Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa
File:                     4157856E347511EB84CD472CC4F9AE02.roa (raw, json)
Hash identifier:          fI5k1La4sD+/67HSTmA1tFZ/9I8h6JeK1LDDYcVzmAE=
Subject key identifier:   8B:05:56:98:16:61:5E:48:92:3C:C5:2F:22:1F:8F:F2:D4:80:AE:B5
Certificate issuer:       /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
Certificate serial:       082E
Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa
Signing time:             Mon 28 Sep 2026 21:41:29 +0000
ROA not before:           Mon 28 Sep 2026 21:41:29 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132484
IP address blocks:        103.73.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE
        Validity
            Not Before: Sep 28 21:41:29 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abadf09-da4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:7c:ca:fe:0e:17:5e:3c:f2:7f:22:e2:a2:
                    02:e3:24:4c:3c:d2:eb:c9:11:fa:d0:88:1c:c2:1d:
                    d2:4a:ca:29:0f:1b:30:0d:4e:79:91:ad:2f:75:a8:
                    60:b1:e4:a9:eb:9c:60:0b:8d:3c:44:1d:7a:cf:d2:
                    84:53:6b:dc:67:ea:6c:67:e7:6b:04:55:2d:96:41:
                    eb:e9:bd:24:1a:95:89:fc:34:74:30:d9:34:05:31:
                    c8:27:1b:53:be:93:49:72:e9:47:3e:3a:bd:86:61:
                    36:16:1b:68:43:a5:cf:d9:0e:20:ff:32:88:80:60:
                    07:dd:5c:42:bd:35:f0:f3:b3:b2:bb:4a:cd:d4:2b:
                    f1:8f:3c:22:dd:87:cd:68:96:6d:71:a7:a2:60:5c:
                    3e:61:3b:13:51:6a:86:52:c3:d2:86:ad:cd:c2:c8:
                    c1:55:ba:3f:2d:82:59:62:58:0b:bc:9c:3a:64:72:
                    cc:d9:eb:4e:78:f9:9e:12:30:eb:89:24:54:13:a5:
                    4a:4b:ae:64:04:e5:07:63:1f:f2:23:2f:ce:30:47:
                    ca:1c:f1:f7:9a:01:ae:c3:71:aa:e0:c7:ab:95:0b:
                    e0:3d:02:05:b9:63:27:f5:ba:92:56:2c:d4:8d:e9:
                    ae:fe:3e:bd:f7:e5:fc:66:da:46:1e:14:84:d2:2a:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:56:98:16:61:5E:48:92:3C:C5:2F:22:1F:8F:F2:D4:80:AE:B5
            X509v3 Authority Key Identifier:
                keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/4157856E347511EB84CD472CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:31:7b:c1:21:ec:24:28:f8:80:39:cd:a5:21:3a:f2:40:af:
         65:51:0c:67:6f:c0:bc:f4:e4:d3:4e:d4:85:16:5a:e0:c8:79:
         99:64:54:a7:39:07:f0:38:a2:d6:e1:ea:62:8d:5d:21:3a:81:
         1c:cc:56:01:09:37:c2:9c:2c:7a:e9:13:1d:e9:51:a3:40:18:
         09:47:84:ac:46:bc:f0:a0:84:47:55:5a:16:77:c3:75:b1:f0:
         0a:77:0c:44:2e:84:b7:ef:d7:4d:9f:36:41:23:bc:ff:79:3a:
         bb:9a:f5:13:62:8b:54:98:45:01:21:17:8d:05:70:16:24:e0:
         b6:12:ae:70:c0:d9:45:9c:5a:8f:5a:a8:0a:f5:c1:38:ef:17:
         a2:e1:7c:4a:f1:f2:0d:65:f3:86:23:86:c3:86:f4:14:78:a4:
         31:dd:37:1d:eb:1d:67:bf:d6:cf:25:cd:ad:0d:cd:0c:7f:a6:
         56:10:3d:59:02:c4:f8:5f:9d:db:0f:f8:c5:73:2f:04:8e:11:
         82:3d:dc:b5:64:23:93:ae:ea:e5:0f:c2:c2:1f:2c:c9:9d:ec:
         24:6d:4c:bb:64:75:d0:0d:fe:14:29:d3:62:3f:20:80:27:ae:
         64:08:b5:aa:8e:ae:75:b0:1a:4e:d7:8d:fc:fe:af:9c:c5:29:
         4a:d0:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:46:03 2026 by rpki-client