Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa
File:                     B57A8048A26C11F1A3A3B52B6511F970.roa (raw, json)
Hash identifier:          y2OHT/vLbiEsNPPOfmN97tHiYH0EfOmp/p0s1bJo294=
Subject key identifier:   D2:A2:32:0E:55:52:C0:C7:CC:40:C4:30:E0:4F:59:D0:6B:33:DA:82
Certificate issuer:       /CN=A9151AA8/serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34
Certificate serial:       03
Authority key identifier: D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa
Signing time:             Thu 27 Aug 2026 23:12:01 +0000
ROA not before:           Thu 27 Aug 2026 23:12:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7604
IP address blocks:        103.14.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 09:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151AA8, serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34
        Validity
            Not Before: Aug 27 23:12:01 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a90c441-2cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:2e:86:46:14:97:20:c3:8a:cf:07:a5:75:
                    9b:ca:04:2f:96:bb:a8:7f:61:84:3b:8f:19:36:af:
                    6e:df:6e:f3:92:91:64:1a:65:bf:63:53:28:11:10:
                    cd:55:ec:02:ec:fd:2b:33:62:04:67:13:b9:aa:92:
                    fb:11:c5:2f:81:ff:17:c3:e4:4b:cc:ac:b9:4b:40:
                    3e:4a:d1:d4:3d:32:88:a5:91:8e:6d:f8:da:a7:e3:
                    a4:ec:01:89:ce:e7:7c:02:21:9d:fa:4d:1b:a9:76:
                    6b:b9:fb:61:74:7b:fa:63:1e:9b:b0:fc:dc:74:37:
                    02:dd:18:b7:b0:b2:41:4a:97:35:6a:e1:12:16:06:
                    5b:92:55:0d:c5:09:73:52:41:84:8e:4a:30:da:7e:
                    91:30:7b:c8:13:8a:f9:36:c3:f9:f6:be:23:94:62:
                    3b:2d:78:5e:d9:20:0a:81:4b:ec:ed:5c:50:3b:32:
                    1b:f0:80:40:73:3c:dd:be:b4:f0:11:13:d5:b0:53:
                    57:d6:85:cf:e7:b4:1b:eb:35:67:a7:4a:ce:f5:2c:
                    d5:ca:b8:53:0b:cf:dc:44:88:5b:37:be:c8:a7:d5:
                    d2:f7:bd:20:80:fc:97:94:6a:5d:cb:2b:3e:28:36:
                    55:8b:e9:7c:02:99:f9:8d:41:e3:56:54:28:1e:1a:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:32:0E:55:52:C0:C7:CC:40:C4:30:E0:4F:59:D0:6B:33:DA:82
            X509v3 Authority Key Identifier:
                keyid:D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:fc:37:a9:b8:98:a4:41:91:c7:ec:8b:03:d4:f8:5c:f0:d6:
         91:c3:bd:63:8e:ef:f1:a7:01:72:bb:8c:0f:d6:2b:b1:99:77:
         fe:be:6b:8e:28:8e:b7:c5:cb:d9:ae:2b:dd:72:f5:25:f6:46:
         8d:b8:9c:6c:9a:de:5e:b1:e5:f1:b2:75:cc:3d:a4:ba:a3:04:
         9b:2c:e9:e1:bc:87:13:2e:23:80:01:73:c1:3f:9a:73:d1:ec:
         02:a4:0f:43:aa:48:a8:18:eb:5d:09:71:c8:21:15:eb:ed:d4:
         fc:d0:7f:05:29:c1:85:c3:4a:97:15:5f:bd:3e:9c:4c:26:17:
         e3:6f:ae:b2:13:c5:a8:fa:61:1a:a3:ee:f9:72:7e:94:d3:8c:
         d6:ee:b0:29:91:c0:55:b5:d9:56:c9:f6:d9:97:5a:88:7d:a1:
         0d:5a:cb:a9:8a:f7:a3:de:59:e9:8f:de:3c:c6:4a:d3:9e:e6:
         6e:6c:19:03:45:40:22:08:44:9f:b6:6c:11:7b:ce:af:95:25:
         51:5e:52:16:01:97:b5:50:67:62:e8:e4:bc:37:6e:27:b5:10:
         71:b5:6e:ea:f0:7e:94:55:36:6a:e1:a1:d7:4c:64:3a:a5:81:
         ee:69:5d:53:ac:fe:bf:6c:ca:8c:e1:ae:5e:1a:b7:2c:91:d8:
         dc:40:fb:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:15 2026 by rpki-client