Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/74B133CAA2EB11F1AFE949014B11F970.roa
File:                     74B133CAA2EB11F1AFE949014B11F970.roa (raw, json)
Hash identifier:          jpsmNAeJXm9/rS9zpwSK8/DCHkzoASRFsnVivNpp/hw=
Subject key identifier:   8D:B5:66:2F:8A:9B:5B:B5:36:3A:22:17:A2:80:D8:CB:EC:85:97:78
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       03CB
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/74B133CAA2EB11F1AFE949014B11F970.roa
Signing time:             Sat 29 Aug 2026 00:49:47 +0000
ROA not before:           Sat 29 Aug 2026 00:49:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.189.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Aug 29 00:49:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a922cab-67ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:4b:f7:83:07:ba:e4:21:73:a2:73:66:a2:
                    38:f2:44:60:70:92:f5:9f:e8:c1:7d:32:0d:56:9e:
                    f0:4d:66:fe:33:40:67:4e:d7:bc:fd:5d:d6:35:18:
                    02:d6:cf:55:00:0a:f2:ed:05:28:87:dc:b1:47:9c:
                    6c:db:2d:f7:8f:74:02:f6:ef:07:a8:c5:5a:59:b9:
                    39:f1:45:56:4d:3e:cb:7a:8d:b6:1a:ec:f4:75:2f:
                    e3:b0:ab:79:6d:6c:fc:db:cd:19:b9:fc:58:54:60:
                    0f:44:ae:48:66:c7:7e:47:ff:72:f8:4f:be:60:b7:
                    08:4c:60:91:c1:d5:14:18:61:e1:67:1d:6d:dd:07:
                    44:26:5f:3e:ba:31:72:6e:e7:3c:d6:43:bc:ba:69:
                    8e:70:b2:f5:9c:7d:26:5a:c2:00:5f:5d:7a:b2:1c:
                    77:56:ef:82:2f:bf:33:0c:ca:fe:98:77:97:ff:73:
                    a7:71:81:35:71:3a:99:63:a8:be:f3:c2:08:e9:a1:
                    0e:20:90:56:37:b6:65:8a:4c:f7:ac:6f:2f:6c:58:
                    a3:f1:fd:03:29:5e:fc:91:5f:c0:33:4d:6d:a6:20:
                    0c:b0:6b:6f:06:74:aa:5e:37:c9:51:26:10:52:fa:
                    e2:8e:e4:77:ca:f9:4d:b6:c8:26:60:3f:a7:4f:ea:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B5:66:2F:8A:9B:5B:B5:36:3A:22:17:A2:80:D8:CB:EC:85:97:78
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/74B133CAA2EB11F1AFE949014B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:fd:4e:95:7d:55:65:f5:cb:8c:58:33:dc:ea:fc:84:8a:
         37:51:b2:17:28:d4:20:da:13:0e:ad:35:1e:e0:55:26:41:8d:
         d3:e0:e3:84:ad:6f:7a:06:68:42:c7:4e:03:64:2d:bb:e2:31:
         f6:e0:26:d0:e9:0f:3a:0c:82:8d:7f:82:8f:f1:53:01:da:76:
         01:ca:98:ee:43:49:99:7d:f0:94:a3:a5:15:de:39:7b:40:46:
         c5:a3:44:9f:e0:d6:7c:8d:15:80:d4:e8:da:51:d2:10:00:63:
         be:11:35:85:f6:70:6c:fb:ae:45:aa:50:b4:99:49:98:2e:ad:
         41:cb:c6:bd:88:c7:b1:d1:42:2c:e3:21:c2:1d:77:56:a8:85:
         c7:a6:d4:7b:46:47:56:77:90:d8:26:6c:06:c6:9a:d3:7e:3e:
         0c:19:0d:22:4c:5e:d4:e5:42:6b:34:b2:ae:12:e1:f6:7b:a5:
         aa:91:6e:40:0d:c9:b4:42:b8:1d:59:20:93:bc:39:e7:ed:96:
         f0:dd:54:14:9e:61:e7:05:f5:c2:98:35:db:7f:92:99:5d:96:
         cf:cc:61:4d:3e:e7:5b:9b:70:35:8b:0d:24:de:b6:bf:de:5a:
         21:3d:ad:88:e9:85:a8:23:f9:f2:f5:b5:77:27:44:c5:44:c6:
         b4:54:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:49:26 2026 by rpki-client