Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa
File:                     AB6EF82E29BC11F09DD00E61C4F9AE02.roa (raw, json)
Hash identifier:          tl+P6UWSYBP4ymWt6CQEC3KP4155KYms4aVdtzvc8XE=
Subject key identifier:   6B:DF:7D:B4:33:9D:F0:6C:35:BE:A8:09:9C:9D:38:FA:8B:E5:50:CF
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       0279
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa
Signing time:             Sat 15 Aug 2026 02:51:40 +0000
ROA not before:           Sat 15 Aug 2026 02:51:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     23470
IP address blocks:        103.193.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl
                          rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323, serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: Aug 15 02:51:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a7fd43c-bb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:f7:68:68:70:42:72:6e:b0:ea:54:d1:0e:
                    68:ad:d0:9b:b1:5f:09:23:ad:d8:a6:4b:d0:35:5b:
                    96:b7:a2:d5:48:fc:e2:85:bf:c3:5c:da:73:c1:7d:
                    2b:7a:5c:b3:9a:28:89:1d:ef:b8:a4:cd:c4:ef:06:
                    5f:cd:b8:0b:80:75:40:f7:ec:22:b1:20:90:f7:e6:
                    87:d4:c6:a2:77:74:18:6c:eb:71:b5:fb:7b:9d:46:
                    ae:f5:4a:8a:d4:49:39:66:c0:a4:47:6d:af:f9:3c:
                    82:07:df:e9:5c:92:c1:e2:2a:80:cd:05:ce:a8:8e:
                    e7:07:9e:07:3a:89:40:74:fe:15:97:2b:0b:5c:01:
                    0b:87:15:07:d7:f0:51:b6:d0:e3:0b:2a:df:59:22:
                    ea:a7:d1:b1:7c:c7:41:36:13:f4:c8:79:a5:5d:83:
                    b7:cb:de:07:29:39:c9:f6:1f:6a:a7:82:34:44:34:
                    e0:54:00:83:b8:d0:53:c3:01:ba:fb:1c:a8:c5:52:
                    10:15:da:42:ba:3f:64:24:55:8e:94:b0:f2:40:dd:
                    50:20:f1:0b:96:0c:bc:7b:a0:33:61:d6:af:79:92:
                    73:46:06:6c:a4:44:f0:5f:84:6f:fb:d6:e9:d9:70:
                    98:c6:54:e4:1b:32:62:5c:20:9b:12:d7:16:86:88:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DF:7D:B4:33:9D:F0:6C:35:BE:A8:09:9C:9D:38:FA:8B:E5:50:CF
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:48:63:3b:0e:33:4d:8c:0d:75:08:cd:b9:72:22:5c:cc:ec:
         03:a8:8d:66:4d:70:22:e4:6a:f6:d8:09:16:16:52:83:04:bd:
         65:78:c3:0f:cb:b1:fe:98:81:4c:53:b3:2e:20:bd:b6:a3:e5:
         de:76:6e:55:ac:24:77:41:78:07:46:ae:e5:3b:23:55:af:08:
         13:a9:13:04:cc:10:82:ab:47:4c:6d:19:1d:d8:11:0f:ff:a0:
         b4:24:30:3e:4a:6d:7d:bb:cb:2a:17:92:df:93:c6:7f:37:3d:
         ed:ed:bf:ae:58:3b:73:56:32:42:c8:a8:32:55:12:a7:9f:4d:
         c5:04:2e:6c:12:8e:3a:bb:aa:25:3a:b9:8d:b0:5b:66:20:2d:
         71:67:c6:92:6e:f2:d3:ff:dd:ad:ca:97:8c:e7:f5:5f:3d:c2:
         43:95:d6:9e:5d:ef:42:34:70:af:7c:1b:d7:54:78:37:07:90:
         e6:c8:a7:c6:83:12:62:24:c3:52:9d:65:54:29:24:2b:d1:6a:
         ce:b6:90:21:a3:7a:f1:44:23:ef:67:d6:61:47:f9:c1:66:03:
         6e:92:0f:42:42:b0:16:11:fa:01:81:b3:93:0d:ae:0f:0e:90:
         e9:10:d8:35:72:09:e5:c9:21:50:c3:80:c9:f4:64:70:91:10:
         f2:4f:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 14:52:57 2026 by rpki-client