Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
File:                     E14490BE9C9511ED8014F84CC4F9AE02.roa (raw, json)
Hash identifier:          G1leoI3o8/iS+aVh5irscaOaqbggI2WTPOfH4sMuUaM=
Subject key identifier:   64:14:C0:5E:51:52:EF:A6:FE:4B:D4:20:BE:67:45:9F:11:8B:F8:41
Certificate issuer:       /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial:       0639
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa
Signing time:             Tue 04 Aug 2026 23:44:04 +0000
ROA not before:           Tue 04 Aug 2026 23:44:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135098
IP address blocks:        103.170.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9670, serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
        Validity
            Not Before: Aug  4 23:44:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a727944-9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:32:01:0f:1a:97:4f:cc:c8:31:50:c7:e9:
                    c2:f4:b7:87:3e:18:75:d5:61:37:15:ba:59:4f:ac:
                    f3:23:7a:32:5c:90:ee:b0:4d:ce:03:24:73:3f:84:
                    34:bb:f0:08:52:75:a8:b7:33:4c:67:9c:02:99:3d:
                    b5:eb:4d:b0:3e:3f:e0:b2:05:6b:7f:17:ad:05:f8:
                    e5:a2:f0:1c:63:74:8d:2c:79:19:80:6f:0f:08:9d:
                    81:49:03:63:26:03:98:f9:f3:cf:96:45:33:3f:0b:
                    96:bb:bc:7b:b6:34:77:9b:f2:5a:d4:25:75:35:01:
                    03:1d:ae:98:a2:58:93:27:15:33:0a:c0:15:ac:44:
                    f1:ab:a9:98:44:a4:62:ad:a7:30:2a:1e:0d:be:2e:
                    63:79:f8:e5:65:35:37:a9:cb:91:c4:1f:10:dd:ca:
                    9e:7e:2b:b7:fb:41:4c:db:50:b2:73:3e:d9:39:a5:
                    81:39:70:50:37:01:de:06:b5:da:d2:77:dc:fd:78:
                    22:2f:8d:40:8f:cc:0f:6f:50:f6:50:f3:d9:80:be:
                    20:16:29:ef:43:87:e7:98:c5:c5:22:08:bb:85:73:
                    f4:ac:8d:07:19:5f:7c:9b:01:5f:f9:be:24:0d:a7:
                    8b:a6:58:d0:bc:b9:9d:ae:5e:14:7d:7b:03:60:ac:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:C0:5E:51:52:EF:A6:FE:4B:D4:20:BE:67:45:9F:11:8B:F8:41
            X509v3 Authority Key Identifier:
                keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E14490BE9C9511ED8014F84CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:48:14:b0:04:d1:ed:1b:1d:a7:11:08:a2:d9:a1:d3:00:
         fd:4c:dd:9d:37:9e:c1:43:f6:9b:70:ea:98:f9:c2:f9:37:64:
         83:49:ca:91:8d:f2:24:78:86:83:d7:a1:f6:7a:03:a1:62:5d:
         89:53:95:a6:8f:d5:ca:56:67:17:42:59:ad:65:44:ae:97:44:
         ad:62:76:e0:d5:90:b2:e9:cd:8a:ae:a7:f4:f6:14:f4:2e:0e:
         2b:e6:c5:56:78:13:64:76:b9:32:3c:28:87:67:a9:d5:84:d0:
         6e:e8:78:3a:f9:0a:09:41:2d:c6:ef:52:17:31:0f:3d:d9:2e:
         52:a3:7e:53:b7:bd:b0:25:c8:d5:c2:57:51:b0:c0:1a:26:1e:
         25:90:bf:1f:13:2e:77:04:1f:5b:02:63:84:83:3f:46:6c:91:
         bb:b1:1c:47:ff:ac:9e:36:ff:2c:8d:0a:88:b0:f1:26:e5:96:
         25:73:43:5b:72:5a:57:14:74:a4:44:2e:43:e0:b0:86:74:60:
         35:82:11:6b:3f:64:28:08:8e:2a:ec:39:72:59:74:b4:54:5a:
         c6:a5:b5:68:a1:50:ce:7c:01:06:d3:e6:10:07:e4:71:4e:9a:
         53:70:3b:ab:f0:5c:ea:8a:c7:e8:6a:ed:f8:b0:e0:63:44:5c:
         16:a7:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:33 2026 by rpki-client