Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
File:                     212691F85C8A11F09D065A67C4F9AE02.roa (raw, json)
Hash identifier:          iyDMS6tOGnY0vV2tRBpkImtDJt2yb1m8IIZ76sEjG28=
Subject key identifier:   78:47:99:E1:77:E4:41:CD:B5:6C:20:EB:5F:18:57:B8:17:C1:2A:EF
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0332
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
Signing time:             Wed 09 Jul 2025 06:01:18 +0000
ROA not before:           Wed 09 Jul 2025 06:01:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.26.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jul  9 06:01:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686e05ae-1cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:01:90:7f:e3:0d:83:c2:15:ba:26:52:24:
                    2f:a7:b2:3b:bd:d1:32:0f:eb:01:b5:99:00:94:08:
                    24:1c:7a:fe:9e:79:2a:e0:df:39:5d:18:46:77:24:
                    74:11:19:40:a5:2f:2c:5a:bf:b0:51:11:63:fd:52:
                    62:a4:eb:9c:4d:00:bc:40:71:67:01:b3:3e:df:28:
                    8d:e4:a3:c0:6f:f3:fa:1f:7e:be:45:73:56:8b:07:
                    2a:a1:eb:93:51:21:f3:61:77:61:da:6a:10:62:cd:
                    47:52:6c:36:db:48:26:4e:81:e5:97:30:0c:d6:8f:
                    9a:37:71:d0:34:95:e8:fd:1b:3c:33:78:98:0d:51:
                    63:38:65:c1:6b:f6:58:70:8c:0b:a7:0a:4b:81:38:
                    7a:71:75:f7:d0:7f:37:3d:b0:2b:73:7a:6a:89:0c:
                    f2:1e:73:fe:e8:a7:00:3e:a6:55:e6:ac:a6:85:1b:
                    35:f3:0e:41:e3:f4:bf:32:d7:0e:5a:d2:d7:b0:f4:
                    38:d0:95:3f:15:e9:6f:9e:62:51:b5:a4:d1:ff:58:
                    05:a1:8d:55:18:5c:b5:b6:de:55:a0:78:89:16:78:
                    d3:0a:51:9a:93:b3:1b:0e:0e:d9:a0:7e:a9:22:22:
                    a8:4b:54:4f:8b:c4:78:9e:27:36:f8:6b:73:97:c1:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:99:E1:77:E4:41:CD:B5:6C:20:EB:5F:18:57:B8:17:C1:2A:EF
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/212691F85C8A11F09D065A67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:09:a3:27:53:d3:89:b2:f8:c6:7a:35:4c:6a:98:45:87:41:
         aa:da:01:cc:c4:ab:d5:75:10:6c:64:76:40:58:c0:a0:07:6a:
         c3:45:c3:3c:25:9c:8f:1b:a0:18:b4:4c:39:1f:4f:6a:9c:07:
         50:9c:e7:08:45:32:f8:8b:b6:6c:a7:9a:89:3b:e0:61:65:c8:
         09:01:4c:18:fb:cd:35:f6:a7:70:dc:c4:b0:7b:fb:e5:bc:83:
         dd:ec:4f:8c:cd:f1:59:08:87:a1:d5:5d:0d:03:ef:c4:43:e1:
         c7:a7:5e:9a:c2:29:b4:5d:82:bf:0c:38:76:90:bc:56:75:4a:
         24:48:23:65:33:b6:66:e2:aa:8c:93:b1:b0:a5:0c:44:63:03:
         5a:3b:c8:56:7f:28:30:b8:90:44:ba:6e:a8:f3:04:22:f5:5c:
         54:f7:69:70:79:c8:a7:ab:35:af:fd:c2:cc:26:bf:7d:a9:71:
         53:9b:2f:3e:c5:6a:cc:da:43:aa:4b:fb:e9:bc:26:4e:bf:2e:
         90:a3:fa:de:f4:8a:8d:00:a4:aa:e8:dd:54:f9:d7:33:09:5d:
         c6:b4:44:c8:24:01:fa:94:c2:aa:6f:6d:6b:9f:1b:a3:97:f7:
         60:b2:91:0a:e6:97:9a:bb:9d:00:bf:54:e1:6a:32:a6:81:2d:
         ae:4a:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:21:09 2025 by rpki-client