Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
File:                     9CB879ECC7B511ED9411183FC4F9AE02.roa (raw, json)
Hash identifier:          LIdhf9ay4v6pNkqEXLVs+I0RR4BOPrXO+QQVxcMgeeE=
Subject key identifier:   58:18:F9:BC:8E:78:F0:09:E4:A0:1E:3D:F9:E2:AE:A5:FA:EC:B6:18
Certificate issuer:       /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial:       0274
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
Signing time:             Sat 27 Jun 2026 03:32:47 +0000
ROA not before:           Sat 27 Jun 2026 03:32:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134346
IP address blocks:        103.60.252.0/24 maxlen: 24
                          103.60.253.0/24 maxlen: 24
                          103.60.254.0/24 maxlen: 24
                          103.60.255.0/24 maxlen: 24
                          203.57.34.0/24 maxlen: 24
                          203.57.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
                          rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
        Validity
            Not Before: Jun 27 03:32:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3f445f-04bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:f1:34:1b:b8:ce:7c:8c:79:c9:e8:16:5a:
                    3e:44:7b:54:b4:91:40:a0:e1:4b:02:91:2e:3e:5c:
                    e3:f2:fd:22:06:9c:81:0c:2b:bb:6c:f4:8e:2b:49:
                    c0:cc:ea:e1:78:b9:e3:e7:0e:f4:4f:f4:cb:ed:ba:
                    4b:c7:3e:78:f1:f6:f3:4a:91:41:85:6b:74:79:a8:
                    f9:53:82:e4:68:47:00:a9:26:56:ca:fd:c4:c9:5d:
                    21:bc:88:d9:3b:71:51:ed:28:2f:21:d8:61:2d:dc:
                    fd:1f:f6:30:1b:18:24:df:2a:e2:68:f2:43:13:f7:
                    b4:b9:ac:a9:18:2b:41:87:c6:37:42:56:d3:18:c6:
                    5f:6f:7e:59:74:ee:ff:8d:00:68:81:bc:3e:0e:a4:
                    ee:dd:c8:24:5c:00:8a:50:c4:6f:f9:9b:51:b7:e5:
                    55:bb:3c:3a:42:b0:50:1d:3e:8d:f8:97:8f:52:54:
                    e4:ea:a0:f3:cc:f0:b7:c8:01:87:c3:62:55:08:78:
                    7c:70:c0:45:9e:6a:d4:ab:df:0d:9b:86:94:8f:75:
                    12:63:eb:06:7c:18:b5:be:8f:ab:ab:9a:57:2d:0f:
                    3e:18:e3:40:76:36:d4:cf:df:e2:59:32:ff:c7:1e:
                    c2:da:a6:b6:90:8a:25:83:46:b0:91:1e:a5:cf:1c:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:F9:BC:8E:78:F0:09:E4:A0:1E:3D:F9:E2:AE:A5:FA:EC:B6:18
            X509v3 Authority Key Identifier:
                keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.252.0/22
                  203.57.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:8d:61:0e:12:67:21:23:3c:fb:c1:1c:5c:a0:2f:6f:96:
         fc:2f:20:d3:1a:7e:42:86:66:ea:8e:db:b9:79:b1:52:c5:bd:
         98:5a:4a:8e:85:73:7d:0e:61:90:08:93:fc:dc:4f:37:6b:6c:
         61:0c:e4:d2:50:e4:35:33:5e:b4:77:99:16:b6:35:2f:06:f7:
         be:58:63:d4:ad:84:05:a0:c1:9b:15:8b:d9:59:1a:64:47:26:
         5a:24:59:ae:4b:65:27:73:02:05:82:7d:7c:24:a7:6e:f8:cc:
         6f:f4:fa:6f:35:f0:9a:bf:73:39:fc:bc:77:2a:84:0d:72:f4:
         5a:0a:47:f9:20:88:c2:43:6c:c1:49:2b:a2:7e:7e:8e:b2:55:
         c6:ff:02:89:ae:02:0d:6d:56:ad:c6:9f:f8:04:4d:c1:97:6a:
         5b:dc:ee:35:19:94:b3:60:03:0d:59:2e:d1:b9:47:7e:41:c4:
         90:0e:0e:b2:95:bb:12:b9:43:89:ce:33:d4:b5:5b:0e:56:d5:
         bf:71:a5:b8:d8:45:7a:9a:bd:e4:b7:44:d0:59:65:61:63:22:
         be:e5:c9:39:2b:5b:f1:51:4b:94:8f:47:1f:9b:6e:75:d9:bc:
         37:f2:75:ae:2a:ff:1e:d3:a0:9e:75:2a:5e:fa:6e:b4:53:44:
         a5:88:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:18:02 2026 by rpki-client