Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/03E47340AAE411F1907AB5A24C11F970.roa
File:                     03E47340AAE411F1907AB5A24C11F970.roa (raw, json)
Hash identifier:          HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=
Subject key identifier:   D0:44:07:61:70:BE:A7:52:66:35:0C:61:25:3F:7A:35:76:CD:DA:6C
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       024D
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/03E47340AAE411F1907AB5A24C11F970.roa
Signing time:             Mon 07 Sep 2026 17:46:12 +0000
ROA not before:           Mon 07 Sep 2026 17:46:12 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135661
IP address blocks:        103.62.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Sep  7 17:46:12 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a9ef864-24d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:7a:08:b9:a6:ff:27:0e:02:71:6c:ea:7f:
                    d6:62:03:01:e9:a9:62:65:70:dc:e0:f4:88:69:86:
                    88:2e:0f:92:8f:1f:f5:ca:7c:c0:ca:e9:44:e8:cd:
                    b5:63:a8:f7:07:20:1f:7b:19:eb:52:22:be:57:9b:
                    de:fe:ef:06:08:fd:70:77:fa:46:b5:37:15:38:c2:
                    31:96:cb:05:7a:ed:8c:76:20:95:26:02:f1:f7:dc:
                    51:3f:e0:e5:62:48:a7:c1:ec:34:ef:6a:2b:59:f6:
                    90:f1:cc:c9:94:a5:27:b0:b5:e1:22:c6:25:89:9c:
                    38:51:58:75:f4:22:8c:a9:3e:79:90:f2:90:f3:64:
                    1d:ca:71:de:7e:eb:29:c8:92:07:f6:2c:bc:4b:a2:
                    a9:38:f1:d0:6b:71:64:e1:c5:dc:ae:c3:6c:98:0f:
                    44:f6:8d:b5:f0:97:7a:39:54:f0:ef:d7:22:8e:30:
                    28:92:19:ac:95:55:55:43:7f:e1:12:c9:4e:f3:30:
                    6c:c8:b1:1d:6e:cd:6b:4b:aa:7a:b7:04:3b:53:97:
                    71:8a:8b:57:3c:5d:ec:b0:ce:86:ee:40:73:bc:36:
                    45:9e:ef:6d:60:cf:b7:69:b3:a7:2d:84:2f:59:61:
                    f1:00:2f:4f:09:1f:08:6b:c5:7b:e1:92:2e:55:e5:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:07:61:70:BE:A7:52:66:35:0C:61:25:3F:7A:35:76:CD:DA:6C
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/03E47340AAE411F1907AB5A24C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:5a:b1:8b:33:66:c2:2a:bc:52:3d:f8:b8:42:f6:6e:7e:b2:
         f2:63:ba:26:27:85:8b:fc:47:8f:06:31:2e:de:18:e4:88:af:
         98:71:fd:69:ab:f1:85:c8:4a:c0:d3:fe:f3:b0:ff:08:ef:12:
         00:f1:97:d0:4e:50:e5:2e:84:82:f9:90:84:1f:a0:55:63:7e:
         21:64:5b:e5:2a:6f:64:07:8c:be:01:8a:54:2b:98:64:c5:39:
         28:79:b2:a4:c2:a8:23:7f:66:46:83:6f:3d:93:f2:e1:12:d4:
         50:69:c3:0c:f7:82:7e:2a:aa:37:2f:8a:59:47:0c:0c:13:56:
         26:f1:c6:31:46:06:f3:74:2e:db:fd:fa:7e:e0:27:be:16:af:
         29:49:76:f0:d4:0f:0e:fd:b4:9e:77:e4:40:ff:0e:9c:7b:ff:
         bb:e3:ab:0e:9f:c8:33:db:22:ae:3e:27:00:8e:a1:8b:b6:6a:
         82:32:a1:e5:45:43:18:52:d8:4e:a0:a5:9f:a1:d6:4a:a1:29:
         8b:aa:97:1d:a3:d3:97:a0:41:7f:53:37:db:60:ec:49:3c:61:
         3b:8c:e3:f7:e6:1f:f0:da:d8:0d:12:46:af:e2:31:94:58:e2:
         10:18:ba:e0:9a:de:99:b6:55:33:69:f5:fa:24:0c:19:63:45:
         87:c3:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:12:26 2026 by rpki-client