Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
File:                     6534CB6AA60711EFA9497E10C4F9AE02.roa (raw, json)
Hash identifier:          9ihywTWH8D0AsKW3lVgSJVrGmFJI4l3WNEZsqdCL8R8=
Subject key identifier:   4F:D7:00:01:71:F2:C7:D1:69:ED:38:36:BE:41:4D:26:40:2B:DB:FB
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       01E9
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa
Signing time:             Tue 21 Jul 2026 05:30:36 +0000
ROA not before:           Tue 21 Jul 2026 05:30:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        103.65.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jul 21 05:30:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5f03fc-9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:f9:e6:4a:b4:d0:3d:68:03:33:4e:da:e8:
                    d7:10:dc:6c:ed:ec:42:2e:99:e9:c3:ad:f9:02:d1:
                    43:69:eb:00:1b:4b:eb:a6:3d:1b:74:d7:20:ce:5e:
                    65:38:9b:84:89:8d:88:49:c1:50:9e:79:61:d3:a8:
                    dd:7b:b8:ba:05:c9:36:5c:0e:ff:20:3f:a3:4f:13:
                    c2:7d:d4:c9:17:0b:01:c3:61:08:11:01:cc:5c:dc:
                    f1:72:38:2c:7d:e3:88:f3:f1:35:42:c1:6a:83:b9:
                    c8:12:fe:24:e6:1b:6a:70:9d:c5:c3:2b:e6:d2:1d:
                    a7:1a:cd:2c:61:69:28:c6:e5:39:3b:8d:ac:39:64:
                    56:2d:c3:a6:6e:47:ac:78:fd:e3:72:30:a1:15:14:
                    1a:bd:56:9a:44:ec:5e:90:dd:e4:6d:c8:fc:7c:09:
                    69:ed:35:44:7b:3e:93:3b:f6:e4:5a:70:af:86:d5:
                    6c:53:cb:62:3b:42:1b:46:a6:7b:84:28:b9:cf:4b:
                    94:00:72:37:d9:b1:80:c0:03:bd:8b:20:0e:2e:7c:
                    49:49:ce:12:ea:df:dd:07:db:96:70:bb:05:e6:a6:
                    7e:81:57:46:66:46:20:85:1c:5e:70:f4:4c:43:32:
                    8a:ba:ba:99:dc:06:24:64:d4:44:cb:c8:ce:d2:12:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D7:00:01:71:F2:C7:D1:69:ED:38:36:BE:41:4D:26:40:2B:DB:FB
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/6534CB6AA60711EFA9497E10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:21:4d:7b:18:ed:30:5f:ce:50:d1:38:8c:f8:b6:ac:c7:
         17:d5:a5:77:16:cf:da:41:10:78:c8:76:58:fe:14:bc:d8:8b:
         e6:44:2b:a4:e8:02:74:42:e7:75:3a:36:d7:15:22:5a:a4:6c:
         73:d0:f3:a3:eb:4a:86:3f:c5:ec:ff:8e:52:1e:6b:cf:3a:90:
         6c:64:17:d6:b4:51:af:35:55:30:e3:0e:17:3e:f5:e9:a1:8d:
         98:44:8f:cf:dd:22:a4:da:8f:2a:fd:7d:0e:21:cd:46:8a:d5:
         e6:7c:34:4d:bd:ff:3c:5e:bf:df:38:e3:32:7b:e5:0a:c9:a7:
         86:a2:fd:dc:a5:5a:0b:89:99:ae:30:71:a6:54:ec:da:91:66:
         63:91:20:0b:d0:55:e0:fa:e9:80:ce:e7:4e:c5:b9:0d:e0:50:
         73:34:ae:88:b1:6c:d6:cb:3b:eb:de:22:a5:96:fa:e7:61:41:
         c2:3b:74:67:cd:22:01:2f:e5:fe:6f:08:41:f7:eb:3c:94:6e:
         25:9b:91:99:7a:15:d1:2c:cc:76:3b:2e:d6:f6:1e:82:5b:bc:
         04:65:b4:35:7a:fc:1b:6e:be:d2:6f:10:94:6e:06:30:40:07:
         38:f0:b0:cd:21:0a:0c:cf:a6:4a:a0:5f:81:ba:b5:b6:d4:30:
         0c:ce:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:59:22 2026 by rpki-client