Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/F4260C1C68DC11EE842D825BC4F9AE02.roa
File:                     F4260C1C68DC11EE842D825BC4F9AE02.roa (raw, json)
Hash identifier:          8Z7x28NjMBhxgh4LM1tzXqmKU3cp0TrRK1cVjWiRb8A=
Subject key identifier:   30:DC:B0:A0:78:17:99:D5:11:4D:B6:FE:6C:48:AD:9F:81:42:6B:05
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       026A
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/F4260C1C68DC11EE842D825BC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 02:52:02 +0000
ROA not before:           Thu 03 Sep 2026 02:52:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140942
IP address blocks:        103.153.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Sep  3 02:52:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98e0d2-7086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:c1:b8:aa:8e:d6:c6:53:23:9e:63:1a:d8:
                    a6:d2:e9:5c:a1:53:3d:88:b9:68:e4:04:7d:23:78:
                    bd:aa:2e:81:e7:0e:12:19:e4:aa:8a:78:b8:76:15:
                    b6:43:e2:77:0f:a0:8f:38:4e:ee:1f:34:89:c5:f0:
                    3c:15:9b:3a:af:81:76:3e:83:d1:07:0e:65:4d:f2:
                    ec:7c:11:b3:4a:11:67:1a:22:5d:21:06:7d:12:cb:
                    3e:93:09:19:5c:85:1f:57:27:b3:83:93:0f:a2:a2:
                    fa:ae:5d:9c:f9:f9:16:39:f7:5e:7e:ec:94:ef:e8:
                    68:0f:f9:5f:41:0f:e7:b0:46:e4:d8:52:66:8d:e7:
                    f4:da:91:ca:b2:45:6b:87:f8:51:5c:93:ca:92:21:
                    42:01:ac:03:6c:0a:ac:7f:77:45:e4:f4:77:1f:7d:
                    87:e0:82:9a:73:92:65:70:1a:30:8f:c2:8b:57:f3:
                    1e:6f:1a:8c:c9:f5:ae:50:c0:42:1d:27:43:0b:0b:
                    b9:25:44:08:b3:b6:25:dc:86:d8:fb:91:ab:d5:af:
                    ef:90:8b:ec:8d:ec:bc:b9:9a:c1:ae:3b:88:e5:71:
                    30:f4:e5:fa:65:3c:e9:19:3d:53:b0:27:61:1d:35:
                    d4:2c:da:63:e6:24:d8:e4:ef:1c:93:0c:da:e1:21:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DC:B0:A0:78:17:99:D5:11:4D:B6:FE:6C:48:AD:9F:81:42:6B:05
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/F4260C1C68DC11EE842D825BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:52:90:39:09:94:13:75:e5:95:1d:b0:c9:2c:e4:c7:95:
         23:9a:13:bd:b5:d1:2e:cd:d2:66:76:6a:0e:c3:40:73:2d:9e:
         3d:02:4e:ed:63:e0:97:da:97:44:aa:75:7c:35:dd:49:ce:d1:
         cb:66:12:16:b0:e3:07:96:f8:9a:fa:20:9e:aa:e9:bf:f1:45:
         0e:b5:0b:e4:4f:21:7b:79:e1:1f:58:51:a5:bc:e0:bb:b3:9d:
         35:2b:b5:07:9b:15:c8:41:35:9f:63:e9:33:61:8d:29:3a:e3:
         00:31:46:ea:2f:3c:b1:a3:ab:cf:d9:1a:0c:ac:94:c7:3c:03:
         f5:7e:4a:51:18:1d:77:49:32:59:a5:fc:b1:e2:53:83:c8:34:
         db:cd:3e:91:f2:48:dd:3a:54:f2:14:7b:21:cf:49:58:06:0d:
         04:a2:1d:cd:26:fe:f6:95:87:b6:c1:10:9a:12:f2:13:4d:bb:
         f5:b5:d1:91:7d:fa:95:18:96:f4:cd:05:97:56:10:76:12:f8:
         02:a0:b7:21:0b:46:f3:1c:c8:28:70:00:6e:74:14:6f:bb:a9:
         d7:9d:29:f2:51:60:b4:8b:b7:ec:4c:db:05:e5:10:c7:97:d0:
         60:dc:99:ed:12:09:30:be:16:54:c5:16:66:e6:a4:84:06:2b:
         db:0e:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:12:24 2026 by rpki-client