Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa
File:                     9D6E545AA84B11F0B4DF3885C4F9AE02.roa (raw, json)
Hash identifier:          170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=
Subject key identifier:   C0:DE:5D:02:52:E7:48:36:6C:0E:20:26:E7:A3:72:40:D1:4C:34:8A
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0274
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 03:52:27 +0000
ROA not before:           Fri 31 Jul 2026 03:52:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     329611
IP address blocks:        103.112.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul 31 03:52:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c1bfb-df53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:01:c8:c3:1e:3a:e3:ee:e8:61:b6:33:2a:
                    73:52:a6:e9:56:1e:40:70:18:8f:cd:d5:89:f1:48:
                    a3:da:0e:ce:43:af:c6:d6:49:87:9b:4b:c6:90:4d:
                    a2:ba:02:f6:b5:20:86:1c:61:62:9f:b1:81:b0:23:
                    cc:ab:a6:00:18:17:5e:16:08:e8:39:e0:40:47:47:
                    11:4d:fe:99:26:e1:cc:2f:1f:eb:0d:ab:a7:91:bd:
                    be:be:ab:df:dd:ca:d5:20:89:6d:f6:cf:c5:60:25:
                    6f:9b:49:46:8e:6b:32:27:2f:56:9d:46:4b:d2:5d:
                    bb:c0:cd:b7:4b:7a:ab:3a:13:e3:47:ce:e4:d5:8f:
                    2a:d3:98:4a:7f:7e:fa:32:cc:a2:7e:da:f0:c0:c2:
                    91:86:a1:eb:9e:c5:08:ad:85:01:13:de:00:11:ff:
                    a8:3d:2c:cd:25:94:93:53:e8:dd:77:d1:b1:89:60:
                    ca:8c:c8:01:f1:4e:39:e7:af:c6:2f:99:6d:68:82:
                    9a:7c:31:c5:43:e6:e6:c3:5f:80:a8:00:6d:2f:16:
                    5d:b5:b2:7e:78:7f:93:13:98:f0:ae:2e:33:91:31:
                    69:25:87:1e:d1:e0:fa:9f:f2:d0:d8:fe:7f:a7:c9:
                    5b:e7:26:52:f4:41:82:ba:f9:9a:9b:6c:aa:fd:56:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:5D:02:52:E7:48:36:6C:0E:20:26:E7:A3:72:40:D1:4C:34:8A
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/9D6E545AA84B11F0B4DF3885C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:d5:57:5b:ef:0a:fe:81:8d:71:78:94:97:6e:c3:a7:fd:
         83:3f:da:5c:fe:a5:ef:4b:e8:13:c6:23:9d:c8:93:25:86:04:
         c7:10:6f:f5:8c:bd:56:51:f4:27:91:3e:bd:df:5e:8d:53:3d:
         a3:f3:1c:60:f4:e1:03:99:0c:1b:10:e0:bc:a9:c2:63:11:cd:
         b0:7d:08:66:6b:15:bf:ff:11:b4:eb:27:5c:13:54:6b:d6:1f:
         ac:9b:52:65:3a:78:90:c4:73:b0:a7:ec:24:95:10:73:41:70:
         df:e6:cb:e8:4b:7b:d8:c2:c8:3b:63:3f:76:ba:84:b9:81:84:
         03:0c:8e:70:b9:95:c2:1b:04:f5:f2:ad:ac:18:3f:e7:8f:af:
         5d:f3:1c:08:c2:ce:3a:bd:69:50:81:c3:32:e4:dd:40:7e:97:
         80:4b:4e:0e:1d:4e:ce:fc:46:61:00:e5:a9:d9:1f:0c:b3:40:
         d2:8c:c8:18:16:58:19:18:56:3f:63:0c:8b:d1:5e:13:80:24:
         03:0a:00:12:f6:20:56:c3:8c:57:24:88:9d:af:eb:a8:21:81:
         68:58:94:eb:a3:bf:c8:e0:a0:08:ff:ec:33:c5:eb:87:e5:8a:
         fb:2e:87:92:98:2e:3b:5a:bb:ca:28:17:e4:1f:05:9a:56:a2:
         e4:f5:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:00 2026 by rpki-client