Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
File:                     A8F83B2E202911F08EABDC87C4F9AE02.roa (raw, json)
Hash identifier:          pw/61FZr7/lugjrDqtF6xp1FJa9QRFbpKnaKiRecV50=
Subject key identifier:   1F:04:10:00:09:60:F0:D5:E7:92:C5:24:EB:1E:9F:7D:60:85:7E:4B
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       01C2
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 06:54:57 +0000
ROA not before:           Mon 03 Aug 2026 06:54:57 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     142267
IP address blocks:        103.129.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Aug  3 06:54:57 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a703b41-e507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:44:db:14:24:f9:f4:86:1a:b5:f7:06:aa:
                    23:f1:7a:89:9b:86:49:eb:74:6a:61:1c:83:b6:2f:
                    f2:b2:fd:ee:58:e7:84:34:ae:51:bc:67:77:d2:a7:
                    00:3b:40:3f:39:90:82:6e:3d:ea:8a:a8:26:74:69:
                    1e:6f:e2:f3:9c:c1:c4:0f:da:2f:bb:83:ab:f0:87:
                    ee:53:0e:37:df:ba:b5:76:9f:02:c5:d5:1c:7e:48:
                    f5:8c:a8:d6:fd:eb:7b:57:38:31:24:3c:c2:ba:fd:
                    f4:91:a7:66:fa:4e:85:b4:7e:70:d6:93:c6:c4:74:
                    51:4d:fb:39:bb:97:e1:4d:3f:3f:1b:f3:c0:bd:87:
                    58:b8:39:8c:45:61:4f:fc:39:d0:b5:f6:2a:f7:70:
                    45:4a:73:27:78:71:fe:bc:c9:f2:f8:26:d8:bc:cb:
                    06:22:cc:cf:99:2a:b2:60:7a:e9:d1:24:09:92:b6:
                    6b:d6:42:32:36:c1:ea:0c:8b:94:55:dc:09:41:43:
                    b2:10:d4:b7:7b:0d:c2:41:17:ee:f0:5e:e1:6f:0f:
                    90:7c:b6:67:d6:97:f5:18:fd:ff:fd:28:8f:c6:3a:
                    92:23:27:dc:56:28:21:1e:80:f3:1e:62:4f:37:d1:
                    c1:7f:9f:4b:7f:0d:7d:86:ff:de:7e:fc:90:e1:41:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:10:00:09:60:F0:D5:E7:92:C5:24:EB:1E:9F:7D:60:85:7E:4B
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/A8F83B2E202911F08EABDC87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:dc:5e:74:8f:46:6d:23:dc:c8:99:a0:cd:10:df:3c:11:
         77:01:33:f3:f4:09:f1:69:c0:59:69:94:27:0d:ab:dd:6c:bd:
         a1:c7:2d:16:e8:bd:2b:62:8d:9f:9e:c7:0b:66:db:0b:b3:ed:
         0d:c2:15:93:b7:54:2c:c7:62:97:90:07:05:f4:68:18:bc:93:
         85:9d:17:8a:4e:12:54:6c:fe:a4:c9:8a:1b:5b:91:17:f2:56:
         9d:25:ee:66:5f:cc:7d:2a:91:70:a1:96:bd:28:fe:34:e8:11:
         db:61:75:18:6b:b7:f0:6d:53:cd:c9:e1:65:b4:33:7d:01:de:
         0f:c8:9a:9e:af:aa:76:db:56:3c:28:c7:65:18:a9:8d:91:c0:
         3f:f6:64:2b:75:f8:db:3e:84:75:61:f8:cf:47:c8:c7:07:87:
         be:ec:6c:d8:79:69:60:76:5f:7c:b2:b5:36:cf:16:36:b9:1d:
         78:d1:93:5a:66:fb:0d:a0:bb:33:c0:39:6c:21:95:91:a1:78:
         07:02:8b:f5:74:f0:4e:26:39:70:16:a8:85:c4:38:72:f6:82:
         58:a4:dc:2a:8f:2a:c0:a8:99:de:bc:df:d7:06:17:eb:3e:21:
         5a:d5:00:5d:91:ab:bf:0c:44:ac:b9:b1:aa:de:de:a2:64:5e:
         28:ac:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:42:59 2026 by rpki-client