Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/6E2A7904C1D511F1A89FC6E23D11F970.roa
File:                     6E2A7904C1D511F1A89FC6E23D11F970.roa (raw, json)
Hash identifier:          IDkRKLcx+8c4BAhrvax6Uq3SZLsbqmtxu7VvPsIv0lk=
Subject key identifier:   38:F2:13:83:97:3D:1C:1A:9B:A2:F7:1C:F2:1D:E4:8C:5B:7D:F9:F9
Certificate issuer:       /CN=A918C48F/serialNumber=0C702418A5AEDCCA15DAD3D11D2F4266D82BA504
Certificate serial:       09
Authority key identifier: 0C:70:24:18:A5:AE:DC:CA:15:DA:D3:D1:1D:2F:42:66:D8:2B:A5:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/6E2A7904C1D511F1A89FC6E23D11F970.roa
Signing time:             Thu 15 Oct 2026 10:58:03 +0000
ROA not before:           Thu 15 Oct 2026 10:58:02 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     133120
IP address blocks:        103.140.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.crl
                          rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 09:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C48F, serialNumber=0C702418A5AEDCCA15DAD3D11D2F4266D82BA504
        Validity
            Not Before: Oct 15 10:58:02 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad0b1ba-506d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:f2:54:a6:0c:0b:42:2d:0c:e0:91:e4:1a:
                    50:d9:fd:65:bb:dc:a6:e5:78:c4:de:dc:cd:2a:6a:
                    5e:df:86:1e:f3:26:45:3e:ae:06:27:93:6b:e3:f4:
                    6a:4d:46:e8:32:a0:ea:17:94:c7:05:19:50:3f:bc:
                    2c:f6:e0:85:26:97:8a:46:68:3e:f3:ef:a2:c1:87:
                    de:07:70:2f:d4:bd:e2:69:9c:7f:95:d2:1c:eb:5b:
                    33:0d:86:e3:68:8a:32:89:4c:0b:d1:35:69:b6:60:
                    6f:f9:88:78:53:4e:73:5d:18:7a:0a:21:df:29:cc:
                    8b:75:82:b2:a4:7f:9d:13:9e:b8:bf:fa:32:d8:7c:
                    dd:06:e8:c1:83:6c:16:2f:67:27:d6:5c:f4:f8:6d:
                    ab:82:52:b1:de:60:cf:35:8a:f6:bb:94:c4:ec:0a:
                    dd:db:3f:15:3e:91:20:53:ce:4c:90:24:33:ba:87:
                    34:64:11:8a:7d:69:7c:4f:6d:02:ff:51:6d:1d:e5:
                    6b:74:e8:56:9d:84:52:2a:1b:82:18:78:40:e6:7b:
                    f6:14:b0:3b:d7:81:ef:89:f3:48:6d:37:a2:7d:94:
                    8d:d4:cc:e1:60:8a:30:c3:09:df:05:d0:e0:11:e5:
                    50:6d:bd:ab:35:c9:7b:0f:42:c7:16:35:d0:c7:72:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:13:83:97:3D:1C:1A:9B:A2:F7:1C:F2:1D:E4:8C:5B:7D:F9:F9
            X509v3 Authority Key Identifier:
                keyid:0C:70:24:18:A5:AE:DC:CA:15:DA:D3:D1:1D:2F:42:66:D8:2B:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/6E2A7904C1D511F1A89FC6E23D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:94:a4:b8:91:5f:fc:24:33:6b:47:c0:cd:db:9b:8e:40:
         c1:dc:b8:01:3a:d3:8c:8f:d7:7e:96:9d:ce:9f:97:92:16:4f:
         f3:7b:73:04:dc:6e:80:c1:5f:19:13:d1:3f:94:37:94:07:4c:
         3a:68:30:d5:b4:b9:b0:49:02:45:7a:bc:7b:49:ce:06:25:77:
         8f:73:28:69:99:d0:fc:b8:98:d1:97:d0:f3:e2:6a:7c:e3:29:
         1a:38:21:eb:8e:77:8b:b7:08:a1:d6:1c:cd:67:be:b7:2b:cb:
         96:52:76:d5:63:fb:91:13:38:a0:5e:fb:dc:b3:89:96:c7:42:
         61:09:c0:9a:39:98:ab:07:95:2a:ca:52:1f:48:53:1b:f5:5e:
         0f:14:35:38:f1:3b:77:e9:99:06:dc:1b:98:84:2d:50:29:36:
         90:3f:47:4b:dc:f8:8b:46:10:0f:81:5c:00:60:8d:e7:d2:3e:
         d8:74:6d:63:70:6f:42:da:90:70:5c:93:d1:1e:58:cd:6b:5e:
         ef:0c:50:89:a8:8d:5a:6a:64:78:e4:1d:71:39:30:cc:76:27:
         0c:b0:ab:f6:63:16:0c:3d:77:16:e9:33:03:2a:b4:65:2e:82:
         9e:79:60:3b:0a:ea:0c:e2:cc:fd:3c:8e:85:d8:2e:ad:5d:34:
         e1:e5:5d:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:14 2026 by rpki-client