Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/B23294C079DB11F191EADDAD63A30FBC.roa
File:                     B23294C079DB11F191EADDAD63A30FBC.roa (raw, json)
Hash identifier:          SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=
Subject key identifier:   E5:14:1E:1C:2E:E4:96:76:A5:6E:CB:F2:7C:1D:90:4E:8A:7F:2A:BA
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0C19
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/B23294C079DB11F191EADDAD63A30FBC.roa
Signing time:             Tue 07 Jul 2026 08:13:12 +0000
ROA not before:           Tue 07 Jul 2026 08:13:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.6.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 08:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3097 (0xc19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Jul  7 08:13:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a4cb518-472f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:fa:24:21:52:9e:de:b8:00:e0:4b:9d:3c:
                    c3:3c:69:f0:26:4e:8f:c4:b9:28:77:51:a5:17:9a:
                    05:e3:db:47:8b:54:c9:07:eb:d9:5d:7f:17:75:97:
                    60:cd:1e:8e:b7:89:c3:fb:79:e6:cb:5a:a2:99:cd:
                    9a:2c:d0:cd:c6:d6:e1:00:1d:88:c3:d0:51:08:90:
                    82:8a:fe:56:10:cb:d6:63:ad:c3:66:97:d6:8a:f0:
                    41:a3:39:3f:62:70:72:57:06:89:c2:2b:43:62:ff:
                    49:a9:60:3f:eb:d9:e3:94:79:0f:7a:61:38:71:f2:
                    a5:76:b4:23:da:36:e4:01:36:f5:af:7d:13:db:a3:
                    8c:33:ac:b7:6a:c3:46:29:8c:0d:9b:9d:d9:8e:9a:
                    e1:e9:7b:c1:93:ad:9b:03:ec:6b:bd:2a:cd:0d:bc:
                    17:fa:3a:f7:18:a6:70:ce:a6:21:18:3d:75:8b:81:
                    a7:78:18:2c:3e:00:8c:5e:4a:c8:fb:0f:a5:ac:1c:
                    0a:71:82:d7:2b:9b:85:a3:75:45:51:3c:c3:f7:ac:
                    62:fa:a3:6d:a1:9d:ae:bd:3b:2f:07:46:03:90:a4:
                    46:47:a2:d8:99:b5:1d:f0:91:d8:be:49:31:b6:2e:
                    34:b5:a4:5c:89:78:11:4c:9e:50:f7:8d:62:b1:4f:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:14:1E:1C:2E:E4:96:76:A5:6E:CB:F2:7C:1D:90:4E:8A:7F:2A:BA
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/B23294C079DB11F191EADDAD63A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:23:b1:a0:6b:95:30:13:6f:f6:b9:01:5a:5f:53:81:ff:c9:
         89:eb:cc:f4:b8:52:84:0d:c4:be:8d:d8:c6:9c:94:5c:45:31:
         94:b9:0f:1a:2a:73:b7:d3:24:93:70:e1:8c:f5:ee:9a:5f:a9:
         e7:66:b8:08:9c:1e:d5:21:8e:dd:8b:25:47:61:a9:7e:77:4d:
         28:d2:63:54:d8:c1:1c:8f:9c:52:47:15:f6:59:fd:69:0a:92:
         e7:cf:72:42:be:11:59:61:ea:ec:e1:74:69:68:1a:cb:d8:fa:
         4f:09:f3:f2:09:0d:81:ec:bb:65:92:42:7b:c5:93:af:b1:70:
         5c:aa:aa:fa:7b:ca:5b:6e:b5:d1:a1:c0:08:c6:29:f0:7e:72:
         d6:59:81:0f:21:ec:47:63:9c:a0:23:b0:da:2d:f1:00:0f:24:
         d8:36:4c:50:0f:30:e0:31:3e:1c:9e:6a:38:ce:74:4a:cd:dd:
         10:97:7f:b0:47:5d:c5:b8:d7:02:af:f1:79:26:54:ed:9b:6a:
         c5:88:8a:b9:19:cd:4c:2c:ba:7d:7f:21:0b:04:aa:59:dd:59:
         8a:b2:a1:f6:fe:44:7a:03:bc:17:69:68:58:4a:c2:cd:d3:de:
         c5:92:59:05:cd:41:ea:35:3c:c9:03:6a:02:c1:b0:f3:a1:63:
         0a:a0:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:09:59 2026 by rpki-client