Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/7A93FBCE92CA11F08DC37F48C4F9AE02.roa
File:                     7A93FBCE92CA11F08DC37F48C4F9AE02.roa (raw, json)
Hash identifier:          +gAjMETIZVTwgsDFO2qKEqW2MhjTXO1u1mjqlUHpdbc=
Subject key identifier:   09:DF:59:40:4B:57:B3:61:3C:7A:DE:D0:CE:BB:58:22:22:B0:CD:FA
Certificate issuer:       /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
Certificate serial:       05ED
Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/7A93FBCE92CA11F08DC37F48C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 23:44:47 +0000
ROA not before:           Tue 18 Aug 2026 23:44:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     138415
IP address blocks:        103.139.198.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl
                          rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 22:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7
        Validity
            Not Before: Aug 18 23:44:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a84ee6f-b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:a0:07:45:01:78:8f:24:98:b5:21:57:65:
                    cd:ec:f6:38:10:60:42:da:b1:77:30:08:50:04:d3:
                    ce:68:02:65:2d:f5:af:44:62:b2:c3:a3:98:f6:a9:
                    19:5c:f0:db:47:70:34:98:d2:8a:19:e0:82:5d:b2:
                    6f:e9:77:20:16:0f:d0:28:58:54:f3:25:3b:5b:86:
                    72:b8:61:f5:da:0a:3d:44:a4:3a:1e:5e:0d:5c:c6:
                    20:71:57:2d:6d:d0:1a:a4:00:e1:f1:e0:66:eb:b5:
                    ce:33:76:b7:27:53:d1:7e:3c:2f:3e:94:4f:93:c5:
                    f7:7c:41:71:87:d8:e6:0f:8e:1c:98:c7:8a:d9:48:
                    b9:41:f0:e0:bc:10:91:57:dd:aa:27:3c:3a:9c:3e:
                    fb:bb:ef:b8:2b:a9:ef:90:e7:8f:d5:9b:c3:14:e5:
                    32:21:8c:3f:02:61:85:b9:b0:0c:b5:f8:05:4c:bd:
                    13:cf:dd:42:e4:e7:45:f1:77:9b:ef:a2:bb:75:90:
                    cc:c5:20:b8:37:c7:c6:5a:04:bb:5a:df:90:ef:96:
                    94:ab:50:b7:4c:d5:b6:5e:ab:50:a6:b4:54:df:19:
                    b2:48:0e:19:38:2b:0a:ca:67:a6:f5:83:4b:de:1c:
                    a4:d1:16:10:b3:2d:63:d0:20:2a:85:8d:af:e6:4f:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:59:40:4B:57:B3:61:3C:7A:DE:D0:CE:BB:58:22:22:B0:CD:FA
            X509v3 Authority Key Identifier:
                keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/7A93FBCE92CA11F08DC37F48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:71:c6:5a:35:00:b5:cb:3c:0b:53:a2:c9:43:22:a7:d7:66:
         8e:39:60:1d:98:99:27:45:00:78:fa:5d:bf:aa:5b:4f:01:b5:
         83:f1:cd:2f:46:35:b5:1e:39:86:44:bf:f9:7b:d9:76:be:d9:
         f7:dc:34:33:85:22:a7:a7:fd:75:73:c8:9c:29:10:30:45:78:
         8a:34:3e:57:5d:4a:da:b3:29:d7:f5:27:4b:85:01:c5:ae:c2:
         b4:69:d3:42:52:26:6f:eb:8e:bd:fa:26:4c:e9:33:ee:32:79:
         05:52:dd:cc:31:58:a6:ae:cc:e9:34:49:3c:a2:de:bc:ab:ce:
         3c:76:14:f0:69:b2:d2:21:a8:a0:47:73:b3:b0:1a:b4:4b:83:
         00:b2:c3:c7:b2:e7:93:98:6c:cf:84:0a:e3:3f:7c:9e:3f:46:
         d7:25:ee:82:5d:18:0c:d2:c5:69:8f:8d:70:e3:7a:e9:36:a4:
         c4:d4:6d:7a:82:74:22:99:27:53:f8:d9:da:5c:20:c4:3a:09:
         e0:ae:3f:be:bd:2c:fa:8d:16:c6:bc:65:6f:28:d6:e8:ab:d8:
         e4:d3:39:8c:cf:3e:d0:72:64:1c:af:c7:82:b8:c2:e2:a7:15:
         22:96:c1:e5:0e:9c:6e:04:46:6f:de:23:5f:bc:ca:dd:e4:bf:
         20:1d:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:01:48 2026 by rpki-client