Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6DB384A8C57B11F19E205B615A11F970.roa
File:                     6DB384A8C57B11F19E205B615A11F970.roa (raw, json)
Hash identifier:          Gphro3H5lonVKKZaKM1p9bUXGxowRCxyqqubG9UZshs=
Subject key identifier:   42:D5:08:9A:4F:41:23:82:55:CB:4C:19:18:66:E9:D2:30:04:1C:ED
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       11BB
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6DB384A8C57B11F19E205B615A11F970.roa
Signing time:             Sun 11 Oct 2026 13:55:34 +0000
ROA not before:           Sun 11 Oct 2026 13:55:34 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138985
IP address blocks:        103.20.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4539 (0x11bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 11 13:55:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6acb9556-e216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:29:5d:dd:f0:55:22:25:7b:3b:58:8a:c4:
                    e0:bc:e1:04:13:4f:16:4d:82:75:b8:fb:7f:19:f7:
                    19:ef:5c:81:bd:56:66:96:5d:c2:d1:f5:06:4c:cd:
                    95:ea:03:54:23:e7:a1:b1:88:9f:8a:1d:09:6a:a1:
                    60:68:f9:6b:04:5e:8a:f3:70:52:01:eb:52:ee:37:
                    76:c4:32:80:1a:d9:17:2e:09:e5:6a:58:fe:f1:98:
                    9e:e3:23:64:c0:04:c8:dc:02:c9:8f:09:8a:e0:8b:
                    ab:74:b2:84:f7:18:2b:a7:b4:85:b1:c6:fd:03:36:
                    2f:de:79:04:2f:37:7d:92:0c:6d:74:e5:e7:a8:be:
                    e9:ab:cd:07:8a:74:8b:47:56:2a:c3:35:15:c4:d2:
                    06:26:47:5c:79:7c:3e:17:90:bc:87:5c:d3:65:17:
                    d0:70:c3:2e:b7:70:24:42:c5:bd:ad:37:74:42:19:
                    bd:e8:4b:19:b2:ea:bf:bf:ba:72:47:9e:5b:67:b8:
                    df:a1:0b:a8:64:b9:ad:b1:13:f2:16:b5:06:66:69:
                    0b:a1:11:1c:e4:79:e6:e6:4e:71:5d:ba:14:92:d0:
                    0b:b4:0a:8e:9b:71:2b:41:60:e6:8c:18:0c:91:c0:
                    09:7d:62:8e:2a:61:99:b5:b3:42:2c:89:dd:0a:6f:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D5:08:9A:4F:41:23:82:55:CB:4C:19:18:66:E9:D2:30:04:1C:ED
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6DB384A8C57B11F19E205B615A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:78:75:8d:dd:97:46:88:01:a2:7c:19:a8:45:b7:29:f1:
         32:76:52:8e:f6:45:47:cd:a7:ac:2a:6c:69:03:f3:25:10:7d:
         ea:14:f0:ae:f8:b9:66:50:18:0a:72:7b:c5:17:07:7f:5f:00:
         2a:ee:a7:35:8b:40:d0:03:6f:5a:4d:1b:09:95:db:fa:91:7b:
         1b:77:a1:c9:89:ab:77:e2:44:8a:48:7b:88:40:d9:b8:11:9f:
         d4:75:30:ee:e9:cf:dd:2d:c8:42:50:3a:8a:77:20:c9:02:08:
         95:0a:7f:b1:e7:73:68:2c:44:0c:c0:3c:2b:b6:f0:5f:c6:81:
         78:bb:df:88:c5:8d:60:e6:c3:ec:1a:79:9b:ad:f5:cf:7b:f4:
         00:90:61:85:a0:a1:18:43:50:1f:2f:ef:0a:a7:8e:ae:8c:e2:
         48:83:64:36:64:0b:80:d9:67:41:19:70:7b:d2:9f:0a:27:af:
         4a:2f:70:47:20:f1:3b:38:83:ea:d6:f0:3e:43:9b:59:99:a5:
         15:35:d0:6b:74:ce:e2:57:01:73:d1:c6:72:c8:24:4d:68:c8:
         26:39:db:28:57:07:9d:de:79:b7:d1:70:04:3d:e4:a8:9d:b8:
         0b:13:a2:07:31:f1:98:21:1a:ec:1b:9a:29:65:85:bf:b4:f8:
         e6:f4:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:16:44 2026 by rpki-client