Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa
File:                     E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (raw, json)
Hash identifier:          MoAvmDRbnJwkS+0vgmz3vs5HmfoZ+nx4vYyuMb9qNrM=
Subject key identifier:   86:DE:B7:4E:F3:E4:53:E5:D3:B1:22:CC:AD:67:78:5F:35:7D:A2:B7
Certificate issuer:       /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial:       01C5
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 05:52:10 +0000
ROA not before:           Fri 31 Jul 2026 05:52:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151789
IP address blocks:        103.140.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
                          rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
        Validity
            Not Before: Jul 31 05:52:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a6c380a-e500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:ed:a3:5f:05:1c:e3:6b:f5:a1:63:75:3d:
                    02:c0:4b:75:3a:8f:43:bf:23:4b:96:05:9c:1f:32:
                    18:f9:cf:fa:60:86:da:cb:7e:3a:af:3d:e7:56:27:
                    c7:20:a0:11:e3:b5:72:cb:31:cc:e2:07:19:2a:5f:
                    8e:24:02:91:cf:87:07:0a:9d:9a:73:c4:67:27:0e:
                    ff:89:f3:8f:aa:dc:d7:f5:88:a9:24:85:97:c4:64:
                    a6:36:f7:fb:4e:4b:c5:e7:7e:63:87:fe:c7:31:1c:
                    49:69:88:97:e0:12:eb:97:41:2f:27:28:ed:65:dd:
                    5f:97:d6:4b:c7:d6:67:54:53:af:58:e2:47:3d:dc:
                    97:b0:83:09:ab:fb:6c:bc:81:63:17:87:06:0c:d6:
                    0a:b9:8c:e5:02:ad:6a:d2:7d:7b:83:8c:5b:17:f9:
                    d7:39:41:7a:b0:eb:78:1c:54:b3:78:6a:d3:a5:28:
                    7e:eb:9d:b3:d2:51:1d:93:41:c3:a4:d3:95:76:e6:
                    02:e3:5d:b3:f0:15:46:5e:cc:e8:0b:96:b2:ae:dd:
                    b5:dd:1c:7d:c1:bf:b8:b3:48:c8:b0:4a:af:0a:ae:
                    0a:4d:e5:88:03:32:4c:be:e2:12:dd:1a:0f:a3:b4:
                    5f:2c:66:58:d4:7d:8a:64:64:b7:d0:c6:cf:33:37:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DE:B7:4E:F3:E4:53:E5:D3:B1:22:CC:AD:67:78:5F:35:7D:A2:B7
            X509v3 Authority Key Identifier:
                keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:8f:c3:38:9e:35:b1:ab:44:7b:ce:24:21:f8:d2:2d:43:
         d7:c5:1b:69:dc:3a:9b:de:2d:77:52:79:1a:1d:90:c5:a9:b9:
         83:7b:68:64:8d:4e:05:34:87:f1:fe:0f:26:1f:b3:74:88:b2:
         3d:96:08:e0:78:d9:3b:b1:e1:be:d5:ae:65:38:67:40:d8:68:
         1b:3f:4b:68:7a:28:5b:20:21:4b:9f:b5:7f:43:e9:f1:18:1e:
         12:09:d9:18:22:e9:37:27:2b:1f:e8:1a:91:a5:8a:c5:2c:1a:
         89:b8:af:e3:1f:91:a0:11:10:62:80:d4:7c:a6:91:32:a2:bb:
         9c:ba:d1:fe:6e:a2:90:aa:e9:75:06:66:10:4d:c9:e6:d3:10:
         0b:19:82:00:1b:fc:63:d9:90:96:7f:52:12:5a:c5:1d:47:f2:
         d9:f5:b5:69:20:81:13:75:98:49:7d:db:4b:b7:57:45:70:8e:
         c1:1a:85:45:f2:41:c1:6a:5a:c3:bf:ec:fa:fa:3a:5b:12:9e:
         6c:bd:52:5b:9d:c8:9c:15:cd:56:b2:72:c4:d5:93:24:68:ea:
         62:29:90:6e:2d:62:03:3d:eb:1e:35:f9:5e:5c:9e:2d:6a:94:
         83:fc:77:2b:6b:39:15:bc:08:f7:02:54:c9:57:aa:8c:6f:95:
         06:c8:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:41 2026 by rpki-client