Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/585DC828A2EB11F1B8CE2B844A11F970.roa
File:                     585DC828A2EB11F1B8CE2B844A11F970.roa (raw, json)
Hash identifier:          YGgsb1w7jArLrmGgXNJ/wg9e0SOlAFlVMyebYaZXBLo=
Subject key identifier:   74:FD:C9:38:3A:07:FB:9D:2D:55:AE:7E:E3:BF:DE:01:33:80:0E:69
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       03CC
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/585DC828A2EB11F1B8CE2B844A11F970.roa
Signing time:             Sat 29 Aug 2026 00:49:49 +0000
ROA not before:           Sat 29 Aug 2026 00:49:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149863
IP address blocks:        103.189.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Aug 29 00:49:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a922cad-b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:d7:ab:dc:ea:2d:18:7c:87:fb:6e:bd:bf:
                    a8:50:bc:ce:15:bc:40:ac:d5:3f:00:f3:fb:f1:e7:
                    de:50:74:b0:9c:53:c1:95:7b:12:d2:79:1c:c2:83:
                    c6:00:6c:a9:05:ff:a9:6a:81:92:4c:9a:d5:57:2a:
                    8b:f3:a5:f2:b2:00:90:1f:60:47:a7:ff:81:3e:6c:
                    45:82:ec:38:31:5b:e3:cd:6c:da:df:ca:7f:5b:46:
                    e9:0f:fc:fa:e7:22:95:ef:23:f8:5e:9e:b5:18:8b:
                    6b:a6:16:d4:e9:0b:dd:fe:7a:a3:b5:5e:ec:81:3d:
                    19:a3:c7:c0:39:bd:18:dd:85:82:b2:c4:af:56:e2:
                    21:e6:71:ff:75:69:30:b9:5a:29:31:07:eb:56:dc:
                    6b:bc:56:ca:52:3b:5b:99:98:b6:99:63:fa:ce:b5:
                    57:61:66:cd:a8:66:1e:a0:c8:e5:67:de:42:57:bb:
                    27:e2:12:96:59:59:0a:5c:34:31:34:62:ca:61:79:
                    4a:04:58:4a:2c:98:9d:f5:87:6a:0a:61:d1:b8:6a:
                    a7:47:75:f3:85:87:e0:1f:8b:01:38:2c:f3:f5:72:
                    1a:7d:d8:b6:9d:95:fa:09:10:49:27:f2:9b:3d:28:
                    2c:01:67:01:9c:d5:1d:73:d9:f6:40:1a:fe:83:ce:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:C9:38:3A:07:FB:9D:2D:55:AE:7E:E3:BF:DE:01:33:80:0E:69
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/585DC828A2EB11F1B8CE2B844A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:cc:d4:b5:7b:7e:0b:87:7b:ab:10:09:f4:c2:6b:96:7f:05:
         00:a6:56:39:65:f4:c9:15:8e:74:c8:0a:8f:61:aa:03:38:21:
         64:56:02:da:4d:ce:bc:33:2b:d8:3a:84:68:77:c4:b8:26:0b:
         ce:41:e4:1d:ea:9a:03:ee:0c:b9:8f:a7:1f:e1:4c:54:dc:b6:
         3d:e4:5b:07:d2:9c:20:cb:8a:17:76:2d:b3:7f:4a:e6:fe:7c:
         60:a3:54:36:31:f6:17:ab:c2:5d:89:88:90:bb:04:02:15:35:
         d6:c4:5b:d0:d4:22:77:ee:1e:a3:4a:1b:1c:52:fa:7e:9f:ab:
         1b:7a:6e:0d:fb:97:97:a1:1d:81:00:24:06:2c:44:bd:a6:cd:
         69:16:5c:82:05:3f:6f:c3:42:c9:ba:c4:86:88:db:90:b7:d5:
         fe:a1:f4:42:ec:72:51:1b:d7:6b:bf:4d:1e:c3:c8:e8:26:4d:
         8f:d5:88:4d:01:4b:74:3d:b8:0e:80:73:be:1d:47:67:ef:04:
         01:7f:4e:07:74:18:de:39:38:98:6c:f3:2c:b7:71:cd:22:97:
         22:fe:29:e3:b0:fd:07:8b:03:07:7e:15:9a:a2:f5:93:98:ca:
         ce:91:25:4c:7d:24:a9:0a:6a:54:26:d7:31:c5:f7:29:64:41:
         1c:fb:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:04:20 2026 by rpki-client