Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/FE677A947F3611F1AEABD9D88FA30FBC.roa
File:                     FE677A947F3611F1AEABD9D88FA30FBC.roa (raw, json)
Hash identifier:          xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=
Subject key identifier:   5E:A2:DB:C1:FC:75:28:D5:28:3A:78:A8:4A:55:6D:00:B5:8D:B9:27
Certificate issuer:       /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial:       0CCC
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/FE677A947F3611F1AEABD9D88FA30FBC.roa
Signing time:             Tue 14 Jul 2026 19:19:52 +0000
ROA not before:           Tue 14 Jul 2026 19:19:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     9506
IP address blocks:        103.67.168.0/24 maxlen: 24
                          103.67.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
                          rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
        Validity
            Not Before: Jul 14 19:19:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a568bd8-038d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:e6:7a:d2:c8:7b:01:15:41:e6:cc:70:c0:
                    f0:5a:27:5b:29:04:09:47:2b:ec:f6:a4:b2:48:c7:
                    7e:9e:87:9d:d9:9d:cd:7b:f8:a9:1a:2a:42:16:9b:
                    e2:23:d1:e1:bf:ac:5e:b6:63:fe:57:fd:05:4c:f9:
                    72:11:bc:85:64:2b:0a:c2:b0:80:b1:c8:51:2a:b2:
                    90:2e:73:03:f7:33:75:a0:06:21:3e:06:99:be:90:
                    65:39:15:1f:09:1d:fa:1f:56:a4:c0:0e:9e:d1:11:
                    9a:1e:64:ca:03:a9:2e:89:aa:28:e6:7d:3a:93:65:
                    49:19:12:3e:c4:c0:a5:76:d7:e3:ef:f3:6e:14:a9:
                    6c:10:6a:f6:81:1d:2f:bb:62:91:cb:2e:64:0b:25:
                    79:67:38:91:92:c1:a9:c1:6c:fe:75:9a:9d:ae:05:
                    cb:fe:9a:20:76:75:a5:f6:30:71:4f:d6:3a:1b:47:
                    2c:a5:82:da:96:1f:fa:69:59:25:17:a6:bc:5b:c1:
                    d8:1b:ce:ef:a7:13:6e:2a:1e:e6:5b:57:90:48:ae:
                    5a:e0:7a:cf:43:14:b0:b6:e1:40:49:e3:1d:6d:f5:
                    7c:37:b7:7b:1c:c9:50:4b:93:2f:34:1b:9b:57:5e:
                    e1:56:8a:78:2d:90:5e:43:4a:84:04:17:99:69:07:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:DB:C1:FC:75:28:D5:28:3A:78:A8:4A:55:6D:00:B5:8D:B9:27
            X509v3 Authority Key Identifier:
                keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/FE677A947F3611F1AEABD9D88FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:78:03:f3:ff:dd:90:6f:94:c3:e9:6f:6c:5e:ac:a5:d8:16:
         e6:d8:59:a9:39:73:13:84:b6:91:2d:3b:72:4a:4f:0e:8c:19:
         8d:1f:2b:be:47:d0:c4:b3:37:ac:04:f7:8c:fc:e8:0e:93:e2:
         a1:55:ae:b6:34:4d:5e:6e:ec:b8:6c:76:d6:9b:28:56:37:1e:
         f1:69:71:7b:85:0e:2d:7b:bf:cc:27:5e:5c:01:b7:b8:22:d0:
         79:8b:d4:1b:ec:cf:b4:bb:b7:36:da:fd:9a:20:e8:3d:16:22:
         0f:9a:88:e2:e2:4a:bf:be:21:cc:99:0b:d6:fa:b5:3e:00:ce:
         33:eb:50:4b:15:c3:87:53:ea:6d:dc:0e:2e:dd:00:7e:f0:f9:
         a5:15:52:9d:e9:5a:a7:19:31:17:91:71:51:0c:10:46:89:35:
         f0:73:81:88:4a:8f:d2:81:27:e5:c1:af:a0:6f:a4:6d:32:87:
         f2:d9:96:13:c7:29:0b:5a:98:d9:93:03:e8:7a:cb:91:c3:07:
         1a:48:43:95:a8:0e:4a:de:84:bb:a9:69:bd:bd:9e:8b:9e:3e:
         60:f8:90:33:67:61:a0:5d:26:3d:ec:e7:74:b4:58:59:7a:5b:
         be:7e:d7:21:07:2f:01:c8:ce:f5:4f:cc:fd:5e:ef:a4:95:2f:
         03:19:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:06:26 2026 by rpki-client