Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
File:                     C54BA97E283311ECBE887F3BC4F9AE02.roa (raw, json)
Hash identifier:          OTy7ywxh/BQ8RC1ApZRUPVkXL1MJqqn7wikxw/mtboc=
Subject key identifier:   C7:BC:64:47:EF:91:22:76:EB:99:90:B8:2C:C9:16:74:85:64:DA:0E
Certificate issuer:       /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial:       05C9
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 23:44:06 +0000
ROA not before:           Fri 02 Oct 2026 23:44:06 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139195
IP address blocks:        103.174.70.0/24 maxlen: 24
                          103.174.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 23:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Validity
            Not Before: Oct  2 23:44:06 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac041c6-3e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:b3:7a:75:8b:17:39:4d:f6:d1:d9:55:d0:
                    bf:99:55:de:67:f4:3f:b1:7d:24:48:98:a4:8a:bd:
                    32:4d:11:33:5d:d9:92:9a:d2:c3:d1:6b:75:27:31:
                    c3:8c:67:20:b5:1a:c5:81:fb:86:d5:57:30:85:31:
                    d0:95:db:72:f7:43:46:3f:af:a0:8d:29:d2:9e:7d:
                    22:d4:ed:2a:5f:1d:d1:18:98:5f:65:19:2e:6f:46:
                    83:70:eb:54:bb:19:f9:4e:98:07:5e:87:cf:b0:88:
                    a4:8a:e3:ca:bd:76:ed:d8:c4:44:6b:91:97:02:f5:
                    60:90:05:21:d9:d3:e2:6e:8f:7d:7d:93:eb:8b:8b:
                    04:38:e7:aa:9f:44:a6:7c:0e:ec:eb:92:54:37:8f:
                    f9:4f:2c:f6:f5:74:5d:de:49:10:50:ea:dd:fa:07:
                    09:90:6e:70:b9:d4:cf:fc:61:08:bb:89:e6:56:ac:
                    d5:7b:c8:9b:ee:23:a9:2d:5c:9e:b7:09:96:02:a2:
                    da:12:3e:c5:b6:f1:b9:97:31:29:28:5f:29:ca:cb:
                    f4:99:b9:4e:fa:2a:0a:da:59:75:7d:f3:be:fc:c2:
                    bc:1f:02:4a:0c:28:49:3b:c2:9c:7a:5f:02:eb:d0:
                    96:53:37:c1:1f:e3:e6:b0:28:7b:9e:01:04:13:8e:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:64:47:EF:91:22:76:EB:99:90:B8:2C:C9:16:74:85:64:DA:0E
            X509v3 Authority Key Identifier:
                keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:d1:04:33:e9:56:79:91:d5:b6:3f:3d:0c:8d:b4:b7:2b:
         b5:c0:ed:8a:a6:8d:34:c8:ed:d7:09:32:bb:6b:7b:9b:35:cc:
         d5:5f:ba:d0:e9:79:b6:c6:f1:df:93:64:c5:5d:f5:93:90:2a:
         52:4b:45:b9:a8:52:1c:47:4d:eb:e8:85:c7:bb:cb:94:8b:9f:
         8a:22:05:31:6a:1d:71:02:77:9f:36:9f:dc:bb:10:cf:b7:bb:
         3e:43:e4:dc:8c:f3:58:c5:c9:9d:5d:5a:bc:8d:60:a4:3a:a5:
         2b:8c:50:27:3b:59:98:03:96:eb:01:8c:b1:07:e9:84:49:29:
         fa:f6:bf:85:eb:53:05:da:79:c4:77:f7:ce:3e:02:c5:4d:a3:
         75:3c:af:a2:b1:51:3d:fa:b7:2f:87:23:ba:af:96:c1:3a:f2:
         68:e9:c4:44:92:40:70:a1:81:a1:d3:45:9e:a0:b9:2c:1a:99:
         47:86:9d:a2:80:a2:9b:ae:f2:45:2a:58:32:d8:26:db:9b:83:
         39:a8:f5:23:62:38:2c:7e:45:c4:d2:6d:e0:33:65:29:e0:9a:
         01:d7:80:03:6d:ac:29:15:7f:bc:f4:a0:9b:a7:e1:5f:11:4e:
         59:c8:34:8f:a5:75:08:08:d9:5a:c5:9d:3c:e3:2e:51:13:71:
         30:20:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:02 2026 by rpki-client