Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/17A584347EAF11F1A86AC8B467A30FBC.roa
File:                     17A584347EAF11F1A86AC8B467A30FBC.roa (raw, json)
Hash identifier:          cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=
Subject key identifier:   A2:FE:96:06:F4:D9:83:63:27:64:24:28:08:2D:B3:09:02:2D:D4:B7
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       094B
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/17A584347EAF11F1A86AC8B467A30FBC.roa
Signing time:             Mon 13 Jul 2026 11:36:31 +0000
ROA not before:           Mon 13 Jul 2026 11:36:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     13347
IP address blocks:        103.193.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 11:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: Jul 13 11:36:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a54cdbf-9d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:74:35:93:ef:8d:62:56:13:cd:25:d2:a1:
                    60:47:59:c0:ef:ae:72:e5:74:04:d8:21:b0:ef:6e:
                    7b:a8:19:f4:4d:7d:b5:5a:68:bb:02:08:41:0f:db:
                    d8:e7:23:a4:c1:99:f9:f1:6c:e7:9e:64:87:aa:48:
                    29:95:4d:96:1d:df:6d:a0:95:4d:06:9e:51:15:36:
                    df:45:ab:ab:41:67:8e:a6:e2:82:e4:eb:ad:85:f6:
                    cd:88:14:39:da:8f:b4:39:dd:a6:db:18:75:6a:d3:
                    f2:a3:6d:67:c9:9e:23:d6:2f:e7:3e:e0:44:7a:bc:
                    a7:d3:a2:7b:8e:ae:87:82:1f:04:72:3a:dc:bd:1c:
                    ab:7a:61:0c:b0:f7:b2:20:43:69:e1:49:a0:91:36:
                    37:c3:2c:f7:c4:7d:54:ce:c0:93:06:33:73:29:f0:
                    71:fe:b8:3b:ea:a9:80:71:1c:1c:f9:61:04:3a:26:
                    dc:2f:c5:d4:d6:89:fa:8b:9e:44:0b:d6:9a:71:70:
                    fb:d6:ee:b1:21:9b:70:32:be:d3:e6:08:51:db:57:
                    db:80:2a:0b:1f:e9:c3:ee:40:80:12:ac:6e:6f:ca:
                    f3:78:aa:92:c2:b9:35:a5:b8:1c:e4:b8:f6:a5:fe:
                    6d:3b:d9:3d:f7:5f:58:2e:1c:ad:3d:4a:ed:26:dd:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FE:96:06:F4:D9:83:63:27:64:24:28:08:2D:B3:09:02:2D:D4:B7
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/17A584347EAF11F1A86AC8B467A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:7d:73:a8:e1:5b:d4:68:f5:f1:30:36:10:1f:d8:c0:66:dd:
         5f:b7:a1:25:bb:fd:f7:45:10:f3:65:d4:c8:3c:24:d1:14:00:
         d8:67:36:a8:5b:45:34:f3:de:72:fe:d9:e0:f2:06:26:94:d7:
         c8:4d:ae:80:b7:34:9c:6a:66:d9:c4:99:ad:cb:78:77:37:59:
         c3:2b:af:8d:6c:3e:f8:e4:77:b6:7c:63:30:36:13:ff:8b:d8:
         8d:fa:f2:bd:7f:20:3f:6e:eb:57:8c:d9:1f:f7:34:25:9b:19:
         61:e1:66:ec:14:0b:90:8a:61:ad:14:5c:03:c6:d4:7c:98:3a:
         af:62:5f:58:76:b0:2e:25:5c:05:3c:28:89:87:92:53:9e:0f:
         21:96:dc:a3:46:a8:a1:0f:85:d0:d7:54:36:1f:37:19:22:45:
         b2:64:01:1e:4d:be:fa:95:67:eb:d6:4a:50:03:27:24:0c:ab:
         a0:82:24:bf:18:b2:dc:1e:a0:eb:ad:e5:cb:2b:f6:41:6f:57:
         c7:a2:7d:84:ab:2e:8f:04:2a:95:a2:76:75:a3:95:b5:f3:c8:
         bf:a5:bc:c3:19:5b:04:ff:f7:91:a7:93:9b:27:95:20:2d:a0:
         0e:34:de:73:ec:9f:78:e6:21:5b:7b:34:af:91:0f:4f:0d:e4:
         56:15:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 15:47:18 2026 by rpki-client