Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/7913A610950711F18B35F6754C11F970.roa
File:                     7913A610950711F18B35F6754C11F970.roa (raw, json)
Hash identifier:          ibCdad19OwA0KSJlYJgV57pRzJi2qp5oXOlOgz/Gt88=
Subject key identifier:   21:7A:09:49:51:00:39:F1:0C:CD:86:B3:A3:6D:EF:60:22:EC:A5:1C
Certificate issuer:       /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Certificate serial:       02
Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/7913A610950711F18B35F6754C11F970.roa
Signing time:             Mon 10 Aug 2026 22:04:36 +0000
ROA not before:           Mon 10 Aug 2026 22:04:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4648
IP address blocks:        103.157.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
                          rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
        Validity
            Not Before: Aug 10 22:04:36 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7a4af3-5380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:4a:1a:b8:2c:07:2e:98:c3:e3:0c:5a:a8:
                    2c:5b:41:8c:a8:2c:9d:ca:fe:40:11:e8:0e:f7:d1:
                    48:95:a6:0e:9e:a9:7a:69:bd:9b:15:2e:b8:05:7e:
                    cc:c0:65:77:be:87:71:43:35:9e:4b:36:59:7a:d4:
                    2f:e6:80:6c:c7:77:b3:32:93:35:9d:d2:5f:0b:9b:
                    bb:71:0e:20:f5:3a:4f:3b:89:9d:63:86:e2:1c:0c:
                    b8:2a:46:90:15:9a:7a:f0:8e:8f:52:15:69:6d:23:
                    4b:44:09:2c:85:ee:47:39:6a:f0:79:1c:a9:b6:eb:
                    b1:4f:f0:be:d3:19:3d:6c:37:8e:8a:df:41:a4:ed:
                    a4:eb:dd:6f:36:4b:27:db:84:84:61:38:24:07:b1:
                    4b:58:f6:39:a0:70:a7:3a:53:a9:cf:d2:0b:cf:2f:
                    bd:4d:85:e7:9f:a5:72:b4:0e:6a:a0:33:93:87:67:
                    9c:45:74:75:b3:bd:31:c9:9f:a6:27:69:94:3a:e7:
                    6e:18:4d:53:35:c2:10:48:08:1b:d0:d9:9c:73:1b:
                    da:6e:e3:2c:74:39:9e:15:be:9b:39:fa:97:ff:db:
                    cc:06:c1:c9:8e:da:92:4d:07:38:35:90:04:90:89:
                    8d:b0:33:4e:df:6d:52:59:6d:59:8e:6b:63:ac:b2:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:09:49:51:00:39:F1:0C:CD:86:B3:A3:6D:EF:60:22:EC:A5:1C
            X509v3 Authority Key Identifier:
                keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/7913A610950711F18B35F6754C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:62:80:ca:ef:a5:2a:cf:42:04:99:52:d5:b4:d0:6f:7e:
         29:6c:7b:d4:10:0e:98:b8:99:24:ac:63:29:d6:c2:4b:14:3c:
         2f:c9:2b:cb:b7:84:c6:12:af:d8:58:0e:7c:35:dd:a4:19:83:
         9b:e6:b4:7a:c8:7f:88:ad:f8:f1:3b:fa:2b:26:22:25:07:c2:
         27:47:f1:f3:7d:d3:9b:8d:ef:e8:97:00:64:89:a0:b0:f8:c7:
         a5:45:08:b1:2c:18:eb:1e:db:db:76:58:e1:8a:3c:4d:fd:4c:
         c1:9e:ad:0b:12:59:5d:e1:91:b4:7c:7e:4e:ab:de:98:54:d5:
         00:e8:dd:0c:af:05:16:49:8d:9d:62:2f:73:b6:00:93:6e:54:
         52:2e:e0:ec:46:98:ef:37:e8:b4:91:9a:6c:5a:c3:16:e8:80:
         ab:16:cb:43:bc:58:67:59:15:b2:5b:94:47:b4:31:71:bf:e9:
         29:84:ca:51:bf:8b:1a:5b:05:28:62:7d:ae:48:85:c9:0e:b1:
         a2:4d:c3:e2:2c:95:43:7d:41:ec:87:34:e1:c0:5b:d9:88:69:
         72:2b:0e:99:a6:c1:b9:ce:e2:bc:0f:5d:6e:45:cf:2c:79:72:
         1c:46:5d:ec:72:96:c2:69:84:f0:dd:c2:3d:46:42:97:94:22:
         9e:aa:77:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:59 2026 by rpki-client