Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/76A8A3E460F111EBBA7FFA79C4F9AE02.roa
File:                     76A8A3E460F111EBBA7FFA79C4F9AE02.roa (raw, json)
Hash identifier:          E+vMLcTiiCFU7OjzJ7EN5ljucNyiangRm06rdLtH2uc=
Subject key identifier:   0A:1E:BA:6F:B4:56:8C:A2:8A:C3:41:A7:62:FA:F9:DE:6C:30:F9:58
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       07C6
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/76A8A3E460F111EBBA7FFA79C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 21:42:09 +0000
ROA not before:           Fri 14 Aug 2026 21:42:09 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58678
IP address blocks:        103.155.84.0/24 maxlen: 24
                          103.155.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Aug 14 21:42:09 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f8bb0-4952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:19:9e:68:8a:66:41:66:95:8b:a8:a0:36:
                    bc:fd:88:43:ba:1d:35:d5:95:ce:a7:fd:52:0d:92:
                    01:bb:ab:c9:e2:5f:cd:d7:a8:cd:9f:ed:24:37:e0:
                    47:56:81:46:7b:9c:5f:3d:b2:d3:e2:72:9e:8a:6e:
                    2b:b8:3b:02:a9:1e:51:84:3b:5e:fe:ef:f6:bc:c6:
                    79:e2:a5:31:42:4f:1e:d2:a1:32:ea:38:f0:83:c5:
                    a2:c5:00:dd:19:4f:10:89:c2:91:da:9d:84:8d:27:
                    80:1f:d0:d5:9d:55:f4:02:a4:ee:63:be:42:e9:e9:
                    71:72:c0:4b:50:a9:aa:b4:94:d2:2e:f2:18:db:8b:
                    99:99:14:6d:7d:de:5b:78:e5:38:a9:a1:01:9c:6e:
                    23:15:32:44:af:3f:ca:72:56:e9:a4:67:1d:e8:51:
                    29:6a:03:4e:04:96:92:3e:4f:6b:1e:6a:d8:e1:68:
                    5a:4f:11:bd:aa:75:c2:ec:ea:10:25:5e:40:7d:cc:
                    5b:df:5e:15:8c:b9:29:e5:be:a2:df:44:4f:b4:b6:
                    83:06:ac:bb:44:40:3c:ea:5e:74:78:bd:78:04:82:
                    79:b8:e5:b1:73:c1:a2:5a:a2:1b:4e:71:93:89:95:
                    f7:93:70:8a:c8:5b:3a:9b:19:4f:ac:a3:99:61:32:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1E:BA:6F:B4:56:8C:A2:8A:C3:41:A7:62:FA:F9:DE:6C:30:F9:58
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/76A8A3E460F111EBBA7FFA79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:dd:b2:ab:e6:e8:d7:44:26:8c:60:fe:1e:72:25:f9:d2:
         2a:10:64:3a:de:3f:21:37:a3:60:c3:40:56:90:24:2a:41:7c:
         c9:69:0b:46:eb:cf:a5:84:41:61:af:9a:58:34:6e:c5:a4:76:
         2b:dd:37:1e:8d:1d:32:9a:1f:7b:15:ea:0f:43:95:9a:ce:60:
         9f:17:c2:d7:99:4c:7c:a3:c4:cf:09:76:5c:47:fc:0e:01:6b:
         7c:94:72:02:7e:f4:2b:07:6e:73:58:10:8c:6f:d4:59:be:2d:
         84:bf:be:a3:9a:d1:0b:6a:ff:37:bc:56:2a:25:f3:8f:a4:1e:
         79:4c:58:a2:dd:c6:d6:0c:ef:63:4c:0b:42:7c:24:b4:b8:6e:
         e4:6f:f2:c1:83:6e:8a:04:18:7a:a7:ca:c3:3f:c5:c2:f5:ef:
         b7:cd:25:23:1d:2b:97:5f:44:b5:2d:36:3c:b0:04:70:aa:16:
         59:c3:81:b3:90:fd:a4:6a:2a:59:5a:59:9d:66:7c:07:2f:8c:
         28:d6:d9:e4:42:ef:c1:bc:18:be:02:aa:32:4a:c8:c2:5d:3c:
         b2:9b:c1:91:f6:dd:c6:49:5c:e2:02:90:cd:5a:a6:bc:fb:b7:
         65:64:fc:fd:68:d0:7c:db:30:d4:7d:c6:b1:2e:35:40:7f:40:
         78:c5:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 00:08:13 2026 by rpki-client