Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/71A61CE6A21311F1A684C2DF4A11F970.roa
File:                     71A61CE6A21311F1A684C2DF4A11F970.roa (raw, json)
Hash identifier:          4JtPxIYcBQBdP2hgHTuTytOYOe77Kdj1wyqXRiUFIFI=
Subject key identifier:   DB:82:3B:3F:AE:49:D3:EE:9A:38:C0:71:C3:D9:B1:CB:71:AA:30:CB
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0453
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/71A61CE6A21311F1A684C2DF4A11F970.roa
Signing time:             Thu 27 Aug 2026 12:33:02 +0000
ROA not before:           Thu 27 Aug 2026 12:33:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134788
IP address blocks:        103.187.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Aug 27 12:33:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a902e7e-f579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:8f:a9:85:d4:5c:27:00:d9:1a:9e:69:60:
                    6c:5c:2c:82:74:d2:a3:cd:09:14:27:9d:59:2a:f7:
                    76:22:6d:8e:77:ae:3b:c5:0c:75:21:60:a7:4b:27:
                    e0:75:9e:81:c8:15:05:68:b7:ec:57:20:91:6f:35:
                    b8:ad:74:47:11:2f:3e:a1:db:51:f5:91:47:63:1a:
                    57:da:cc:1b:ec:c6:7b:2f:ee:5c:ab:7a:0b:2c:32:
                    f0:35:0a:75:8f:8e:79:97:30:df:02:89:35:a9:f8:
                    87:16:8f:d3:37:22:1a:bb:1f:c6:ed:4f:5c:b0:39:
                    38:d8:a1:22:5f:68:32:d9:6b:d4:9b:87:c0:54:0a:
                    44:c1:9a:07:57:4a:05:62:02:74:5e:6c:b7:89:34:
                    6d:8f:5c:78:9c:5c:58:9d:22:82:49:04:a0:44:37:
                    8b:6e:00:a2:bc:e6:42:cc:2c:15:18:04:3d:50:d8:
                    93:e8:b0:8d:66:a2:a5:7e:dc:fc:d7:de:7e:fb:89:
                    5e:3c:b0:26:88:cb:04:30:38:dd:9f:f4:3b:3d:4a:
                    23:70:9b:22:26:7b:2f:a4:47:58:5b:19:31:03:c2:
                    98:c2:35:43:c0:6e:17:77:0c:ae:94:5e:05:14:36:
                    5b:7c:79:2e:3a:48:94:8f:59:0b:a0:2d:57:3e:11:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:3B:3F:AE:49:D3:EE:9A:38:C0:71:C3:D9:B1:CB:71:AA:30:CB
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/71A61CE6A21311F1A684C2DF4A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:96:36:1c:0c:35:b8:c4:5c:c9:6e:ed:3d:f7:be:0b:d2:
         75:1c:97:a5:94:42:75:c7:3e:34:eb:f5:58:6f:ea:02:86:7e:
         47:6b:e2:65:1b:1d:e8:1d:36:a1:eb:05:a8:4e:eb:d5:a3:7f:
         c8:bb:10:1f:36:af:30:1e:df:e3:36:e5:71:0e:e7:a2:5e:d2:
         03:29:56:61:5f:0c:44:57:4b:81:f1:29:6c:dd:7e:5b:b3:26:
         db:f4:da:ab:8f:de:0c:e4:4e:52:1c:f1:84:e8:f9:d0:3b:4b:
         ab:96:aa:47:47:0e:7d:d1:59:72:9d:cc:67:bd:f5:a3:08:20:
         6a:e3:e9:74:81:32:8c:67:0c:26:6b:4e:a1:b9:8a:65:92:9c:
         05:11:fe:29:d9:00:57:e4:4b:7f:19:cb:9b:ed:0c:35:97:69:
         2f:f1:24:70:5d:b4:8f:80:11:48:08:84:ec:55:7a:ee:95:bf:
         0b:a1:a5:e5:b6:52:3c:87:d6:8c:a0:6f:ab:cb:fb:1a:ff:01:
         92:73:2c:d8:3f:53:57:b9:59:f4:f7:0f:4d:20:b6:ff:fb:e8:
         ea:80:0d:93:a0:bb:75:61:b3:f2:20:0c:d9:b3:de:d6:08:78:
         bf:63:29:3f:ec:2b:81:59:0d:45:16:7c:fe:b9:dd:93:5e:03:
         c2:1d:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:55:42 2026 by rpki-client