Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/B2B63A82700311F1A845E35993A30FBC.roa
File:                     B2B63A82700311F1A845E35993A30FBC.roa (raw, json)
Hash identifier:          GsHylxWmgU2d57aIkeGHod0v/td+O9Y0O73X5akYUUE=
Subject key identifier:   6A:4E:9D:C0:A2:25:27:05:A6:1D:74:24:43:EC:3B:53:18:0F:2A:25
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       0271
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/B2B63A82700311F1A845E35993A30FBC.roa
Signing time:             Wed 24 Jun 2026 19:34:21 +0000
ROA not before:           Wed 24 Jun 2026 19:34:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152176
IP address blocks:        103.121.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Jun 24 19:34:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3c313d-fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:7a:20:76:54:51:58:81:54:73:03:5b:31:
                    78:91:37:d6:a2:29:9e:fd:ee:89:8d:1a:3c:a1:98:
                    14:6f:2a:93:4d:df:66:29:d5:b8:a9:08:0c:56:18:
                    49:48:8e:53:a1:99:0f:28:62:cb:d5:d6:c9:eb:26:
                    e6:0b:55:4c:9f:c0:ae:ac:6b:b8:b6:60:7f:a2:30:
                    75:1d:17:02:08:91:24:b6:a4:22:1f:bb:b0:b3:25:
                    f9:4b:74:d7:4d:b4:ce:ff:56:a0:16:76:7b:e6:09:
                    20:dc:3a:62:26:cc:96:66:c7:3c:e3:d4:34:74:47:
                    64:c8:84:e8:4a:49:10:f9:9e:7a:fb:02:f6:76:9e:
                    ee:ca:db:54:e8:34:52:de:fc:a7:c6:a1:f7:17:7c:
                    76:5e:b9:49:7c:9e:4b:4c:88:d1:d1:38:06:92:f8:
                    35:81:72:3b:21:ec:67:9e:c5:56:00:0b:d2:1e:7d:
                    4f:63:0f:38:30:de:34:7f:a4:40:51:f7:82:42:20:
                    7d:9e:5a:1c:41:a2:3c:6d:7c:c6:45:4d:5f:9d:92:
                    67:f6:a2:c2:58:79:af:94:58:c6:c5:8d:fb:e9:c0:
                    73:3d:9a:5a:95:31:4c:d4:c2:91:8a:ea:61:8b:96:
                    28:32:13:6d:7f:03:79:0d:ba:18:df:dc:12:56:29:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:9D:C0:A2:25:27:05:A6:1D:74:24:43:EC:3B:53:18:0F:2A:25
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/B2B63A82700311F1A845E35993A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:29:c3:da:c0:16:d1:d1:50:11:22:10:11:6e:b3:db:12:
         a1:ea:2b:77:d2:cd:2e:8e:ba:e2:f2:fb:59:f0:a7:c7:a6:bc:
         13:d8:50:ab:7e:fe:21:6b:dd:f1:be:31:5e:c4:45:18:5c:60:
         2a:36:c9:30:35:6b:c0:a4:db:b4:be:61:c9:03:ea:ce:a4:4b:
         fb:0b:48:6e:4a:98:3e:11:0a:1e:d9:94:3d:e2:9e:20:7c:43:
         87:96:fb:ea:4b:31:17:0b:82:ab:a9:eb:4a:37:91:33:ee:7e:
         89:ec:60:f5:44:ad:c4:45:3d:50:b6:77:77:c3:51:d8:fb:bf:
         df:69:ee:86:aa:14:c2:5a:95:b1:fe:53:09:88:e6:2d:04:18:
         2f:4e:0d:5e:1c:3b:b0:6c:58:86:b6:62:16:71:57:aa:25:75:
         b1:a6:95:09:8a:71:78:51:ab:09:4c:e5:2f:38:46:9d:5e:1f:
         fa:c7:70:dd:c8:71:02:e4:a6:12:dc:51:a2:1c:ff:a9:48:2e:
         c0:9f:a9:37:c9:f9:fd:65:c8:2b:56:fa:43:a9:9c:7b:6d:6b:
         8d:ed:5d:31:84:6f:f2:6a:08:41:e9:0f:16:10:61:ea:de:ab:
         4e:fd:db:63:0a:de:74:e8:b1:17:84:42:be:35:9c:2f:a4:b0:
         67:2e:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:09:10 2026 by rpki-client