Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa
File:                     93C0837AA52911EC9D2DAE83C4F9AE02.roa (raw, json)
Hash identifier:          Ws4kXOycMxQBTaXBEjmznoXyRi5PYCjorSZYTJcdYNc=
Subject key identifier:   30:89:D9:2B:2B:ED:60:E9:54:29:C6:DC:4A:99:7F:59:18:78:09:09
Certificate issuer:       /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial:       31A2
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa
Signing time:             Wed 26 Aug 2026 16:20:23 +0000
ROA not before:           Wed 26 Aug 2026 16:20:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        103.43.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12706 (0x31a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
        Validity
            Not Before: Aug 26 16:20:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f1246-5358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:ac:fa:a6:00:13:b6:cd:fe:ae:0a:3d:f8:
                    28:26:b4:8e:25:1e:54:ef:5b:d8:89:e9:06:30:08:
                    40:56:bc:bc:ae:4c:96:9a:c6:79:26:33:ee:69:2a:
                    c3:73:34:56:83:12:23:bc:82:5e:73:67:9c:44:e7:
                    9d:fa:44:54:46:bf:7b:82:0d:3f:1f:a2:fa:65:58:
                    0b:48:ff:ef:e1:01:9a:ba:97:1c:89:24:17:09:70:
                    fa:a1:f9:6d:b6:56:06:8a:97:66:5b:3e:46:95:4c:
                    59:90:91:cf:e9:31:7c:0b:6a:fd:6c:e3:6e:7f:1e:
                    71:7b:1d:f3:ef:fb:41:1c:be:42:12:b8:6e:e8:42:
                    0e:ae:2e:e9:62:d4:80:f4:dc:ab:20:7a:f1:5d:39:
                    c0:7d:b1:f3:fb:f5:a7:eb:eb:0e:bf:4e:01:3e:00:
                    70:4e:c8:9a:ff:01:f3:96:26:26:07:50:8e:ad:0b:
                    45:c6:cb:e5:79:35:55:76:97:73:a3:2d:b5:8a:d4:
                    99:2f:6c:5a:da:cf:19:e4:ca:e5:ed:c4:08:7f:2c:
                    32:e7:39:f7:75:62:b3:bf:00:76:cb:73:bd:64:37:
                    2a:18:aa:eb:48:03:ee:0c:40:3d:2a:53:46:c3:95:
                    9f:c3:f0:10:5a:cc:ff:e6:fa:71:91:5e:75:33:38:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:89:D9:2B:2B:ED:60:E9:54:29:C6:DC:4A:99:7F:59:18:78:09:09
            X509v3 Authority Key Identifier:
                keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/93C0837AA52911EC9D2DAE83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:99:23:b1:f1:0d:f7:b1:3b:88:40:55:bc:80:5e:1c:41:
         19:27:18:b0:80:00:9e:8c:ff:1c:23:f7:af:47:cb:3d:29:d1:
         cf:ea:ba:c7:83:fa:ad:f2:da:e1:17:b1:ed:79:8d:c2:62:da:
         ed:12:cb:c4:d7:99:5a:91:49:02:ec:0b:81:c2:ab:97:31:25:
         c5:c7:e7:98:38:0d:78:4a:5e:ca:a9:f9:51:79:72:c6:5b:c3:
         ae:dc:12:13:3c:c1:0c:99:5a:f3:f7:b4:a2:8a:2e:52:cc:a4:
         59:53:25:09:f2:2e:9f:67:6e:39:b4:6f:32:f7:e6:f8:69:3a:
         58:85:ff:05:6e:d5:83:7f:dd:36:13:36:55:29:09:4e:95:41:
         58:f6:ba:ff:d3:cc:e7:6d:33:e4:f8:7c:8e:4e:d2:16:b4:5f:
         7e:58:42:07:b8:a7:ac:3a:15:4d:e9:81:ee:20:b2:b0:1f:b5:
         71:8a:a9:8f:c8:b9:63:f9:df:27:0a:e1:b0:65:8d:1b:e2:f0:
         c8:07:93:f7:19:59:51:84:4d:cb:22:f3:6b:61:2d:64:12:ba:
         9c:77:8c:7a:a3:d9:54:9a:bd:67:86:d6:64:92:9a:d0:4b:2b:
         e9:09:7c:62:2f:47:cc:99:c6:f5:46:01:7b:6e:9c:15:a2:7e:
         9d:09:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 04:02:26 2026 by rpki-client