Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
File:                     CD23AE8C403011EEA773CE47C4F9AE02.roa (raw, json)
Hash identifier:          pRc/IkNgce55Dz1RZWzogGzWAIJpPYBAulESUbUA178=
Subject key identifier:   7F:9A:A4:EA:D7:8B:E0:F6:79:B2:DD:9C:D7:91:5A:A6:79:44:A5:7D
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       02D4
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
Signing time:             Sat 01 Aug 2026 02:51:03 +0000
ROA not before:           Sat 01 Aug 2026 02:51:03 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134424
IP address blocks:        103.167.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Aug  1 02:51:03 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d5f17-4d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:e5:e9:21:1a:36:ad:2e:b3:cd:64:cc:11:
                    c6:75:90:c4:bb:e0:94:07:d0:c1:0e:de:53:3c:1a:
                    97:ec:b2:34:69:d6:97:b8:db:a7:a5:f3:af:62:96:
                    4f:b6:a3:2d:f7:e5:6b:31:c5:86:46:a3:fe:98:62:
                    38:e1:f7:11:77:d8:79:f4:aa:65:72:a1:bc:fa:6a:
                    e6:02:19:14:e1:b5:b2:fa:66:94:e4:6f:98:4a:df:
                    15:84:05:30:b8:f4:ca:93:4a:e0:62:28:88:05:92:
                    79:51:d7:1f:1f:f3:c2:d6:30:32:de:40:fa:59:11:
                    cf:b2:e7:ef:cc:25:ce:f3:b7:b9:7d:79:48:0d:fb:
                    c8:3c:e1:96:e3:ca:e1:d1:76:f4:6e:a2:10:b4:c9:
                    8c:9a:86:5d:40:22:66:c1:6d:15:80:14:d0:67:62:
                    bb:39:01:6f:38:85:2a:9d:b5:a8:14:14:7f:b8:2a:
                    cf:bc:3a:16:bd:f0:95:1a:0b:2c:b2:e0:f0:be:84:
                    8d:48:89:f8:92:0a:09:00:8a:f4:72:47:5b:e5:b9:
                    5c:b8:5d:80:bd:81:14:04:55:7c:3e:1f:91:8d:88:
                    1d:92:b3:38:59:f6:e6:79:b3:43:b3:06:a4:83:60:
                    1c:54:d2:c1:4d:a3:b6:0e:16:9f:4b:20:ad:d2:4b:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:A4:EA:D7:8B:E0:F6:79:B2:DD:9C:D7:91:5A:A6:79:44:A5:7D
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:21:83:2d:87:2d:45:a4:8c:2b:f7:e6:ff:6f:78:d1:0e:de:
         91:ec:ed:3f:6a:90:11:d5:b3:bf:70:8a:52:1a:9e:01:cf:a1:
         3e:57:c6:36:85:a8:36:f7:aa:59:46:cc:d7:9d:c7:79:88:d2:
         c9:9f:c3:60:6a:a7:c5:81:4f:a9:87:c5:75:51:e6:f2:f6:97:
         1d:f8:05:93:4f:13:b4:31:a8:62:f0:3a:0c:f0:3b:77:d4:5e:
         99:7d:f0:33:11:b6:fd:18:75:e4:21:8c:3f:2c:29:4a:57:f9:
         29:5d:84:be:e8:72:f9:6e:b5:f2:39:51:2a:67:af:68:06:21:
         71:4f:ec:7f:48:81:cc:2b:2c:ed:4d:f8:94:a9:08:54:2a:70:
         ab:03:68:aa:1a:20:27:0b:74:12:b6:0b:7f:8e:c8:5a:d1:64:
         ea:4b:0c:38:39:90:aa:8c:7b:b9:95:30:36:9d:1a:2a:c4:08:
         71:64:b8:46:d5:a7:85:91:50:7f:1c:e4:83:7b:9d:d0:75:a5:
         4b:f5:fe:81:41:2d:75:b9:fc:3f:79:f7:25:75:ac:1f:1d:ba:
         25:93:1d:8b:63:5a:69:c9:f0:a7:9d:b5:70:ba:29:3f:a3:da:
         26:0b:9d:7b:aa:2c:de:6f:b6:6a:c0:a0:e9:3c:d3:14:66:b4:
         c5:9c:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:55 2026 by rpki-client