Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa
File:                     B8F865A2147B11E7B5BEC457C4F9AE02.roa (raw, json)
Hash identifier:          L7DWBL32H6f/RwujbTDFVJWqhVPyJvTq/sa1OY01Oko=
Subject key identifier:   AF:C8:0C:0E:09:1B:C5:53:40:97:59:8B:4D:2F:49:E1:4B:6F:60:5E
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1C29
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 16:19:38 +0000
ROA not before:           Thu 30 Apr 2026 16:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18172
IP address blocks:        103.87.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7209 (0x1c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: Apr 30 16:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3811a-8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:ad:6c:1a:20:6f:ff:a2:69:39:80:61:63:
                    a9:9b:5a:50:a7:b1:e8:00:6d:3d:33:a8:53:d7:54:
                    29:c0:38:d5:98:9a:be:f9:b4:d6:a5:9e:50:3d:25:
                    ce:d0:c1:54:fb:f4:c9:11:d1:d5:b3:02:11:44:26:
                    99:2b:4c:c1:f5:38:47:0b:b4:03:a9:b2:8d:15:2b:
                    e2:1b:43:bc:d0:8d:c1:1c:ed:a9:09:71:a6:ef:00:
                    0e:99:d2:89:bb:ad:38:c7:41:70:e9:45:8a:ce:f9:
                    ac:76:02:8d:d9:e6:bc:69:20:62:b9:26:7d:0e:27:
                    88:63:26:1f:b6:38:47:74:ae:ae:96:c0:4c:dd:f0:
                    8b:d7:b2:74:94:8c:7e:ef:f5:66:9b:79:ef:9b:fd:
                    14:b7:28:37:bc:19:e4:ac:44:73:d4:99:ca:a8:1b:
                    0d:f7:ae:44:67:15:82:46:f4:7d:9f:d5:46:7d:e5:
                    4f:39:13:65:0c:de:b6:aa:77:e9:84:5a:cd:04:14:
                    e7:cd:a0:e3:06:c1:29:ce:b5:1f:7a:c7:b1:44:92:
                    f0:50:0c:46:e0:f8:75:f7:30:71:90:90:08:7b:01:
                    14:76:fa:9e:d5:5b:9d:6e:41:cc:36:42:5d:7e:00:
                    84:92:b6:f2:48:54:73:e1:9f:8c:98:ca:4a:f8:68:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:0C:0E:09:1B:C5:53:40:97:59:8B:4D:2F:49:E1:4B:6F:60:5E
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:65:5d:2d:f6:45:86:63:5b:c8:5d:14:3b:e6:e7:e4:05:e0:
         37:0f:12:c2:24:3b:14:ec:cb:90:c4:b4:18:6c:2d:bc:f0:d7:
         c9:88:7b:e0:22:76:d7:18:6a:58:9a:32:fb:30:69:8f:4a:af:
         67:7b:50:85:52:1a:14:ae:81:b0:15:83:5b:fe:e3:5c:12:7e:
         b1:cc:a6:66:b7:49:a6:f3:e1:dc:7d:65:e5:3d:dd:cd:21:05:
         16:22:e5:32:36:44:76:d5:44:0c:a2:41:69:df:f3:06:8c:3b:
         c9:9a:5c:4a:05:42:88:d9:38:cc:b3:88:28:ff:56:93:fb:b3:
         8d:bf:4a:64:af:c5:71:dd:d1:c8:40:b4:ee:7b:b4:06:04:af:
         6c:ea:8b:13:de:e7:b1:53:19:b4:e8:25:58:69:f2:96:b3:44:
         00:e1:a6:51:71:2b:3c:07:2f:d4:72:72:57:20:82:c1:d7:ad:
         f9:65:98:af:ad:c1:b3:ed:16:0d:28:b8:d6:df:72:d6:ba:16:
         d7:af:18:a1:0b:51:37:67:ae:5d:b5:8f:cc:2b:0e:c2:f1:36:
         48:5f:d4:9c:3a:b6:0b:f7:b9:73:3a:20:66:c6:fb:1e:c4:51:
         2e:4c:ef:ed:d9:14:3a:8f:59:70:9d:e9:02:b0:4c:6e:9c:17:
         b0:5f:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:05 2026 by rpki-client