Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/59BEB010A02011F195A225877011F970.roa
File:                     59BEB010A02011F195A225877011F970.roa (raw, json)
Hash identifier:          EifTNUj0yWwldcJ+0g0GCF2FEt6QicxfH4aQnX/Bdx0=
Subject key identifier:   51:E2:7F:F7:3B:70:5D:FE:CF:E5:CB:F2:5A:B4:1B:D6:A2:C1:0F:80
Certificate issuer:       /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial:       8E
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/59BEB010A02011F195A225877011F970.roa
Signing time:             Tue 25 Aug 2026 01:00:23 +0000
ROA not before:           Tue 25 Aug 2026 01:00:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4771
IP address blocks:        103.16.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
        Validity
            Not Before: Aug 25 01:00:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a8ce927-5816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:31:4d:2b:3c:1b:b6:99:8f:27:49:32:d7:
                    85:7e:54:67:b3:a6:6d:84:8f:4c:5f:d6:b5:b5:ad:
                    f5:83:c6:10:24:e5:3f:4e:b6:aa:16:5b:31:ad:3c:
                    dd:fa:3d:d0:bf:29:aa:97:81:d7:35:9b:c5:56:3b:
                    0c:36:05:e3:ae:ad:10:8a:d7:7e:6c:4b:26:c4:53:
                    cb:6b:10:45:46:0e:dd:64:03:ff:9e:ac:e1:e9:64:
                    3f:f0:ae:43:0a:78:49:f9:ae:a2:2f:42:89:6e:7c:
                    66:c3:93:eb:3c:d1:fb:a3:3f:d9:53:f6:6c:8d:fb:
                    54:11:a2:1e:ee:a9:d4:83:49:bb:b0:bd:15:59:10:
                    8b:f4:ec:ce:e5:99:f0:1a:03:a0:d6:0e:b3:65:4b:
                    76:2a:ba:18:25:74:31:3d:f3:0a:73:0b:9e:95:97:
                    4a:a3:83:40:40:86:a4:da:03:7d:d2:5c:ee:2c:49:
                    c1:03:7a:16:7f:93:eb:fd:f9:60:26:3c:12:f1:fe:
                    95:45:f8:e8:da:fe:68:69:e9:a8:c1:13:6d:f2:04:
                    86:11:40:30:4f:2b:ef:54:ec:6a:e9:7f:9d:bd:3b:
                    c0:9a:08:76:cc:15:68:9c:b8:c6:49:66:82:41:19:
                    d0:a7:8b:09:f7:7c:97:02:60:c1:e8:9d:11:28:74:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:7F:F7:3B:70:5D:FE:CF:E5:CB:F2:5A:B4:1B:D6:A2:C1:0F:80
            X509v3 Authority Key Identifier:
                keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/59BEB010A02011F195A225877011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:23:78:82:b7:48:23:ba:6e:bb:9c:d2:39:6d:74:10:f1:
         e4:31:e7:fc:76:60:8c:6c:3b:63:ce:2b:be:68:cf:89:5e:e5:
         af:eb:d0:21:4d:ba:4d:fe:87:bd:a9:71:5e:aa:a0:e4:f8:ee:
         4b:ac:05:9d:b1:6c:66:24:80:ca:6d:f3:f8:93:be:92:a4:7f:
         be:14:ae:22:40:77:3a:78:02:25:a5:14:fa:0a:10:60:c7:8a:
         7d:83:cc:9e:d2:d5:68:94:3e:61:6b:88:7c:ce:4c:03:4d:0e:
         53:3f:53:52:dc:55:d1:46:a9:93:bc:c2:e1:7d:2a:5f:f9:6a:
         ea:6f:3d:4f:cb:fd:67:38:ad:c4:1d:6a:0e:7f:3d:2f:2a:09:
         96:5b:55:1e:a2:b8:45:3a:73:99:d7:90:6f:00:82:90:78:c1:
         6b:1d:cb:da:85:e0:d6:89:ac:c3:29:a7:e0:ea:ac:22:21:d4:
         59:ab:f9:ba:7e:e7:84:f0:f5:3c:08:11:78:43:8b:38:78:7b:
         49:30:47:ba:0e:d1:2b:3e:43:40:0c:74:4a:fc:f2:85:a1:a0:
         d4:c5:a5:16:a9:57:2e:89:6e:c1:58:bc:ce:94:46:88:11:d8:
         ff:01:19:f0:bb:e7:dd:9b:84:7c:a8:1d:b5:71:02:e2:ec:be:
         dc:20:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:56:32 2026 by rpki-client