Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
File:                     D6D22DBC53CD11EA9301951AC4F9AE02.roa (raw, json)
Hash identifier:          PIyBuMUGswUUPyphqmLcOxvbRBBsVsv2sj/WYRN7vSw=
Subject key identifier:   EA:76:A8:76:73:D7:EC:8F:A0:81:9C:D9:4A:14:42:E8:A9:4E:14:C9
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B78
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 19:23:07 +0000
ROA not before:           Thu 04 Jun 2026 19:23:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137934
IP address blocks:        103.117.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2936 (0xb78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Jun  4 19:23:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a21d09b-19a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:5e:37:f9:f8:90:13:91:05:7b:4f:9c:ca:
                    4e:e8:04:3b:ba:26:65:44:92:9e:c6:01:eb:d9:95:
                    bb:56:be:b3:c0:5d:e0:65:b4:b2:9a:ee:29:49:4a:
                    70:25:ad:54:05:be:8a:36:fc:ec:59:2e:e1:95:f4:
                    9a:87:1f:02:12:52:2a:c1:44:7f:f0:f2:e5:36:e7:
                    e1:e5:90:93:73:9a:d1:d6:11:3f:12:46:b8:6a:1b:
                    7a:0d:ab:de:fb:e1:a8:12:45:54:64:ff:2f:06:84:
                    37:60:55:5c:44:df:75:01:b5:2d:35:11:3f:48:02:
                    6a:18:14:0c:3e:74:75:0a:9b:a5:ee:fb:5a:f6:63:
                    75:7c:5d:10:41:a8:da:f3:f2:0d:ef:a2:7b:16:4e:
                    24:8b:1f:d9:b0:ec:59:5d:28:2c:06:a8:b7:c6:c6:
                    42:8e:c1:6c:6b:69:4c:63:8a:05:d9:6e:32:56:de:
                    4f:17:4d:8a:53:88:bd:a1:c4:03:64:c2:fb:f2:13:
                    84:5c:9a:ae:e5:6c:1a:13:a0:d4:1f:cc:86:f3:d2:
                    37:a7:54:d9:2a:98:2b:44:34:c9:89:e0:af:e2:3c:
                    80:ea:55:71:ed:44:63:5b:ba:82:bb:89:5f:35:ce:
                    42:f5:41:1d:fb:d8:f9:a4:d5:69:5e:e5:3f:76:2d:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:76:A8:76:73:D7:EC:8F:A0:81:9C:D9:4A:14:42:E8:A9:4E:14:C9
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/D6D22DBC53CD11EA9301951AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:12:d3:a5:12:93:42:a8:20:bb:f8:08:1c:1e:ea:35:48:
         6f:a9:fa:d2:d8:03:5e:3f:fe:8f:66:fc:04:86:f5:7d:4a:3e:
         ad:9f:52:cd:04:2a:35:c0:fe:8e:83:a7:af:20:76:4a:c0:ef:
         cf:0e:5b:a4:f4:37:db:c4:bf:f0:93:bd:74:cb:71:62:6a:d6:
         36:2c:a7:69:a6:1f:67:5d:02:03:89:21:93:4c:85:9b:61:13:
         91:30:b3:8c:e0:9c:5f:cf:87:f0:ef:66:21:70:59:65:96:12:
         a6:50:71:85:9c:e5:21:49:93:eb:cf:9f:59:a1:75:cb:7a:4a:
         33:44:c9:db:9e:d8:58:5c:ee:8f:56:e2:28:b9:f5:b6:a2:f5:
         42:3d:b5:f8:c3:15:4d:43:bf:2f:6c:e2:ad:e3:7b:6a:98:f1:
         2f:f6:3c:c2:e1:e9:2d:36:c8:f8:87:d8:75:0a:a6:ff:46:e7:
         e3:9b:4c:a8:8b:0f:a1:b7:77:d6:46:6c:ec:70:ec:8d:b5:92:
         aa:32:dd:32:49:72:59:c8:f1:0e:e4:5f:ed:cc:d7:cc:65:cd:
         a6:e1:61:5f:74:39:91:5d:a0:b3:30:33:15:fb:87:9e:4d:5d:
         7a:02:03:45:79:18:1b:cf:a1:2a:99:9a:bc:bb:5a:7f:8d:c3:
         25:2f:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:36:22 2026 by rpki-client