Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa
File:                     E10C2796B42D11EEBCE04D61C4F9AE02.roa (raw, json)
Hash identifier:          5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=
Subject key identifier:   58:CA:02:72:FB:83:4D:5E:9E:D0:71:DC:FD:EE:B5:0F:49:E6:5D:F9
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       01EC
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 22:44:16 +0000
ROA not before:           Thu 06 Aug 2026 22:44:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142577
IP address blocks:        103.169.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Aug  6 22:44:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a750e40-1813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:2b:de:28:ca:56:be:96:9d:3c:2d:76:4b:
                    27:14:3a:14:10:66:c6:c6:e0:f1:f5:a6:67:32:6f:
                    9a:e7:47:ba:7d:1c:ba:ac:92:ca:d4:0b:20:94:7d:
                    48:94:82:64:17:ab:aa:7f:af:dd:c5:8e:06:85:fb:
                    0a:b5:31:bb:16:3c:02:c1:72:d5:1c:99:a5:ef:53:
                    b8:47:f1:fa:a6:90:da:d3:a5:ab:29:d3:da:4b:47:
                    b0:4d:4f:3c:09:51:0a:09:61:4f:e7:4a:d9:da:2b:
                    48:78:c1:9d:2b:c0:98:a4:8d:0c:20:42:d6:26:02:
                    49:75:31:4c:2b:d9:e0:58:b1:93:9d:ba:2a:6d:84:
                    9f:fa:59:37:e3:6e:ee:a3:31:cc:43:07:cf:45:99:
                    ad:06:4f:f4:74:0f:be:1c:f2:45:9a:8e:2b:d6:f4:
                    5a:68:c3:7f:93:e9:d9:f6:b2:92:35:6e:a2:9d:75:
                    66:68:44:b0:a2:d1:94:53:12:ae:10:85:a0:6d:f9:
                    3f:35:7d:f8:98:93:b1:d1:fa:16:d8:77:e8:2e:94:
                    ed:93:25:a7:12:e0:10:f6:19:8a:51:43:32:ff:c1:
                    49:70:3c:6d:b4:31:07:33:66:ac:ec:71:ec:5d:22:
                    f6:d0:67:a3:c4:6b:01:3f:1e:f2:ac:27:9a:bb:9a:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:02:72:FB:83:4D:5E:9E:D0:71:DC:FD:EE:B5:0F:49:E6:5D:F9
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:49:ee:a1:f7:76:63:33:51:e9:28:d5:38:76:f0:b2:42:
         c8:e1:fc:fc:e2:77:8f:de:0d:ba:a7:01:b5:29:bd:4f:6f:c2:
         1a:21:1d:ec:2a:9b:27:a9:6e:13:11:6f:f0:4a:77:b7:ed:15:
         4f:c7:11:72:52:5d:96:bf:7d:a1:d7:70:b8:71:6b:c5:15:b4:
         b8:c3:00:ab:69:35:1d:25:60:37:8e:be:2f:64:15:a8:6a:73:
         b9:71:fa:f7:06:65:81:3f:c1:45:e2:71:ea:79:4c:37:0b:2e:
         9f:2b:58:d5:ea:89:33:cd:db:9e:36:c2:b5:21:84:84:d4:d2:
         bc:f1:3c:87:af:7e:01:99:db:17:eb:26:17:98:63:ac:01:7e:
         5c:68:ea:e6:93:8d:4d:0b:6a:3c:e5:b8:db:74:74:81:58:a6:
         41:25:0e:04:44:af:87:b2:93:c3:71:89:8b:2e:93:97:5f:d4:
         d4:79:85:53:bf:f8:4b:b7:e1:61:83:78:2e:db:da:46:85:fe:
         20:0b:57:4e:f3:45:c5:da:98:a3:b9:63:04:2c:cb:05:4a:f3:
         81:41:9c:d7:32:10:49:bc:50:b0:eb:ad:a4:d0:bd:47:19:76:
         b3:4e:8c:86:51:a8:05:6b:55:1b:c2:ff:23:26:d9:84:a6:88:
         e2:1f:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:16 2026 by rpki-client