Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
File:                     6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          BjCuE0rnI+N2dz5vhgDBHwuhCzlvK4bBeW5ZlG6qKCw=
Subject key identifier:   6C:A3:6B:54:2F:4E:CE:28:AE:67:43:CB:DF:9A:23:94:ED:F4:60:04
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BB4
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:24:46 +0000
ROA not before:           Thu 20 Aug 2026 16:24:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58818
IP address blocks:        103.251.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15284 (0x3bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a4e-ad36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:54:cc:b1:30:a0:6e:92:e5:16:39:5c:85:
                    81:58:5d:0d:c8:a6:19:35:5d:fd:fd:fd:f1:e3:63:
                    bf:a6:92:58:eb:21:d5:2a:6c:21:11:89:90:44:b2:
                    be:ec:06:9d:66:25:e3:96:89:61:ee:e5:58:08:81:
                    71:91:6c:69:4d:c5:22:72:49:d9:4b:2d:7d:bd:97:
                    7a:7b:c1:ee:39:21:49:c6:42:75:4a:ca:65:41:e2:
                    8f:19:c3:53:3e:c6:ef:5a:46:11:9e:44:61:ee:40:
                    e0:df:06:23:6f:af:74:cc:8b:81:1a:2b:14:7f:ef:
                    cd:43:01:98:d2:77:f0:71:e4:ce:3d:a7:d6:9a:4d:
                    50:a9:ad:81:f6:88:97:d4:e6:7f:fc:cf:a6:5c:5c:
                    50:4b:28:01:af:fc:1f:f7:1b:f4:ba:73:e1:35:eb:
                    d9:e0:12:25:ac:b5:ce:b6:e2:09:1d:ec:bb:fb:3c:
                    26:ed:79:14:e3:a2:6a:96:84:e3:c8:49:08:b3:c2:
                    97:12:21:5b:74:30:a7:1c:52:f7:6b:dc:68:c6:a4:
                    99:5d:4b:d8:2a:a9:1a:22:d8:6e:2c:05:98:b0:0d:
                    0c:81:73:dd:98:53:25:6b:62:a7:41:48:b8:4d:11:
                    ff:ba:0f:87:46:ae:44:d5:92:d4:85:b1:5e:51:eb:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:6B:54:2F:4E:CE:28:AE:67:43:CB:DF:9A:23:94:ED:F4:60:04
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:3f:c9:41:92:08:b3:19:94:c0:10:f9:84:86:09:c9:df:ac:
         5d:cb:3e:8d:fa:d5:de:89:b0:1a:da:23:5e:9a:70:6d:3b:90:
         a5:c5:e7:4a:30:88:8e:ee:f6:79:0f:a0:49:78:e1:80:73:90:
         27:14:25:88:bf:77:ab:72:a0:c1:9a:52:c0:ff:fb:cb:e0:8e:
         57:8e:d2:3b:29:6d:ae:2f:f5:4f:77:ac:9f:af:75:a6:4e:a7:
         47:45:32:9a:b5:4d:49:1f:99:e3:7b:95:34:e3:03:98:ea:b1:
         4a:4e:60:b5:92:3a:5f:ce:22:37:bf:ae:4c:5a:98:da:52:96:
         1f:dd:ca:e6:b5:8c:8d:e4:a4:04:14:10:0c:b5:ed:2f:1c:7f:
         86:ed:f7:6c:db:a3:38:1d:72:4b:f4:f6:cb:e8:8b:83:f6:e6:
         47:51:1b:64:8d:22:9a:ae:00:ae:42:cf:e8:ee:fc:c1:de:f3:
         87:98:94:6a:58:e7:25:18:84:e0:2d:6a:57:ae:71:50:c6:cf:
         da:12:75:cb:6e:99:c3:be:dc:40:94:99:f6:28:14:b1:34:f6:
         29:94:21:54:f7:b0:78:82:fd:0a:31:22:6f:fe:e4:e2:37:a3:
         91:3b:54:87:0d:63:10:3f:7c:0e:8e:68:bb:d9:21:c2:c1:91:
         29:8f:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:35 2026 by rpki-client