Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
File:                     9EA2D73236D311EF89295180C4F9AE02.roa (raw, json)
Hash identifier:          wElAVhceOOtVv2tRoO1fTHPPk5ItW30kiAKwSsqaUZc=
Subject key identifier:   BE:B2:1C:D1:01:E2:4A:A9:29:06:7E:72:34:85:83:04:5F:46:57:3C
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       0793
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa
Signing time:             Wed 14 Oct 2026 22:42:36 +0000
ROA not before:           Wed 14 Oct 2026 22:42:36 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     151952
IP address blocks:        103.143.185.0/24 maxlen: 24
                          103.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 16:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Oct 14 22:42:36 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad0055c-a32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:df:ce:ab:16:e4:71:5a:85:fd:6d:5b:89:
                    e4:ef:12:99:a4:20:23:fc:a7:f1:31:1a:b1:ae:84:
                    34:77:98:a6:e4:4d:39:60:c9:56:32:11:d6:fc:b7:
                    35:fc:e0:9b:3c:0b:27:0e:a5:87:68:f7:80:be:cb:
                    1c:fe:92:8f:dc:8d:9a:8f:fe:07:36:36:df:3f:64:
                    0e:9e:dd:a2:ac:f3:1c:e5:34:cc:8d:d3:81:74:79:
                    3f:66:1c:d7:95:93:5d:6b:66:1a:d4:4d:b9:60:27:
                    c0:7e:b3:47:1d:69:2c:f2:a5:d0:63:36:53:c9:cb:
                    37:f5:9d:9b:bd:30:b7:9b:a5:53:d7:d4:fc:0d:bc:
                    e0:05:7d:30:12:5a:30:d3:82:fb:a4:d7:1d:5a:3d:
                    53:31:42:de:b8:80:50:41:f5:2c:be:d7:30:75:29:
                    da:00:0d:2a:73:e1:96:67:4d:d6:ab:ab:a8:5d:6c:
                    77:ed:77:3e:c7:35:9c:f5:bc:0a:37:05:95:34:b4:
                    b9:1f:ae:72:a9:37:26:be:39:ec:04:3a:34:a9:76:
                    a6:ed:fb:b4:80:90:af:7f:e1:ca:80:2e:f6:57:05:
                    5d:fa:29:3d:94:e8:7e:22:80:a4:54:37:bf:e2:96:
                    f6:f7:06:17:3c:36:ea:d0:ca:fe:83:ce:91:ee:46:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B2:1C:D1:01:E2:4A:A9:29:06:7E:72:34:85:83:04:5F:46:57:3C
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.185.0/24
                  103.168.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:79:1f:5a:55:fa:7f:e2:6e:52:1d:38:7c:3e:48:55:3e:
         43:76:4b:9c:b6:91:b0:e4:f2:fc:7a:a5:1a:95:72:f8:6b:63:
         9b:f2:a6:ea:92:66:3e:9d:2e:f3:31:93:81:df:d0:14:32:0c:
         15:98:37:0c:97:fd:88:57:e8:2e:09:42:b4:2e:90:7e:8d:d1:
         40:6c:a3:97:78:00:d8:cb:08:f9:1e:0e:f6:5d:6b:4e:72:8f:
         fa:f2:a8:f3:24:c0:82:59:da:18:7d:4a:d5:f7:4c:3a:a8:17:
         29:a3:3d:85:a8:04:2f:1a:2d:ff:cd:dd:ae:99:17:68:0c:ce:
         0c:6a:89:4a:bf:c4:a2:61:ff:cb:68:b6:05:3f:71:ea:10:de:
         49:28:0c:7a:01:d2:4f:b4:fc:0b:cb:96:4e:cb:67:a5:18:22:
         81:4d:8d:f5:f5:14:90:18:64:7b:f1:28:9b:5d:ca:22:b8:1b:
         c3:3f:63:c4:af:93:2d:cc:d2:4e:b1:47:1f:cd:eb:84:b3:c0:
         a5:af:b6:62:e9:75:fa:27:ee:da:c0:35:4b:72:d7:7a:00:3c:
         c9:64:44:8e:c5:b0:1e:e6:04:ec:e9:97:18:41:b4:ba:2f:1f:
         9b:e4:8e:ad:48:75:5d:d2:2a:a7:c5:38:43:ed:9c:7c:b6:2c:
         7f:2f:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:32:20 2026 by rpki-client