Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa
File:                     9F7A4D22950711F196EC2BEB4C11F970.roa (raw, json)
Hash identifier:          AwDH4G/opDWWbP+27EC7Iz7uE5B2rl5jR6Bdkfs1XUA=
Subject key identifier:   AD:F7:6D:6C:6A:A9:AE:8F:D8:0E:1C:AD:AF:2E:F9:13:44:8F:36:E4
Certificate issuer:       /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Certificate serial:       04
Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa
Signing time:             Mon 10 Aug 2026 22:05:40 +0000
ROA not before:           Mon 10 Aug 2026 22:05:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        103.157.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
                          rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
        Validity
            Not Before: Aug 10 22:05:40 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7a4b34-5cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:7d:89:77:42:1d:d3:72:1f:86:16:b3:7f:
                    a9:91:68:dc:e5:ec:28:d4:67:7d:b5:5c:a4:04:6f:
                    c8:df:66:4d:42:a2:f3:c8:dd:66:d3:5c:06:e9:e5:
                    90:64:c9:ff:08:92:9a:3d:e0:c1:48:33:9a:9f:b4:
                    b9:dc:d2:90:7e:9b:32:f7:f7:8a:db:d0:46:4b:03:
                    80:83:97:0c:5b:50:b8:68:9f:dc:3c:c0:7e:f1:be:
                    6a:75:84:bd:75:c3:f5:fb:03:51:ea:33:8d:7b:17:
                    c9:56:68:ee:8e:73:c5:7c:0a:dc:4b:1f:24:76:f8:
                    e3:b0:75:fb:0c:76:d8:40:75:35:2c:ac:fd:1a:f5:
                    5c:1b:02:eb:81:a1:08:a3:10:01:72:ad:77:4f:7d:
                    d0:2e:99:b9:3a:e3:45:56:e4:9a:25:d7:5d:f8:81:
                    75:0e:e6:2e:03:cf:ca:1a:66:bf:97:6e:b5:94:94:
                    ff:9c:4e:8e:bc:af:1d:2e:4c:75:d6:1e:8b:15:76:
                    42:93:e3:74:07:37:9b:7d:4c:35:f9:a7:42:1a:50:
                    be:80:1a:7a:54:24:7f:ee:ca:e7:bb:8b:ab:2e:48:
                    de:08:d2:08:5a:e7:57:41:62:53:91:7c:92:38:5f:
                    eb:57:73:c4:0e:e5:49:ef:b4:52:92:dd:7b:c0:29:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:6D:6C:6A:A9:AE:8F:D8:0E:1C:AD:AF:2E:F9:13:44:8F:36:E4
            X509v3 Authority Key Identifier:
                keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:31:ef:7d:ba:bf:68:86:39:2a:fd:6a:68:df:81:58:8a:cf:
         9e:33:55:85:3d:8d:22:b5:88:d3:1e:1d:e2:7e:85:ce:dd:c5:
         81:03:66:8a:1f:8d:bc:20:25:cc:f6:30:c4:6a:09:53:2b:a1:
         0f:fe:35:bc:6b:d4:d8:8b:a0:ea:8b:ee:05:85:a1:89:74:28:
         ac:3e:68:b0:8f:1f:ab:22:af:6c:86:2a:51:5d:86:5d:d7:d9:
         1b:19:3e:4e:77:ec:90:d0:0a:99:a0:31:5b:77:3e:42:fd:11:
         e0:33:9b:9a:49:a5:78:d6:db:0a:ff:ed:0b:36:ec:39:1a:9f:
         56:cf:a2:43:c8:60:cd:12:44:9d:7e:06:1f:81:ad:ff:e8:96:
         f2:83:d3:af:37:e4:03:2f:fc:82:91:d8:68:ac:95:30:e8:b3:
         e0:45:77:49:e5:bb:0b:b7:ce:56:a0:dd:e1:72:05:03:90:45:
         a7:2e:e6:7a:4f:38:c6:24:75:f9:07:35:14:e6:51:c7:02:ab:
         48:34:3c:29:22:3d:87:3f:86:56:c6:fd:02:03:29:9c:78:6a:
         c3:11:9d:fe:65:7d:87:f2:c8:b0:85:8c:e4:23:fe:c3:74:b5:
         f2:27:61:c3:0c:4f:cd:bb:33:aa:8e:09:5b:47:07:5c:1f:bb:
         57:11:81:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:34 2026 by rpki-client