Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/1D7B0544C39911F186A509344911F970.roa
File:                     1D7B0544C39911F186A509344911F970.roa (raw, json)
Hash identifier:          jtT5H+wXxPuwmDZD8Y3YfUWj6W+wzzGw0C7crTdmcwA=
Subject key identifier:   47:B3:8A:D1:D3:5D:4B:80:89:C7:A1:BD:78:54:7F:AF:E6:64:34:16
Certificate issuer:       /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial:       0941
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/1D7B0544C39911F186A509344911F970.roa
Signing time:             Fri 09 Oct 2026 04:23:02 +0000
ROA not before:           Fri 09 Oct 2026 04:23:02 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.154.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
                          rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
        Validity
            Not Before: Oct  9 04:23:02 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac86c26-a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:25:74:2e:b6:f6:76:c0:09:d1:f0:0f:ea:
                    34:aa:eb:62:03:96:3e:21:0c:5b:20:8e:f1:70:38:
                    67:d1:a6:d0:8c:73:1f:49:c3:7b:27:86:5b:d9:85:
                    41:ce:df:50:dc:06:24:57:67:ab:47:09:b0:68:11:
                    bb:e4:5e:41:a0:bb:81:37:8b:de:26:85:82:55:72:
                    84:4f:9b:cd:70:be:9a:ca:52:a2:4b:f1:5f:d6:9d:
                    90:8f:74:8c:dd:b9:a5:4e:55:aa:8f:b8:2c:96:ed:
                    bd:dd:7f:bc:a5:6e:21:f7:d0:4b:75:91:2c:5c:f1:
                    7f:0e:fe:83:28:f6:34:33:53:4f:34:23:b1:9c:dd:
                    cd:2b:6b:11:fd:b1:85:46:80:9a:b0:6d:58:29:2b:
                    2b:92:57:3e:b6:d2:0f:a6:b3:fd:c2:66:f2:2d:95:
                    a5:ca:5e:dd:01:0e:20:d2:8c:42:11:b7:35:8e:24:
                    ae:08:7f:92:9e:d3:5e:cb:e7:b0:26:cb:d1:ba:0b:
                    44:10:6a:dd:fc:98:8f:0e:47:12:4c:94:0f:54:0f:
                    b4:17:c8:52:fb:af:7d:a9:f5:17:35:33:5d:c1:80:
                    a3:1f:69:7d:b7:ba:e2:94:d5:43:32:a3:11:9e:00:
                    28:e6:35:a7:25:ee:70:7f:7e:76:58:c1:95:d7:1f:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:8A:D1:D3:5D:4B:80:89:C7:A1:BD:78:54:7F:AF:E6:64:34:16
            X509v3 Authority Key Identifier:
                keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/1D7B0544C39911F186A509344911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:74:dc:e8:5d:4f:1b:2c:ac:62:ab:78:79:46:99:66:5c:
         df:d1:40:ba:bd:f1:ca:04:5c:ff:42:0c:0d:d9:4d:87:60:f1:
         12:69:b9:eb:af:c9:dd:d0:48:33:93:96:14:da:a3:58:81:0c:
         c5:bb:7a:b4:de:3d:ab:82:44:45:d3:2a:bc:c3:92:2c:e4:8b:
         65:3a:f4:1c:9f:43:99:77:4f:c5:ab:78:44:43:3d:8d:04:42:
         9a:17:ab:ad:6d:fb:24:2e:2e:c1:51:66:6f:79:1b:c6:e9:fb:
         49:4f:96:f9:b8:6e:a3:c3:44:05:29:2d:58:8e:31:b6:fb:14:
         1b:66:0b:11:0a:a8:b1:ab:dc:20:9f:e2:3d:0f:5a:e6:5d:55:
         49:91:60:a6:60:a0:1c:31:b4:69:fe:0d:d1:8d:4a:1e:5b:25:
         f3:40:cd:27:4e:95:03:f8:97:64:f2:bc:0a:da:36:25:89:4f:
         3d:60:1a:22:2d:af:d6:4e:b2:80:05:c3:9d:94:da:8f:fe:62:
         e2:f6:96:8f:fc:f1:41:af:67:a9:8f:73:72:78:a4:ca:02:72:
         ef:e9:b9:10:e6:b5:5e:48:6f:f5:72:4b:2f:3e:60:a5:26:1d:
         b1:6c:01:9a:1e:f0:1a:63:33:64:24:3d:ae:7e:2c:6e:da:69:
         7f:de:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:50 2026 by rpki-client