Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/14553DF893F711F18D8243663911F970.roa
File:                     14553DF893F711F18D8243663911F970.roa (raw, json)
Hash identifier:          tj2oOYMVOIbsggb7cEy4mKeuFf8hW8OpJ6SdrtBFAtY=
Subject key identifier:   4D:9B:A6:39:97:A7:60:DE:EC:7D:08:5D:66:F8:96:A5:FD:63:D7:77
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       0253
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/14553DF893F711F18D8243663911F970.roa
Signing time:             Sun 09 Aug 2026 13:34:43 +0000
ROA not before:           Sun 09 Aug 2026 13:34:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     51847
IP address blocks:        103.151.172.0/24 maxlen: 24
                          103.151.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Aug 2026 23:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Aug  9 13:34:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a7881f3-21d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:b8:50:25:43:df:75:4f:ad:28:a5:c7:45:
                    09:20:9e:2e:96:75:7e:f5:c7:26:af:4a:88:44:29:
                    ab:a7:e1:86:4d:af:7f:b8:f4:a4:4f:43:d2:9a:79:
                    37:79:70:e5:69:d6:a1:0f:ed:86:0f:85:42:ca:39:
                    04:5e:9a:b0:b6:fb:b0:01:00:c8:74:0a:6b:92:19:
                    68:46:7a:07:25:72:37:90:d8:c7:7d:27:00:94:de:
                    b9:55:f1:f1:61:c1:cc:bd:0e:74:ed:e8:3f:ad:4d:
                    5a:ed:49:02:c3:9b:82:95:03:0a:82:e0:53:c8:52:
                    b9:0a:52:79:82:e6:da:0a:10:e0:d0:69:65:b1:0a:
                    dc:ae:ce:b2:45:ab:5f:d7:f3:09:d3:4f:4c:e4:d9:
                    5f:a7:41:c9:0e:2c:d8:94:90:ee:01:eb:67:3b:8d:
                    0d:d1:e0:5e:85:9f:f8:94:e7:42:8b:18:bf:87:cc:
                    5f:ee:66:30:22:25:72:ec:a9:d7:20:05:54:30:e5:
                    6b:9b:11:f0:f2:a5:df:0c:ca:40:f4:05:5b:75:38:
                    8c:45:00:2c:d7:20:c0:e3:56:5e:3a:57:d1:d4:37:
                    2a:b8:a1:4b:44:e3:aa:d4:0f:d9:b4:52:9a:55:1e:
                    fc:0a:7c:38:83:51:8a:15:c0:70:36:59:51:f9:73:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9B:A6:39:97:A7:60:DE:EC:7D:08:5D:66:F8:96:A5:FD:63:D7:77
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/14553DF893F711F18D8243663911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:25:d0:da:2e:d8:9a:35:80:15:1e:c0:39:b5:ac:07:2f:67:
         48:b9:3d:c5:3a:42:5c:cd:ed:50:93:48:dc:76:96:39:64:a2:
         97:04:16:74:5f:1a:f3:dd:d3:09:df:d1:ad:e4:2a:d4:12:63:
         77:63:a0:e2:66:46:2e:ff:a3:2b:b8:83:df:16:89:76:5c:df:
         d4:2b:2d:d5:8c:26:01:73:8a:41:57:4c:99:37:59:43:31:d2:
         c8:2c:ac:15:5d:91:f1:ee:83:e3:68:8c:c3:1d:09:d2:87:ab:
         45:98:c7:6c:8a:0b:da:d0:ad:6c:31:dd:5e:e9:d3:58:79:43:
         5f:60:02:a7:89:5d:de:bd:5b:4b:66:98:f9:ca:64:f5:e3:64:
         90:23:da:7d:1d:3c:fd:24:33:eb:25:cb:38:36:e8:cb:32:99:
         5f:ae:3a:d0:2a:c5:1b:90:1a:79:87:ae:64:6f:28:61:03:de:
         d9:5b:e7:d1:22:78:b7:16:dc:5e:08:6e:11:69:a1:3e:02:98:
         fe:8a:77:0f:a8:09:e2:5d:f1:df:10:16:46:32:d4:60:2b:48:
         88:10:1c:e0:19:12:a4:0d:11:c1:d5:74:cc:80:15:c6:63:31:
         12:eb:cc:88:3c:83:66:54:5b:b6:ca:cd:ac:c9:e9:42:aa:22:
         44:92:e6:bd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2
QkFGRTczODgwHhcNMjYwODA5MTMzNDQzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc4ODFmMy0yMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzO4UCVD33VPrSilx0UJIJ4ulnV+9ccmr0qIRCmrp+GGTa9/uPSkT0PSmnk3
eXDladahD+2GD4VCyjkEXpqwtvuwAQDIdAprkhloRnoHJXI3kNjHfScAlN65VfHx
YcHMvQ507eg/rU1a7UkCw5uClQMKguBTyFK5ClJ5gubaChDg0GllsQrcrs6yRatf
1/MJ009M5Nlfp0HJDizYlJDuAetnO40N0eBehZ/4lOdCixi/h8xf7mYwIiVy7KnX
IAVUMOVrmxHw8qXfDMpA9AVbdTiMRQAs1yDA41ZeOlfR1DcquKFLROOq1A/ZtFKa
VR78Cnw4g1GKFcBwNllR+XOSLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE2bpjmX
p2De7H0IXWb4lqX9Y9d3MB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz
QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA4MjkvNzY2N0JFRDA2M0EwMTFFQ0FEODI5OTFDQzRGOUFFMDIvMTQ1NTNERjg5
M0Y3MTFGMThEODI0MzY2MzkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5esMA0GCSqGSIb3DQEBCwUAA4IBAQAFJdDaLtiaNYAVHsA5tawH
L2dIuT3FOkJcze1Qk0jcdpY5ZKKXBBZ0Xxrz3dMJ39Gt5CrUEmN3Y6DiZkYu/6Mr
uIPfFol2XN/UKy3VjCYBc4pBV0yZN1lDMdLILKwVXZHx7oPjaIzDHQnSh6tFmMds
igva0K1sMd1e6dNYeUNfYAKniV3evVtLZpj5ymT142SQI9p9HTz9JDPrJcs4NujL
MplfrjrQKsUbkBp5h65kbyhhA97ZW+fRIni3FtxeCG4RaaE+Apj+incPqAniXfHf
EBZGMtRgK0iIEBzgGRKkDRHB1XTMgBXGYzES68yIPINmVFu2ys2syelCqiJEkua9
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:07:02 2026 by rpki-client