Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa
File:                     1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (raw, json)
Hash identifier:          BbFVl72vJe1WyfGWNNCXlRQgo33o4IIXdFPTkYW2Jg0=
Subject key identifier:   C2:8C:3A:A5:DA:28:3C:ED:52:CC:39:1C:04:41:6B:E3:79:77:F5:5F
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0C18
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 19:38:50 +0000
ROA not before:           Wed 02 Sep 2026 19:38:50 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     38082
IP address blocks:        103.14.164.0/24 maxlen: 24
                          103.14.165.0/24 maxlen: 24
                          103.14.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3096 (0xc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Sep  2 19:38:50 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a987b4a-5abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:ec:b3:87:a6:47:4d:95:31:c3:c2:a3:bf:
                    94:e5:3a:fb:7a:69:f4:8a:9f:d0:8d:ab:b6:d4:c7:
                    aa:15:1b:08:82:bd:9a:34:08:5f:a9:16:74:da:d3:
                    35:d3:08:08:94:c2:79:35:cd:68:94:1c:65:c4:a6:
                    55:bf:22:eb:43:3c:f8:e4:40:66:15:f0:fe:b2:c5:
                    62:68:2c:61:26:06:26:fb:a2:1a:96:42:e1:3d:c5:
                    0e:2e:5c:d2:25:8a:c9:54:d1:1a:bb:85:13:23:0a:
                    73:0c:d1:b0:aa:bf:2f:fb:54:aa:d5:3f:11:0c:f6:
                    a1:08:0b:27:12:7f:c1:34:ed:09:80:2e:c7:89:e5:
                    00:65:d4:6d:62:17:ac:67:76:d2:1c:e4:80:6e:bd:
                    96:60:f0:be:4d:7d:8e:aa:cd:f6:7b:71:7b:db:66:
                    1e:75:0f:0f:b5:1d:6c:86:ce:0b:8a:61:6c:07:ee:
                    43:6a:74:5a:ad:e8:0a:44:f9:3d:14:ea:7f:c9:d2:
                    63:92:fa:1b:11:d2:75:b1:46:3b:06:aa:c8:4f:7c:
                    b9:b7:65:63:1a:49:03:e7:61:6e:8a:60:10:f2:52:
                    6b:fa:3b:4d:a4:94:b5:2c:fd:9a:d2:4b:06:0a:f4:
                    11:4a:47:bc:29:67:d2:74:1f:6d:7e:95:45:7e:bd:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:3A:A5:DA:28:3C:ED:52:CC:39:1C:04:41:6B:E3:79:77:F5:5F
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.164.0-103.14.166.255

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:7d:2a:9a:34:a9:41:58:34:51:bd:8e:f4:72:da:e0:80:
         ee:5c:9b:60:2f:18:11:95:a1:1c:35:64:92:37:a4:20:7e:68:
         2a:ad:61:e5:b7:a3:87:e6:55:42:25:16:4d:d3:2f:73:84:82:
         15:f7:24:4f:15:f1:cc:84:2d:69:32:1f:70:f9:3a:39:50:74:
         f2:b8:fd:7b:64:80:86:5d:bf:74:ad:1f:71:55:5e:a8:b5:ce:
         da:48:0b:f6:00:cf:49:3a:58:01:d3:34:87:40:a4:ea:3d:12:
         40:3f:8c:2d:80:83:7b:ef:0c:ec:a1:d4:37:55:1e:7f:fe:0c:
         dd:8a:42:78:56:2c:2c:38:de:8d:ae:6c:f5:97:d0:34:9e:f6:
         86:68:08:41:f1:9d:9e:2f:93:17:0a:98:50:91:28:40:b4:7e:
         11:48:ca:4a:29:fc:be:d5:27:1b:b7:80:73:aa:ab:1a:63:f2:
         8c:f9:29:00:a2:47:67:8e:60:1b:53:ec:6b:33:3b:a6:08:1c:
         16:8b:6f:49:5d:3a:e5:b5:f6:ab:de:a7:50:2c:1b:7b:fd:ac:
         2f:cd:b5:32:82:a9:21:97:03:47:3e:0f:f5:01:6d:ff:c7:d4:
         66:f0:15:0b:81:60:53:2f:fe:a8:2b:8b:ff:f0:e3:a6:ac:9d:
         13:dc:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:00:22 2026 by rpki-client