Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
File:                     6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (raw, json)
Hash identifier:          siCNFGc+EO36UIKbwQulD20FMsO8eNi774IXOExWqzk=
Subject key identifier:   69:80:52:5B:F5:6E:C1:3C:B0:BA:FF:26:45:97:49:5F:4B:9F:BE:77
Certificate issuer:       /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial:       0678
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
Signing time:             Tue 16 Jun 2026 23:27:04 +0000
ROA not before:           Tue 16 Jun 2026 23:27:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142134
IP address blocks:        103.166.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
        Validity
            Not Before: Jun 16 23:27:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a31dbc8-5ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:57:30:00:6e:df:58:fe:55:0e:65:3e:03:
                    3e:15:e9:1d:77:19:82:37:9c:df:f4:f4:d4:f0:bd:
                    46:75:d2:04:d1:f0:f5:a5:b2:2e:d4:2b:33:f4:1b:
                    3f:44:fc:67:28:0c:86:28:1f:84:ba:fb:14:b6:66:
                    65:67:7e:ea:fa:ee:7d:54:9e:ea:33:69:78:7d:39:
                    ff:44:98:d7:1a:00:52:11:38:c9:12:77:95:1f:87:
                    46:59:14:d1:9a:9e:f8:17:40:12:97:2f:db:e5:80:
                    ea:8a:04:8a:ad:bf:4b:ce:99:db:ee:1c:61:87:03:
                    54:bc:9c:71:25:fa:93:be:dd:ce:f3:c3:21:f9:4b:
                    84:fb:76:f3:ec:db:05:ee:bd:20:16:20:64:b2:8b:
                    7b:92:6d:61:88:c4:e2:04:95:02:00:7d:40:85:f0:
                    58:e6:a0:88:1d:c7:3a:4a:71:bc:aa:90:1e:66:48:
                    dc:13:79:94:13:a0:e9:c7:50:a7:02:1c:f9:97:dd:
                    0e:0f:54:35:c6:15:62:f8:e8:00:aa:13:29:78:fb:
                    af:15:0d:cd:98:86:87:d8:c9:0d:5f:ed:2c:ed:0d:
                    50:59:58:79:0e:af:de:c0:f6:e4:e5:13:c9:e6:a6:
                    8b:7f:9d:cc:b7:4c:5b:47:7e:13:5b:40:a5:8d:63:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:52:5B:F5:6E:C1:3C:B0:BA:FF:26:45:97:49:5F:4B:9F:BE:77
            X509v3 Authority Key Identifier:
                keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:47:66:84:08:bb:0f:33:03:b7:81:5a:c9:77:83:de:5e:66:
         fa:e7:ef:99:35:8d:92:53:04:fb:e6:2e:e8:43:c1:18:fe:5a:
         dd:b4:ae:fe:68:5e:5c:a6:4e:ea:63:17:c0:6e:ab:97:b7:d2:
         78:47:11:7b:42:fc:b5:59:c7:52:35:53:3e:3c:18:55:5f:bb:
         6c:cf:03:8c:00:d7:01:dc:96:09:68:be:67:b5:c7:30:79:21:
         06:83:f6:68:f2:de:c1:5f:bc:79:ed:ac:f4:d1:a5:29:76:39:
         34:17:e7:e2:55:02:35:d2:48:02:87:77:f4:22:e1:f0:83:dc:
         ab:e1:db:fb:92:1c:63:b1:37:dd:86:9a:9f:da:81:c3:64:aa:
         f1:fa:90:25:7c:eb:da:b1:78:8f:19:14:66:2f:7e:16:ec:44:
         33:65:39:0a:10:e5:f8:b4:a2:ea:f3:e9:07:c3:5c:62:a6:2c:
         61:df:5f:e3:ba:e7:2c:ba:e3:8b:da:f8:0c:bc:3b:b2:d0:1e:
         f3:91:b1:1c:1a:a9:5c:41:77:06:90:e2:9a:6b:d5:84:11:c2:
         d6:de:7f:5b:af:96:24:4e:eb:be:b0:88:2c:9a:34:cb:d8:57:
         f0:e2:46:e8:51:8a:63:cb:a2:38:a9:16:aa:96:78:a8:7d:c4:
         2d:0b:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:25:02 2026 by rpki-client