Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa
File:                     ED1A0478799811EF8437F77EC4F9AE02.roa (raw, json)
Hash identifier:          ug2s43GWzMKFMrncgOABRj1QzKIg9lUDoTvX8NWjTVA=
Subject key identifier:   2C:A4:30:CB:D0:22:EA:A7:10:DB:A1:E4:DB:EA:9A:70:4E:DB:85:94
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0538
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa
Signing time:             Tue 13 Oct 2026 00:48:19 +0000
ROA not before:           Tue 13 Oct 2026 00:48:19 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     207137
IP address blocks:        103.173.151.0/24 maxlen: 24
                          116.204.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 23:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Oct 13 00:48:19 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acd7fd2-5765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:93:4d:e3:98:05:98:fc:ee:39:39:54:74:
                    67:54:5c:fb:bc:01:41:b9:7b:16:f4:c3:de:94:be:
                    99:49:a8:6d:a4:05:5e:95:2f:19:91:71:4a:33:8e:
                    d8:b4:b9:b4:5d:74:6d:41:10:f1:a0:a8:b9:f2:3d:
                    c9:25:60:0c:7d:c4:93:16:6e:08:2b:01:0e:1c:95:
                    8f:19:52:a6:c7:63:00:0b:56:8a:c0:35:ab:fb:aa:
                    0b:bd:b4:ab:a9:c5:9e:04:b6:3e:50:6f:bc:49:d4:
                    95:a8:69:94:c4:cc:40:98:8b:9e:72:4f:2e:d3:b6:
                    88:81:55:d0:7a:72:3e:04:2f:1f:4d:c4:82:f2:5f:
                    ef:33:42:6e:7a:14:db:a5:3f:f3:71:ac:15:85:7a:
                    43:3d:37:1c:9a:4f:c0:0a:18:e8:e3:4f:25:41:47:
                    db:83:c9:34:1c:ec:b2:11:4e:f0:3a:e9:23:2d:a4:
                    8a:74:97:05:14:fd:df:29:29:65:81:13:3f:0d:ed:
                    91:b8:6c:71:4a:cc:cb:57:5d:5d:f8:86:2f:40:d8:
                    c7:b0:91:cf:48:25:8f:7b:12:45:ef:88:d7:05:b8:
                    43:21:f1:fe:0a:96:42:a1:6b:2b:76:94:df:d0:4e:
                    80:be:4d:d1:53:6d:ee:43:e4:06:cd:5a:29:1d:cb:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:30:CB:D0:22:EA:A7:10:DB:A1:E4:DB:EA:9A:70:4E:DB:85:94
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/ED1A0478799811EF8437F77EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.151.0/24
                  116.204.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:1b:60:31:90:2b:eb:b4:a5:28:8f:7d:16:a3:1d:15:21:
         83:c9:84:b7:78:fd:fc:fd:50:d7:bb:0e:4c:74:cf:ff:2d:ed:
         78:28:00:be:0d:75:db:bf:38:be:c7:32:8c:1e:d8:89:a0:c6:
         c4:0e:d5:7e:4f:67:95:8b:a2:6f:e8:3b:af:55:8c:bc:78:48:
         e5:27:eb:66:76:aa:7a:83:ee:e4:92:ba:ea:39:a6:2c:a1:8a:
         48:02:fa:0c:66:1a:57:c0:21:2a:bf:86:2f:f8:41:4d:c7:d2:
         25:c5:1a:01:bf:9f:62:e6:cb:cd:23:2e:54:97:ac:75:da:37:
         4d:33:81:ae:48:99:be:df:2c:1d:56:a4:d0:01:43:25:ff:b3:
         cf:be:7e:a8:3e:9c:37:9e:97:41:c0:6f:78:c9:14:de:8b:35:
         c3:5c:e0:2e:c8:51:18:05:dd:f1:09:74:2f:b5:e5:27:28:2c:
         0a:35:b8:e8:44:12:f3:d1:aa:f2:fa:2b:ec:11:c2:40:0e:59:
         e7:e9:7e:d7:1c:95:79:1e:83:1d:6d:80:23:1a:d4:a7:af:7f:
         38:7d:ea:d4:0e:5a:d1:d6:c3:f0:5f:06:f9:c3:a0:73:b7:2e:
         43:dc:c6:45:2d:7b:56:6b:ff:85:9c:b8:a6:00:66:02:67:cd:
         a5:73:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:50 2026 by rpki-client