Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/2A0F594C07B911F0B93D3034C4F9AE02.roa
File:                     2A0F594C07B911F0B93D3034C4F9AE02.roa (raw, json)
Hash identifier:          Yk6u9VugO9U1TqEChv9b/AYoHI6MIxkoHzktL/CD33g=
Subject key identifier:   C0:82:3E:65:7E:88:EC:64:E3:71:2F:43:CF:BB:28:06:7B:C3:49:32
Certificate issuer:       /CN=A91836D8/serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88
Certificate serial:       010A
Authority key identifier: D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/2A0F594C07B911F0B93D3034C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 07:55:46 +0000
ROA not before:           Wed 05 Aug 2026 07:55:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45150
IP address blocks:        103.246.48.0/23 maxlen: 23
                          103.246.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl
                          rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836D8, serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88
        Validity
            Not Before: Aug  5 07:55:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72ec82-995c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:02:97:ee:91:08:fc:79:33:d4:e8:9f:9f:
                    be:eb:37:5b:f0:35:f2:6d:63:f5:71:18:7d:94:d8:
                    a6:68:67:10:1d:72:df:a1:4e:05:a4:60:aa:31:f1:
                    c7:f5:35:bc:e8:88:88:25:38:1c:9c:75:a9:72:45:
                    59:40:31:51:81:50:3a:dc:54:a6:7b:71:8c:7a:48:
                    50:fc:76:f3:bb:ba:94:8e:86:65:1d:e4:49:b8:20:
                    c2:a7:91:05:bc:a1:7d:a5:cc:47:ef:14:b6:58:2a:
                    a8:3a:a0:b2:5b:2c:8a:14:c0:83:25:ff:e5:31:e6:
                    ee:3c:0f:36:47:91:68:cd:8f:10:5d:61:44:d1:cf:
                    13:e8:07:43:c4:06:f7:ee:40:24:7b:16:59:ca:ee:
                    28:d6:d2:8d:fb:f2:84:9c:77:d3:12:39:14:85:b0:
                    6e:98:db:7c:ae:1e:05:be:60:57:d3:03:45:29:ad:
                    e6:fc:e5:21:25:54:23:78:b6:32:fb:d3:c4:e7:6a:
                    8d:37:99:a7:85:4e:2e:cd:25:5e:e4:97:5e:55:ec:
                    02:f6:4f:f1:15:b2:a1:6a:e4:35:8f:0a:51:5b:5b:
                    32:32:6d:5e:f3:d5:4e:25:84:2c:a0:6a:26:14:4e:
                    0a:e8:3c:d1:74:25:80:71:fd:b5:d0:78:34:ec:a3:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:3E:65:7E:88:EC:64:E3:71:2F:43:CF:BB:28:06:7B:C3:49:32
            X509v3 Authority Key Identifier:
                keyid:D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/2A0F594C07B911F0B93D3034C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:16:c0:5d:22:1d:0d:a4:c2:3a:8c:2c:6f:ab:44:24:35:
         34:76:e5:cf:fc:89:ab:fe:cf:06:d5:11:c6:a5:e7:63:87:83:
         58:e7:59:5a:15:90:d6:bc:08:3a:4e:c3:93:17:29:72:58:39:
         3f:2b:72:67:e2:1a:22:af:ee:16:39:c9:62:4b:5d:84:72:2a:
         00:73:18:b1:ab:7b:f0:ef:af:7c:49:02:33:0f:f4:68:b5:25:
         65:a2:17:0c:8e:1b:49:cf:88:0d:cc:cc:6c:37:f6:fb:8c:1e:
         a5:31:4c:78:ee:fd:94:41:be:68:c8:3a:98:40:23:f1:9b:b9:
         4e:4e:00:72:51:d3:66:50:f0:d2:74:be:1c:b5:cb:fb:0c:5e:
         ab:c3:7b:00:51:39:a3:ca:f1:a8:2b:8a:46:bd:2c:07:a4:fd:
         9d:7e:ae:3c:63:ca:9c:66:22:8b:e8:5d:2f:85:6a:e2:e8:c1:
         5b:20:90:08:0b:23:4f:5d:92:4f:7a:6a:5e:55:bf:42:f7:3e:
         6d:42:0e:ba:02:ef:43:95:ae:ae:18:a0:ca:73:f2:11:28:c8:
         3b:d4:0f:26:ff:fe:66:65:5c:fa:38:fa:bf:b3:f2:b9:89:f8:
         5f:a3:04:87:49:39:86:93:6d:4f:26:6c:21:3f:52:55:e7:e3:
         0d:a5:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:29 2026 by rpki-client