Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa
File:                     E22ECDEAC4F811EAB8D31113C4F9AE02.roa (raw, json)
Hash identifier:          lQ/3nAQf4fzpG3flWZ1bQNZV2nX5+LaWRtwGSAAXvQo=
Subject key identifier:   AE:E9:FE:E3:D9:81:D8:79:9B:AE:A5:18:B4:97:2B:1D:1E:5B:9B:FB
Certificate issuer:       /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial:       09B7
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa
Signing time:             Mon 10 Aug 2026 20:40:14 +0000
ROA not before:           Mon 10 Aug 2026 20:40:14 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.152.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
        Validity
            Not Before: Aug 10 20:40:14 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7a372e-817e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:15:51:bc:e9:f7:7d:21:0d:f8:64:4c:35:
                    b3:71:48:e3:15:cb:9f:68:8f:86:a8:8c:1d:07:26:
                    a6:82:2f:23:6b:85:fd:11:1d:98:e0:23:4b:46:41:
                    6b:13:aa:9b:81:c2:dc:f6:78:1a:51:be:d0:82:32:
                    3f:76:e5:c3:84:d3:83:87:27:52:8a:be:00:f6:2c:
                    85:b7:f7:4a:8c:b8:1a:26:e4:8b:47:3c:20:ff:60:
                    fa:3c:b6:30:00:5f:ae:2c:b7:40:79:f3:78:1b:77:
                    95:3b:96:25:dd:e8:df:79:03:0c:5c:24:b0:fd:d0:
                    9f:94:05:6b:9b:3b:26:dd:1e:f1:d3:0d:70:42:11:
                    c6:92:37:79:4d:25:2e:bf:3f:7f:0a:70:a1:ad:51:
                    46:54:5e:5d:7e:b2:8d:81:0c:ac:e9:df:f5:7f:ab:
                    d9:f9:2d:20:5b:f2:d0:71:d6:8c:5a:95:d0:aa:f8:
                    ab:9d:02:34:1f:10:e8:8d:8d:c3:e0:2b:0a:35:67:
                    56:5b:2d:78:45:c6:62:90:73:c5:cf:37:44:d7:4d:
                    1e:f0:5a:15:1a:ef:f9:eb:82:5e:01:d0:4a:8f:c2:
                    d9:97:9a:a9:33:1e:61:97:65:fd:cc:10:05:a8:8c:
                    97:0f:bd:54:34:63:39:2c:1e:86:f7:82:4e:8f:c2:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:FE:E3:D9:81:D8:79:9B:AE:A5:18:B4:97:2B:1D:1E:5B:9B:FB
            X509v3 Authority Key Identifier:
                keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:2b:52:d0:d8:3f:1d:83:2d:02:be:e5:02:fd:e5:5d:a2:
         66:dd:0c:b4:12:61:37:35:c0:ed:0a:2b:64:3d:dd:db:8c:e4:
         22:eb:18:2b:87:b5:f1:42:a4:80:c9:55:57:09:7e:75:0a:3f:
         8b:6a:38:7f:29:ec:b1:d0:e1:80:96:a0:fa:81:c4:26:c2:72:
         d1:e7:65:3d:62:5a:4d:a2:ee:ce:11:a0:dd:36:de:f7:76:30:
         7c:39:06:40:6f:86:bc:22:65:be:e1:f4:6b:3a:3e:6c:27:7c:
         24:a0:37:0e:06:44:6f:48:50:2d:64:dc:41:d0:bf:4b:41:1b:
         a2:b1:92:e4:9e:c0:96:70:0c:63:78:89:32:55:f0:cb:76:d0:
         ee:7c:f3:ff:cf:65:12:70:fc:d0:7d:92:6e:34:7e:e3:b3:56:
         1c:cd:6f:fd:da:a0:e6:a7:2b:86:ef:0e:66:68:16:8d:b1:10:
         99:f7:5c:55:f9:bf:59:1a:54:ca:85:3d:9f:1e:78:ab:31:68:
         02:be:fe:76:94:15:c0:ac:39:ff:3b:b0:de:38:33:11:bf:6e:
         a1:dd:7e:68:b2:1a:55:4b:19:15:ac:07:55:78:43:1a:a5:27:
         2e:a2:90:49:78:d1:5b:c6:e9:3d:89:31:44:5d:a6:e8:20:8c:
         f4:a0:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:43:12 2026 by rpki-client