Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/18C57F047EAF11F1A86AC8B467A30FBC.roa
File:                     18C57F047EAF11F1A86AC8B467A30FBC.roa (raw, json)
Hash identifier:          buyx/Zgu3y611nh9T4dSAAiTISx8UOEjNS/DdMo9lBY=
Subject key identifier:   7C:BA:71:86:2E:D3:B0:31:7D:AF:96:82:32:D0:B0:E3:DE:56:40:77
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       098B
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/18C57F047EAF11F1A86AC8B467A30FBC.roa
Signing time:             Thu 08 Oct 2026 20:40:31 +0000
ROA not before:           Thu 08 Oct 2026 20:40:31 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7029
IP address blocks:        103.193.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 20:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443 (0x98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: Oct  8 20:40:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ac7ffbe-d3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1b:81:db:0d:c7:a5:0d:c2:5c:07:e5:65:6a:
                    66:ac:10:46:3d:5b:f4:69:36:d1:0a:85:24:bb:49:
                    cb:46:11:7e:22:5d:c2:c7:08:95:4f:e9:5f:90:46:
                    69:5b:a0:de:31:47:ac:93:37:35:e3:b5:ba:ee:ba:
                    fd:8e:73:6d:4a:47:d0:60:d5:15:39:c8:d8:40:0f:
                    ad:a2:7f:7a:1d:89:d0:3d:8c:64:bd:73:6c:02:93:
                    c9:80:af:3f:a4:01:97:b5:86:7f:0f:9a:3c:55:2f:
                    4c:c8:dc:88:dd:3e:97:88:2f:98:b3:12:31:16:c0:
                    d0:62:42:57:72:34:0c:73:55:b9:73:d2:40:ec:50:
                    f6:52:65:64:91:c1:92:12:d6:05:a7:c2:50:45:e4:
                    9c:ab:0a:fa:fb:84:ad:5d:15:3c:5f:5f:99:38:82:
                    8b:99:55:09:75:eb:7e:1f:7c:38:8e:bf:1c:ee:28:
                    22:ef:94:59:07:af:e7:44:1a:55:4f:47:6e:ad:75:
                    f4:c1:7b:41:02:44:6f:81:db:64:df:ea:cc:85:93:
                    d9:6f:bb:37:fc:d2:4d:03:33:1c:55:de:4f:a9:6e:
                    d6:8d:b1:b5:f3:41:d6:ae:34:99:28:51:ae:81:b7:
                    4e:6e:66:59:cd:75:9d:24:2d:40:dc:c8:7c:35:cd:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:71:86:2E:D3:B0:31:7D:AF:96:82:32:D0:B0:E3:DE:56:40:77
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/18C57F047EAF11F1A86AC8B467A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:43:0b:8a:fa:bb:e6:ba:0a:9c:d3:e1:a5:3f:65:72:e9:
         7d:05:4a:4b:00:3f:44:69:b8:d5:23:78:95:1c:0a:76:79:59:
         5e:ea:87:f6:cf:46:35:ca:b3:08:69:d9:9c:3f:f4:5f:a3:a8:
         24:4b:f3:7b:6c:f5:d7:ed:16:ac:ff:d7:18:00:2f:47:1d:b4:
         72:b7:f1:70:54:56:79:c2:5b:d1:4e:a4:20:d0:f9:15:8b:22:
         d7:60:51:29:38:18:72:f7:39:62:48:6e:e1:9f:b8:20:24:23:
         10:46:4e:71:ac:32:b2:01:9b:96:5e:c2:be:ef:c4:1a:b8:96:
         99:05:0b:dd:48:7e:bf:cc:87:23:56:ad:9e:be:e1:c7:37:b6:
         dd:ae:49:30:83:f3:f7:5f:d8:dc:8d:88:e0:5a:ea:5b:a8:86:
         c8:71:32:f6:43:93:fa:c2:f6:dc:75:d1:eb:02:a2:6f:f1:02:
         a0:76:57:bb:82:7a:cd:12:16:b3:cf:dd:57:5a:aa:e2:b2:49:
         29:19:7e:08:60:db:9d:5b:09:4f:69:4b:9a:b7:f7:09:87:33:
         f1:39:28:47:6a:63:ae:4a:ec:1b:7d:ce:90:6e:6b:63:13:02:
         bd:49:db:ff:21:42:7b:1e:3b:e0:2c:fd:06:c6:45:c6:c4:c1:
         29:a3:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:15:19 2026 by rpki-client