Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa
File:                     851D827C977511EBA99DCE72C4F9AE02.roa (raw, json)
Hash identifier:          b2HFAZWqbmjxGG1BiTFKA8Smfl3OYOZD2WwpabEkiK8=
Subject key identifier:   3B:46:0D:E8:DE:3F:E6:4A:C1:BE:37:4F:E1:47:97:90:2A:1C:D0:3D
Certificate issuer:       /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial:       0710
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:45:15 +0000
ROA not before:           Tue 28 Jul 2026 22:45:15 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     137069
IP address blocks:        103.164.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
                          rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
        Validity
            Not Before: Jul 28 22:45:15 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6930fb-26a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cb:1c:88:64:d6:9d:66:05:df:23:c4:c2:75:
                    a3:d9:b1:83:ee:5e:bb:a5:c3:4d:44:1b:aa:d9:ad:
                    b7:90:53:1e:74:ed:94:71:49:4d:8e:ce:99:9b:3b:
                    88:2b:e2:ba:8c:3a:ab:b3:15:52:03:9e:9b:c9:09:
                    5d:1e:05:36:00:2f:60:03:a7:9f:77:5d:25:3a:b4:
                    67:51:06:a5:36:f8:db:29:69:63:d8:01:ed:45:59:
                    93:c9:15:26:17:29:4f:76:7c:30:23:b6:ea:e3:52:
                    ce:8b:85:cf:0f:61:8d:3e:30:ff:fb:31:13:6c:c5:
                    23:f7:a8:bf:b8:6a:e4:13:e7:84:8f:ff:3b:81:1e:
                    68:91:cc:27:0c:d5:3f:a0:19:ff:6d:91:b1:2f:de:
                    78:9b:a4:6a:08:9d:cb:41:67:82:11:2b:e8:fc:3c:
                    0b:cc:5d:57:18:12:6d:12:03:86:6e:13:02:25:d3:
                    48:25:96:26:84:fb:bc:0e:13:df:39:91:e7:1a:4c:
                    13:85:57:df:50:57:3f:c0:5b:5a:1f:f3:2a:6b:c1:
                    51:d2:a1:cd:2f:33:1a:31:3a:c3:b2:6e:df:15:43:
                    d2:46:ae:13:95:49:c5:7a:64:92:be:97:3a:10:ab:
                    b0:4c:f9:8d:59:90:81:cf:e2:bd:61:45:90:8c:50:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:46:0D:E8:DE:3F:E6:4A:C1:BE:37:4F:E1:47:97:90:2A:1C:D0:3D
            X509v3 Authority Key Identifier:
                keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/851D827C977511EBA99DCE72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:1e:c3:3d:8f:b6:c3:30:66:45:9d:5a:f3:88:b6:3d:ce:
         d6:ec:d9:98:ec:e1:b3:8d:f9:32:7a:a4:3f:29:46:58:17:65:
         27:be:e3:b1:95:e7:99:46:40:1a:e4:a0:c5:03:ab:63:01:84:
         9d:ec:08:9c:23:cd:d8:5d:93:56:8c:15:23:0c:b1:c5:28:ea:
         02:ce:1c:64:6a:0e:a5:da:31:fa:66:ba:fd:d3:a7:94:d8:a2:
         94:fd:a4:76:dc:23:1a:34:d6:c2:11:da:f3:ed:13:f8:27:af:
         67:93:b9:12:98:32:62:fd:2d:e1:16:24:5f:28:d9:1a:6c:b8:
         ed:c3:77:3b:68:6f:ee:65:79:05:34:10:3e:90:e0:76:99:39:
         61:d4:a2:16:90:4f:10:e2:6c:30:d1:8e:6c:c9:d1:53:15:a2:
         ed:02:51:6b:41:7d:eb:56:b8:e9:b9:1e:9b:2a:cc:95:7b:eb:
         a4:56:ab:84:97:9c:a0:03:9a:85:b7:99:58:8c:ce:94:0a:f0:
         11:9b:fb:14:f3:00:24:e1:3c:96:c9:ca:02:5f:e6:3a:f6:a7:
         dc:2d:0f:5d:09:96:34:d8:2e:19:90:95:40:66:c8:59:29:28:
         f8:ea:85:8e:87:ab:93:ef:f5:8f:7e:d7:1b:a1:2a:aa:fd:29:
         2e:18:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:14 2026 by rpki-client