Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/015076D8661011F1AB7222E09847A888.roa
File:                     015076D8661011F1AB7222E09847A888.roa (raw, json)
Hash identifier:          mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=
Subject key identifier:   FE:55:E8:1B:AE:3A:FB:32:D6:7F:0A:83:CB:D8:7B:C5:B8:8C:D2:93
Certificate issuer:       /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial:       0128
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/015076D8661011F1AB7222E09847A888.roa
Signing time:             Mon 29 Jun 2026 09:28:14 +0000
ROA not before:           Mon 29 Jun 2026 09:28:14 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        103.56.128.0/24 maxlen: 24
                          103.56.129.0/24 maxlen: 24
                          103.56.130.0/24 maxlen: 24
                          103.56.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
                          rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
        Validity
            Not Before: Jun 29 09:28:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a423aad-ae17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c6:ec:1a:9b:3a:50:64:59:83:4b:27:29:7d:
                    d3:b8:f4:f3:a7:f5:cd:25:8e:19:ce:07:91:32:da:
                    43:4f:86:88:43:52:d0:6c:70:3b:ae:1c:ea:43:d9:
                    ab:47:e2:2a:8a:b3:78:29:fe:3a:b2:af:9e:4a:11:
                    c5:23:7d:0f:40:ba:80:70:69:4c:2b:f7:18:90:c0:
                    3f:9d:3a:28:29:9a:03:9a:95:1d:fa:97:44:7f:a2:
                    6f:b5:57:ce:6e:e0:cb:1f:84:02:f4:f1:96:46:60:
                    65:00:13:5d:f6:77:ee:3d:4d:02:29:f5:85:82:01:
                    0f:dc:4b:dd:91:12:1a:54:48:d2:87:b7:b2:b9:cb:
                    e9:f1:3a:b3:df:4e:62:98:1b:23:b5:ea:f4:d8:2a:
                    3e:d5:a0:41:6e:9e:00:83:0a:b5:0a:8e:29:62:d2:
                    a6:04:be:4e:0b:63:02:b3:5b:ac:2c:c2:a0:87:20:
                    71:82:aa:e1:b7:fd:06:8c:12:5f:83:21:e3:23:a9:
                    8b:a7:e7:37:ad:c8:50:82:b7:db:57:ec:ef:36:3b:
                    6c:bf:88:60:16:b1:cf:e8:9f:28:32:37:10:e5:78:
                    1a:71:e1:e3:6e:91:36:03:cf:b9:35:3f:7b:05:d2:
                    61:53:d8:e6:c2:82:b4:da:e6:63:22:29:11:ec:02:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:E8:1B:AE:3A:FB:32:D6:7F:0A:83:CB:D8:7B:C5:B8:8C:D2:93
            X509v3 Authority Key Identifier:
                keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/015076D8661011F1AB7222E09847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:5a:f4:4d:1d:37:54:79:7f:d1:8a:3f:69:51:a8:5b:45:
         f3:db:fb:49:a4:04:67:3d:5c:48:e6:13:ac:c3:e6:e7:2e:17:
         ae:22:62:c7:c9:14:39:73:28:24:9e:11:d3:52:e4:e9:ab:b0:
         63:21:e6:cb:8a:ef:22:45:76:14:a6:f4:4c:07:69:3b:7c:8f:
         b6:26:93:2e:92:8d:08:de:de:ff:cb:d5:1a:44:78:1f:d1:91:
         5c:3f:d2:9c:83:2a:b1:3d:6e:c5:4c:6b:5e:20:52:2d:36:34:
         b8:f2:60:34:91:fc:32:f3:25:bd:df:58:b9:e2:be:6d:e2:a4:
         2d:29:aa:49:65:f4:de:7c:6f:f8:12:56:81:db:a4:6c:b4:25:
         ae:88:d0:7b:44:c0:4a:7d:9d:27:33:a1:37:08:5b:ab:e3:8a:
         dd:7e:a5:c2:2e:b6:e4:f9:3e:79:cf:7b:9d:cf:22:b5:cf:b9:
         d2:26:d1:18:50:8f:3a:95:7b:dc:a4:b4:4c:00:4b:c0:0f:8d:
         b8:73:27:5a:d0:a6:46:2f:fc:37:98:c6:fa:54:93:81:34:86:
         13:bc:12:28:b0:56:02:19:88:04:4f:ab:e1:fc:b5:4a:6c:76:
         5c:b7:25:cb:42:da:4e:d9:0f:63:75:b9:92:5e:33:9d:db:59:
         b8:a5:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:55 2026 by rpki-client