Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa
File:                     EDC6896617B611F08E260814C4F9AE02.roa (raw, json)
Hash identifier:          Bx7gLJ6K0CD6axyNymvk3cr+VYcomB6o5DsW4CK/Htg=
Subject key identifier:   5E:77:68:11:45:F1:BB:28:18:D5:02:3A:1C:11:C3:6D:C8:92:F6:A7
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       064D
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 22:45:11 +0000
ROA not before:           Thu 06 Aug 2026 22:45:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     210110
IP address blocks:        103.170.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 22:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug  6 22:45:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a750e76-b075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:15:1e:4b:1e:5f:29:42:53:5b:97:bf:f1:
                    8d:12:6d:e7:05:c7:d9:e8:7e:75:72:ea:35:e7:42:
                    db:c1:5f:ac:94:e3:3a:c6:89:fc:54:cb:d2:35:22:
                    ab:23:03:c1:c1:18:88:3e:c1:61:df:ac:85:21:72:
                    b6:e8:6e:79:76:bf:e3:0c:d2:21:8e:da:f9:59:50:
                    8a:ed:fc:e4:f3:e0:c0:b3:3f:8c:62:13:f3:3a:4b:
                    aa:92:ee:e3:9f:4a:15:b5:6e:53:67:92:bb:50:4e:
                    a4:3e:97:83:77:cb:6f:10:8e:9c:81:8d:6e:5e:04:
                    d5:d7:89:7e:62:42:85:c9:0b:5a:98:9c:88:a1:f4:
                    3d:ea:88:21:b3:d7:f3:b0:62:23:22:13:d5:ee:2c:
                    b2:5e:24:a0:be:bd:87:b4:fa:48:ce:16:57:5f:b5:
                    d3:2a:0c:2b:d2:75:4e:00:4b:61:7b:1f:d8:c7:62:
                    11:c6:af:17:eb:26:b6:34:0f:63:1a:98:15:a4:84:
                    b2:fe:79:33:31:ef:05:1e:78:28:ad:db:ec:97:8a:
                    da:8a:53:b6:ba:3b:df:cb:46:00:29:47:64:b9:0e:
                    1a:ef:6c:a5:6a:16:f0:4a:1f:68:57:db:e1:79:c7:
                    1e:24:25:83:79:6b:9b:1d:7a:e5:43:83:c9:50:0f:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:68:11:45:F1:BB:28:18:D5:02:3A:1C:11:C3:6D:C8:92:F6:A7
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/EDC6896617B611F08E260814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:ba:5f:1f:f8:11:97:f0:40:35:7f:7a:43:d1:a6:dd:ab:
         39:7d:d9:28:46:c2:58:30:67:e9:db:f1:1b:d8:9b:b3:52:0f:
         3f:7d:2a:75:87:fc:49:87:47:30:60:95:1f:3d:c1:c1:05:f5:
         52:fb:f8:91:ab:d2:e0:e5:a4:54:bd:9a:01:d0:be:91:84:8a:
         81:ba:25:45:14:35:12:b7:db:11:48:c1:72:de:0c:f1:f6:d2:
         93:dc:50:bb:4d:b5:91:86:77:d4:e3:93:15:ce:72:6d:79:ac:
         79:b1:17:e8:0e:c7:81:4a:39:72:e7:dc:13:e8:6b:e5:1f:73:
         da:1b:96:eb:86:d2:9a:b2:00:ea:72:71:3c:a9:e5:7a:59:99:
         9a:51:7f:93:50:4f:c1:66:aa:f9:6a:96:e3:e9:26:f5:d2:ac:
         70:6e:c4:c3:ef:df:8e:34:43:86:c8:bf:ff:88:41:dc:2d:28:
         51:9f:a7:b2:b8:88:2c:41:a7:ca:7b:5a:9e:f7:55:d0:74:c1:
         10:1c:6f:c4:5a:70:0c:ae:e9:37:be:97:3e:63:58:78:fd:38:
         e2:f6:8f:32:2f:81:72:e9:33:c5:46:92:33:a1:fc:c9:21:40:
         40:8e:30:24:78:90:ad:4c:86:7c:88:6a:86:5b:c8:0b:17:cd:
         27:0f:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 18:08:51 2026 by rpki-client