Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa
File:                     C9DBA6A666A211EE8C285556C4F9AE02.roa (raw, json)
Hash identifier:          eOVUWcW7XO+xy/FgYA4cEe+jkA/BOiBLhAMUUzHk7og=
Subject key identifier:   A6:45:BD:E2:90:A5:63:9C:67:56:70:A2:BF:74:10:7F:8E:9A:C6:C8
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       0289
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 04:29:08 +0000
ROA not before:           Wed 01 Jul 2026 04:29:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        103.92.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jul  1 04:29:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a449794-5829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:91:a1:83:09:e3:bc:ba:7c:e8:4a:35:ef:
                    84:51:22:53:63:b9:58:a6:cc:cd:a6:53:f3:55:f1:
                    b7:56:95:88:12:e5:01:4a:d9:f4:02:19:f8:13:bf:
                    bb:2d:39:73:8e:a0:1d:55:57:60:1f:db:53:a6:51:
                    6d:74:be:9d:38:21:69:6f:09:92:ff:32:83:2e:35:
                    fb:1f:1d:8c:28:0d:6c:db:e5:a8:34:34:ba:25:87:
                    3e:19:10:03:18:30:2c:a9:d1:79:73:11:0a:1d:6d:
                    ab:d8:80:b2:cf:37:55:ed:a2:6f:ab:80:d8:b7:8b:
                    49:f1:b0:53:f8:32:72:95:00:60:41:5f:cb:99:ed:
                    bf:36:39:c7:97:f5:b4:f3:21:6e:28:1f:ee:bd:f2:
                    f3:48:98:64:54:af:ce:34:51:ac:6a:b1:f7:4f:36:
                    d0:03:d5:c1:ac:9f:44:60:0b:9b:1f:d9:17:df:31:
                    7e:e0:ac:a6:28:e4:92:ad:f6:e8:2d:de:b6:b5:2d:
                    a1:20:76:e3:a6:26:f4:f4:93:99:11:6c:ed:14:f5:
                    d6:64:7f:16:84:fb:2e:a8:34:c0:49:ba:0c:f7:2e:
                    f6:67:6e:bb:c1:1f:df:b0:27:a1:f3:9b:85:1f:d7:
                    6a:11:bb:b6:6c:26:32:73:83:cd:3a:36:e1:fd:ac:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:BD:E2:90:A5:63:9C:67:56:70:A2:BF:74:10:7F:8E:9A:C6:C8
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:4f:94:a6:5b:35:4c:26:2f:98:34:fd:01:95:83:b3:1f:
         5e:8c:34:81:91:b1:1c:0e:e0:ab:a0:2b:69:4a:7a:4d:fa:11:
         07:16:44:c2:bd:19:00:4d:ed:05:8a:72:e6:bd:a1:1a:6d:8c:
         a0:f2:14:40:09:8e:60:2b:dd:a6:e1:11:c2:dc:eb:47:85:29:
         32:19:26:1a:4c:6c:55:2f:54:e7:ba:ec:0f:28:c9:d5:33:9c:
         2a:9d:cf:94:14:ee:9e:9d:31:2f:85:ee:71:b6:5c:81:a9:7f:
         b4:ed:5d:08:48:37:32:a4:12:f4:e9:71:00:2c:ea:39:e1:1c:
         67:6b:e8:37:82:8a:22:e1:4f:cc:ab:12:5e:ef:b2:8a:fc:6a:
         c8:31:28:57:97:3e:b8:9f:92:04:22:41:7f:8d:23:2e:2a:2c:
         1e:89:49:4c:66:21:42:44:8a:14:a0:3c:53:d4:65:d6:dc:e7:
         e9:7c:e8:cc:0d:b4:4a:f3:26:42:8c:2d:b6:84:ad:21:41:21:
         d7:94:d3:ee:c7:1b:df:de:0a:fe:18:8e:ad:c7:40:8d:b1:49:
         db:87:28:a2:4f:95:f7:5c:d2:4c:c3:82:ff:93:de:c5:92:f2:
         44:2c:6d:e4:43:79:d2:e7:c5:9d:74:65:51:98:58:7c:54:8b:
         39:1b:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:16:54 2026 by rpki-client