Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/6E8576BC0F1911F0A007DF16C4F9AE02.roa
File:                     6E8576BC0F1911F0A007DF16C4F9AE02.roa (raw, json)
Hash identifier:          uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=
Subject key identifier:   6C:DA:C3:B0:12:C5:D5:59:8E:43:B9:25:0D:B8:A2:23:77:39:7C:54
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0EF0
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/6E8576BC0F1911F0A007DF16C4F9AE02.roa
Signing time:             Sat 22 Aug 2026 18:34:59 +0000
ROA not before:           Sat 22 Aug 2026 18:34:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     32135
IP address blocks:        103.141.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3824 (0xef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Aug 22 18:34:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a89ebd3-adfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:86:da:1f:25:82:21:f1:ff:01:59:3f:72:
                    a5:39:68:28:cd:18:e7:6b:0a:6c:9c:d7:42:54:c2:
                    63:dc:d6:9f:e1:67:32:6c:9a:a5:bb:12:6c:3c:33:
                    16:73:40:5f:c5:f5:ce:41:11:de:87:91:33:8a:66:
                    1f:1c:42:53:45:b1:ff:80:71:f9:df:0f:a2:89:c0:
                    2a:a1:d6:8d:29:8b:82:d1:26:de:69:bb:dc:37:62:
                    d7:7c:5f:ee:8b:f0:d3:f4:7b:3a:94:76:c3:f4:7b:
                    af:c0:f8:dd:c9:8d:af:31:8e:7c:3c:7c:e2:b1:18:
                    16:7b:af:ac:85:2c:c0:31:91:21:c7:b1:72:49:49:
                    54:78:f3:c1:ed:c0:56:72:98:d4:7a:fa:51:a5:a2:
                    63:db:37:06:f5:60:7d:fa:0c:34:95:83:b5:c1:c9:
                    ba:08:9e:c0:75:bf:9a:39:99:68:48:c5:5f:73:e6:
                    9d:9c:6c:df:cd:a3:5d:87:ed:23:41:14:04:fb:27:
                    a1:9c:82:68:96:2c:6d:70:62:3d:10:ce:c8:b2:33:
                    6f:4f:d4:7b:8f:35:ce:3f:68:30:ad:58:5b:eb:41:
                    7d:ed:47:9d:1d:bf:23:90:fc:df:3f:0c:01:b8:c6:
                    45:82:bf:c3:f8:b8:56:9f:18:7d:75:af:ca:a6:86:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:C3:B0:12:C5:D5:59:8E:43:B9:25:0D:B8:A2:23:77:39:7C:54
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/6E8576BC0F1911F0A007DF16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:41:81:ae:32:e9:b1:6b:a8:72:32:45:1c:dc:76:8a:6f:
         06:ed:ef:cb:7d:65:31:f2:ba:11:d4:33:e6:7b:9f:22:2b:26:
         12:31:e7:b8:20:6b:3c:af:0e:11:76:3d:b0:2a:bd:9e:30:ce:
         f6:28:52:ba:7c:b8:94:32:45:f2:90:51:a2:83:39:de:aa:e8:
         1a:42:b2:ca:af:89:e5:45:1b:b4:6b:6b:be:9a:62:e5:4e:70:
         59:9b:cd:ec:27:bf:2b:32:61:34:a1:5b:87:ff:ee:8b:5d:5f:
         fd:99:ee:38:72:a5:d0:7d:54:25:75:87:c2:ae:43:14:93:c0:
         35:09:f4:8a:47:03:46:ed:b2:f0:25:9d:1e:91:a1:bf:42:a8:
         84:a0:21:a3:f9:b7:8b:31:17:1d:0a:ab:d2:db:bb:16:bf:2c:
         cd:ba:51:7b:67:57:95:62:6c:ed:e9:a6:b0:e8:3f:00:97:20:
         89:52:80:bd:b2:e8:c9:b8:52:10:93:64:2b:9a:e7:7c:da:e1:
         91:fa:de:5e:98:fc:ac:75:2c:d8:4e:98:8a:3d:c4:fb:c9:91:
         1b:d0:f9:d6:e6:af:22:56:f2:bd:36:97:f6:c5:47:63:3b:5e:
         8c:9a:33:b8:86:7c:b2:1b:60:fa:e7:2a:22:eb:e0:ba:d9:b2:
         92:ee:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:42 2026 by rpki-client