Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/020E45829D3D11F19D7318D34C11F970.roa
File:                     020E45829D3D11F19D7318D34C11F970.roa (raw, json)
Hash identifier:          T2o2RjpRBuD7XUu6j46OuNeevFzXzJVxJcaULjksQrc=
Subject key identifier:   6A:1E:8C:9B:38:CA:F4:DB:CE:B6:93:07:BC:C0:47:6C:29:EE:DA:6C
Certificate issuer:       /CN=A9183B58/serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
Certificate serial:       1A
Authority key identifier: 2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/020E45829D3D11F19D7318D34C11F970.roa
Signing time:             Fri 21 Aug 2026 08:47:58 +0000
ROA not before:           Fri 21 Aug 2026 08:47:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     24516
IP address blocks:        103.145.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl
                          rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B58, serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
        Validity
            Not Before: Aug 21 08:47:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a8810be-19f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:c6:dc:ec:1b:13:6e:6d:7f:c6:dd:44:53:
                    ca:c2:a8:af:1a:82:6f:a1:61:b7:c3:55:2f:e3:f7:
                    9e:78:5d:8e:59:41:ca:b7:c7:e7:ed:aa:22:41:36:
                    27:06:fd:a0:7f:db:eb:1b:ca:0f:25:7b:b2:86:6e:
                    08:9a:31:16:3a:48:26:59:41:86:46:9c:06:44:17:
                    f9:6e:6d:31:d8:6e:e6:7d:f3:34:13:39:25:5b:0c:
                    5f:57:bc:6b:92:40:b1:b2:76:48:29:60:b3:03:c9:
                    dd:8f:dc:8b:c2:c6:5c:8a:4c:84:8d:4c:66:7b:d3:
                    df:3c:06:ee:4b:71:00:32:c9:b4:c8:f9:f5:4c:ec:
                    31:c5:48:89:ef:75:35:9e:b0:0c:81:fb:4c:70:f0:
                    30:f4:c6:d2:3b:02:1d:c1:f8:ea:b5:d8:27:a5:55:
                    f4:3b:8d:1c:b0:f6:61:df:1b:1a:9e:da:65:85:61:
                    59:58:85:fb:5f:2f:28:f0:f9:ef:0c:05:28:e1:dd:
                    12:5a:9a:7a:ef:f7:85:8f:ae:dc:c6:2a:7a:6e:d8:
                    17:03:ec:a9:cb:07:f1:01:2f:b7:9f:30:94:01:73:
                    28:97:0b:9f:c6:c5:64:1d:4a:19:41:ad:92:23:b4:
                    41:fd:af:32:07:73:ab:9b:dc:15:77:31:a3:53:72:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:8C:9B:38:CA:F4:DB:CE:B6:93:07:BC:C0:47:6C:29:EE:DA:6C
            X509v3 Authority Key Identifier:
                keyid:2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/020E45829D3D11F19D7318D34C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e7:07:38:df:c1:f9:e4:e2:ec:e8:ad:ce:d4:3d:52:23:ad:
         17:30:c1:61:6b:67:e8:f0:ea:bc:32:21:78:59:8f:d8:ea:c6:
         ac:59:51:c0:07:1b:11:fa:ce:6b:ad:f9:35:6e:0f:a8:68:8b:
         01:4e:93:26:2b:cc:81:15:6a:9a:34:ab:6b:92:3f:65:19:8a:
         7b:f8:22:17:31:b2:a9:41:ca:95:e1:18:f9:47:a6:a6:f3:2e:
         62:a3:14:d9:d0:0e:d6:60:44:9a:95:29:4c:5c:9f:67:49:96:
         fb:9d:f0:0c:7a:c7:d6:6e:4e:b3:d4:bd:8d:ed:ad:17:57:02:
         86:31:ef:5c:47:04:4a:4f:cc:5d:7b:fe:42:f7:bc:84:9a:31:
         f6:b1:74:cd:a6:59:67:4f:b6:77:ad:a8:5c:47:42:c0:6f:ab:
         64:5f:b0:e5:6f:0b:4f:88:cb:93:db:6c:f7:96:66:61:b0:f6:
         b9:05:43:f4:51:fc:12:fe:1e:cb:d7:15:79:a9:9c:ba:45:fe:
         fd:c5:fd:0f:d8:e6:d2:81:c9:7f:9f:86:6b:8a:49:d1:d2:d8:
         20:c1:68:ba:d7:da:24:50:49:15:bd:64:28:33:25:22:19:19:
         78:c4:e2:9a:f6:a2:93:a2:bf:d5:67:29:06:37:af:8b:a3:83:
         b9:2b:56:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:14:50 2026 by rpki-client