Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa
File:                     ECD21166AB8411F1A790DC444511F970.roa (raw, json)
Hash identifier:          ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=
Subject key identifier:   D2:25:00:E6:88:56:40:D6:37:F4:4A:58:D9:3F:6F:23:68:2B:BA:D4
Certificate issuer:       /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial:       06EB
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa
Signing time:             Tue 08 Sep 2026 12:58:02 +0000
ROA not before:           Tue 08 Sep 2026 12:58:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38254
IP address blocks:        103.167.250.0/23 maxlen: 24
                          2001:df6:c480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 22:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771 (0x6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
        Validity
            Not Before: Sep  8 12:58:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa0065a-a4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:88:5b:c9:1b:35:09:3e:67:c1:2b:29:00:
                    78:f4:5b:21:50:73:6a:23:22:16:0a:af:e9:73:56:
                    0a:2c:dd:1b:8a:4f:35:f8:46:33:e4:80:35:2d:9a:
                    fb:1d:2f:cc:03:c7:60:18:33:53:62:7f:42:c1:d0:
                    2b:5e:6e:77:6b:2d:7c:6c:0a:ca:84:77:89:83:1a:
                    ad:b3:75:d7:6d:2f:41:08:32:ed:12:11:a9:f7:59:
                    be:be:6a:eb:a0:21:16:72:2f:4f:9f:39:e7:0f:9e:
                    aa:de:b2:c7:b5:5b:bc:13:a0:ea:df:32:84:21:70:
                    cc:38:8e:ec:e3:9e:6a:b7:0a:4e:8b:5c:12:9b:77:
                    2f:ce:6a:49:4f:37:3b:0c:6f:d8:b2:95:4d:37:03:
                    3e:3a:d1:5d:7c:e5:63:72:68:48:f4:76:e6:16:24:
                    f9:e3:13:2d:92:52:67:1f:22:92:dc:68:88:08:e2:
                    06:ed:b2:2a:e4:41:d8:97:75:8b:20:91:1d:24:90:
                    8c:0b:d3:41:07:3f:c9:6c:67:a2:09:85:1d:2c:25:
                    a1:f4:48:b0:49:dc:5f:c7:50:55:61:fd:51:19:d3:
                    28:01:64:52:b5:c0:f4:cc:d2:93:8d:5b:43:00:b1:
                    b1:f5:c5:55:cd:03:3d:15:00:ff:9b:fb:67:1c:29:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:25:00:E6:88:56:40:D6:37:F4:4A:58:D9:3F:6F:23:68:2B:BA:D4
            X509v3 Authority Key Identifier:
                keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/ECD21166AB8411F1A790DC444511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.250.0/23
                IPv6:
                  2001:df6:c480::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:79:3e:f7:3b:b6:f0:68:69:32:57:fb:f7:4c:c1:e4:27:7f:
         fb:1f:1a:0e:d0:c1:54:96:43:95:98:cd:c8:1f:81:d3:ef:05:
         97:d9:e0:96:76:e4:c2:7b:38:c8:76:f4:07:53:4d:9b:26:2b:
         3d:9b:ec:6e:b9:4f:fc:a9:08:8f:d2:54:11:84:d8:bc:a4:d4:
         91:00:f2:57:49:8d:d5:40:2a:15:ef:d9:0b:f1:80:d6:a5:4e:
         87:f8:58:67:d0:90:01:bd:15:13:3a:1e:af:1b:ba:36:16:6f:
         21:3b:61:31:60:72:d8:14:b0:ee:ee:1c:67:c1:74:73:b9:ad:
         02:f6:1e:09:12:75:13:47:5f:2d:98:43:4b:56:34:b4:af:92:
         bf:1b:b2:52:31:dd:83:b8:17:cc:ff:aa:c8:b8:cc:31:f8:2c:
         0c:2f:a4:d2:7d:a5:17:06:32:46:53:a1:85:41:20:5f:3e:89:
         83:f7:eb:1c:ee:93:9b:e8:2d:5c:42:f1:99:ae:9a:db:b2:5a:
         b5:41:18:74:41:49:c7:41:38:e6:8e:a2:f2:e8:85:27:0f:b4:
         75:3a:42:e1:18:28:57:0c:8e:46:b3:fc:93:23:a9:d0:27:fe:
         ff:d0:51:c6:bb:3b:94:4a:96:e8:e6:24:81:72:04:93:09:42:
         6f:f5:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:07 2026 by rpki-client