Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/C6DFFAD8906B11F1A67C05D95E11F970.roa
File:                     C6DFFAD8906B11F1A67C05D95E11F970.roa (raw, json)
Hash identifier:          MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=
Subject key identifier:   08:E5:7B:4E:99:53:7E:57:97:C9:D4:8F:B6:91:E8:B7:61:13:0D:58
Certificate issuer:       /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial:       01E0
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/C6DFFAD8906B11F1A67C05D95E11F970.roa
Signing time:             Wed 05 Aug 2026 01:20:00 +0000
ROA not before:           Wed 05 Aug 2026 01:20:00 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     18186
IP address blocks:        103.230.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
        Validity
            Not Before: Aug  5 01:20:00 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a728fc0-209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:0c:83:12:a8:be:05:3e:b7:9b:3d:08:25:
                    81:23:f7:48:ed:b7:a4:fa:77:44:f4:f6:d3:de:38:
                    3a:9f:6f:a6:dd:27:87:a8:c1:fc:f7:43:7c:a4:ca:
                    85:85:fb:7a:f3:20:ae:48:d2:aa:37:73:bb:69:8d:
                    29:a0:d7:0d:f4:ff:4f:37:21:1c:26:30:89:ad:a8:
                    f7:a8:e4:34:94:a5:ed:6f:d1:c7:b3:8a:1d:44:e5:
                    79:06:cf:58:d2:2d:f1:1e:5b:1a:39:9f:ff:d8:43:
                    c7:c2:f2:20:ea:fd:7f:52:46:f5:f6:fa:62:26:b1:
                    1c:6c:6f:51:0c:0f:e5:13:ad:ff:e9:8a:a2:85:68:
                    d9:53:c4:83:ce:e4:4e:5b:f9:08:22:21:55:35:43:
                    a0:7a:31:79:9c:22:d7:7c:dc:8a:24:5c:3b:50:51:
                    7c:49:19:11:67:56:ad:96:b7:35:9d:ca:44:33:30:
                    f0:a4:5f:93:4c:50:86:b1:74:af:b0:98:21:c6:49:
                    78:a9:6f:27:92:9c:6a:3f:15:d9:7f:cb:2e:1b:fa:
                    d5:36:11:57:53:2b:2d:8d:3c:4b:ec:a9:97:f7:1c:
                    77:b8:8d:4e:d5:36:3c:44:e4:03:b9:7a:52:8e:2d:
                    9f:3e:c7:e2:0b:08:30:72:ae:70:3b:50:59:77:e3:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:7B:4E:99:53:7E:57:97:C9:D4:8F:B6:91:E8:B7:61:13:0D:58
            X509v3 Authority Key Identifier:
                keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/C6DFFAD8906B11F1A67C05D95E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:f9:14:c5:86:da:b7:b9:89:ad:9d:75:b8:a7:fe:ff:ef:
         e2:21:6b:73:71:67:7e:a7:06:6f:39:62:12:0d:44:7b:a8:9d:
         39:91:d3:40:0e:c4:3d:71:ec:f6:9a:23:5f:72:65:9e:fe:80:
         43:c0:9a:18:23:09:27:42:d0:81:e1:87:eb:b4:4b:18:03:13:
         e3:71:3f:b9:5b:d7:e3:08:31:bb:bd:1d:ea:ac:0c:34:40:10:
         93:8b:27:ad:c9:82:ae:c0:60:07:fa:c0:db:88:90:57:03:e4:
         26:76:ca:ab:78:c2:50:69:d7:87:4c:7b:00:9e:fc:fa:98:76:
         ef:3f:22:56:c8:66:fd:ca:c9:ee:0e:9e:a3:c5:6f:1b:ac:ad:
         b4:8f:7e:1d:f6:57:42:9c:3f:f1:64:11:b3:db:d2:b6:76:6a:
         94:31:27:6d:e2:38:ed:86:71:e7:6d:33:0b:d3:d1:dd:40:0d:
         ac:d2:8e:59:8d:2e:8f:9e:64:2b:84:60:c6:1b:69:2d:d2:86:
         86:f5:d5:79:ea:00:b4:58:bf:f0:13:31:83:8d:01:17:2a:2a:
         81:17:fb:45:97:6c:17:ac:8e:3f:e6:3a:28:b6:79:08:52:e2:
         52:65:84:b4:06:6a:b7:bf:22:b4:c0:0f:40:7e:ac:6b:1c:82:
         2d:dc:55:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:45 2026 by rpki-client