d:62:1c:2b:8e:
         45:c7:1d:ac:ce:db:85:fa:a0:24:78:d5:60:f8:e7:70:bf:fc:
         b2:33:2a:b8:44:c7:9b:8e:55:ad:a8:5c:cc:d9:28:37:52:df:
         f5:d7:5e:cd:62:c5:8f:b3:e2:af:a5:34:37:67:4a:11:a3:d9:
         2c:df:79:dd:25:69:a5:56:67:af:5e:7d:68:e1:33:8d:68:f3:
         a7:5f:16:bd:18:09:d8:97:05:83:06:7a:6a:d3:5c:b2:03:bc:
         95:94:6b:d2:d7:80:60:fb:65:27:e4:51:50:93:c2:83:d7:e1:
         12:d3:10:4a:28:28:a6:a5:df:3c:66:4b:1e:0d:18:75:a0:b4:
         f7:25:4e:4d:61:10:2a:e6:64:aa:34:5f:55:c4:95:7a:37:af:
         d1:61:93:f4:80:28:29:c3:18:18:2d:67:79:c8:51:1f:83:b8:
         15:16:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 05:32:24 2026 by rpki-client