Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/E15780AA32E111EFB163924BC4F9AE02.roa
File:                     E15780AA32E111EFB163924BC4F9AE02.roa (raw, json)
Hash identifier:          bzNQiyAKc14b2YsJ0ACA9zxJopod+tvzEv/bYGNnKyM=
Subject key identifier:   16:FC:6F:B1:21:10:99:43:21:CA:BE:B5:CF:B6:4C:F2:A4:D2:DC:43
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       03D4
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/E15780AA32E111EFB163924BC4F9AE02.roa
Signing time:             Tue 25 Aug 2026 00:50:02 +0000
ROA not before:           Tue 25 Aug 2026 00:50:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     206888
IP address blocks:        103.189.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Aug 25 00:50:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8ce6ba-ad52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:57:c6:ec:c2:5b:14:5b:84:38:55:23:55:
                    1e:94:d0:e3:88:b0:87:27:ae:ca:fe:06:89:86:16:
                    de:58:93:64:42:8d:e4:83:86:8a:ff:e4:1f:e3:88:
                    7d:8a:f3:15:b7:03:99:f5:bb:e1:24:f4:ec:58:13:
                    a0:00:49:a8:2a:98:a9:63:bc:7d:1e:71:f3:1e:a5:
                    c7:6e:9a:9d:ab:62:69:65:13:c1:fd:38:03:a3:05:
                    c4:52:c2:ff:88:83:70:2f:4b:97:91:c0:d0:11:6c:
                    bb:d4:a9:3e:17:fc:e6:3f:59:fd:f7:55:19:79:4f:
                    98:be:e1:b2:86:b2:4c:d6:0e:7b:b2:9a:d4:4f:13:
                    89:35:56:3c:1c:44:b9:48:fb:53:c7:16:60:68:28:
                    c2:b5:4e:63:34:e4:c6:ee:7d:be:f7:b6:d5:e5:90:
                    79:04:4f:6c:34:fe:d9:dd:e7:b3:1a:63:b0:27:81:
                    7d:9d:9d:a7:30:b6:26:db:d1:32:c9:fd:82:d2:d5:
                    4d:12:9c:b7:c7:8d:3d:46:17:76:e1:e9:d7:11:33:
                    4b:04:ef:47:cd:a6:39:21:b8:b5:43:22:a1:9f:c4:
                    0a:12:8c:e8:c0:cc:c0:ba:3e:d0:1b:11:78:2b:6b:
                    2c:13:b2:7d:6d:f6:e2:43:e6:fc:8d:be:7e:f9:9a:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:6F:B1:21:10:99:43:21:CA:BE:B5:CF:B6:4C:F2:A4:D2:DC:43
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/E15780AA32E111EFB163924BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:e7:e6:4a:04:97:37:36:67:95:45:3f:3e:9e:e4:f1:d1:
         d8:19:15:86:9b:d4:a6:31:c8:b4:37:ad:0e:7e:b3:52:82:23:
         57:51:87:ad:4e:38:3c:56:74:67:40:c2:a5:a6:c9:48:63:37:
         8a:3a:3b:f0:c1:1d:f2:db:86:10:d4:81:12:b9:65:05:a0:e4:
         4f:93:83:bb:b3:dd:9d:c5:bf:90:71:b3:73:d9:82:ef:fa:de:
         81:6b:35:eb:b0:35:5d:e4:c1:9b:71:59:3b:80:81:b8:41:4a:
         11:3b:ea:6b:55:91:5f:19:cf:cc:31:27:ea:bb:c1:51:81:e7:
         8e:ea:76:d2:52:c7:a9:96:89:55:75:d0:01:f8:3e:b9:c2:c6:
         06:62:2e:1b:31:06:86:96:ce:cc:d2:63:55:4b:f2:04:cf:72:
         17:13:ed:91:80:47:e8:07:68:20:b4:62:61:75:5f:59:3f:96:
         4f:a3:a9:f4:56:fe:10:83:ed:72:14:a6:6b:74:35:1b:a8:62:
         e7:72:99:8b:da:af:7b:6c:6a:77:28:c7:e0:f2:79:e3:ea:31:
         ab:33:13:38:14:85:93:6f:a2:71:c5:48:02:fb:d3:55:c5:9f:
         33:78:a5:84:8d:6a:1e:67:84:89:2a:58:44:72:e6:d8:0e:c4:
         b9:48:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:28:09 2026 by rpki-client