Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/67B6B2BE8C0A11F18F5A4FFE4111F970.roa
File:                     67B6B2BE8C0A11F18F5A4FFE4111F970.roa (raw, json)
Hash identifier:          5yz6s8mph2niUKU15DvVle38hT/SfFA+5Y4QHdfA4T0=
Subject key identifier:   02:4A:26:1C:E0:82:97:5E:D4:4E:FE:11:14:70:D4:33:50:B0:F0:A5
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0C08
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/67B6B2BE8C0A11F18F5A4FFE4111F970.roa
Signing time:             Sun 02 Aug 2026 19:38:25 +0000
ROA not before:           Sun 02 Aug 2026 19:38:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     39600
IP address blocks:        103.13.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 18:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Aug  2 19:38:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6f9cb1-1c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:fe:ac:6c:e3:ea:a2:23:c7:9e:cc:52:06:
                    f1:dd:1b:2f:f3:b3:2b:80:69:8a:d0:0f:39:99:60:
                    5b:82:ce:4a:fa:9c:b0:24:84:dd:44:19:0a:b2:bd:
                    37:8b:4f:07:4f:c7:dd:b6:7c:08:98:c4:32:ed:d8:
                    d2:48:ce:b0:c3:a6:45:2d:78:84:b0:eb:7c:21:64:
                    4f:df:13:8a:32:55:c5:33:68:d2:f1:13:01:38:eb:
                    2a:06:8b:2a:c3:29:33:34:68:a3:67:92:84:86:a5:
                    e6:55:fd:dd:b9:9f:29:22:a0:bc:c3:8f:c2:1d:73:
                    db:31:4a:f7:28:4d:b6:b7:af:97:58:1b:87:d0:5c:
                    02:01:9f:ca:e0:a4:bc:ab:ac:47:c6:e4:10:0c:f5:
                    ed:95:4e:4f:d6:29:02:28:36:0d:bc:57:d3:87:93:
                    9b:1f:44:ff:e1:ba:89:92:a7:16:e7:8c:98:ba:5e:
                    c7:4b:1c:a6:7e:7c:45:4e:44:09:d1:c4:34:25:01:
                    3d:1f:47:0c:15:cb:2e:29:cc:58:a6:5a:07:63:91:
                    0d:ed:1c:bf:9a:4c:4b:2c:13:69:ef:4d:57:63:c2:
                    0a:4f:b2:2f:76:a2:af:6e:1c:a3:80:dd:b6:e4:a6:
                    5f:f1:63:db:cd:80:57:34:72:9b:d5:95:32:40:66:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:26:1C:E0:82:97:5E:D4:4E:FE:11:14:70:D4:33:50:B0:F0:A5
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/67B6B2BE8C0A11F18F5A4FFE4111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:21:db:ca:81:f1:90:7c:d8:36:90:b2:28:5b:db:3a:eb:49:
         21:76:23:61:7d:df:45:7f:e2:16:4b:1f:e6:cb:46:0a:f2:48:
         64:84:18:42:74:3a:67:35:e2:03:0b:bc:7e:13:46:b7:e6:28:
         89:6a:c6:8f:28:a7:90:ba:24:f5:52:ec:66:d1:c2:b9:45:06:
         98:08:4f:19:7d:49:c5:b1:be:8f:08:4e:42:26:99:9c:cb:bf:
         39:70:0d:4a:a4:14:61:90:c5:0b:96:b9:d4:25:20:e5:67:b7:
         77:ad:78:ec:ae:fc:de:9c:e5:de:41:eb:2f:ff:f3:4d:ed:fa:
         e3:59:cf:5b:e4:78:ec:46:d2:cc:16:ae:0c:27:c2:80:e0:eb:
         ab:2e:e9:72:05:ca:78:be:1b:cf:b9:30:3d:ac:20:c4:67:a7:
         c9:d1:02:c1:80:a9:05:5b:90:63:10:d4:4e:5f:b2:d4:7d:dd:
         6a:a8:04:5e:c7:17:4c:94:88:e6:e4:f0:6a:d1:a3:9b:cd:2f:
         8e:2e:6c:30:1d:3a:1f:f2:b4:3e:da:b9:d5:ef:05:53:08:da:
         62:5d:ea:7f:54:fe:ec:22:28:67:65:20:ac:cc:ff:d4:f0:11:
         b9:44:06:f9:e3:d5:c7:ac:35:24:61:69:7a:49:d1:26:a5:33:
         ac:90:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:10 2026 by rpki-client