Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
File:                     2B6E7D32FC5311ECBCE27247C4F9AE02.roa (raw, json)
Hash identifier:          Skr0BIqgNbqGmYbN7MA85Axet7ydGxb2eGkyCl3TFGI=
Subject key identifier:   79:35:BD:7E:CB:A6:6D:95:E6:10:FF:F0:97:C8:26:CD:37:FD:98:B3
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       06D2
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa
Signing time:             Sun 12 Jul 2026 23:23:42 +0000
ROA not before:           Sun 12 Jul 2026 23:23:42 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        103.167.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jul 12 23:23:42 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5421fe-986e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:dc:b7:80:26:c9:b0:e9:c0:8b:b1:10:88:
                    42:4f:78:da:fb:7a:c8:9b:3b:e0:25:3c:28:29:5f:
                    c2:12:6a:2d:17:8d:65:cd:ab:0a:cf:e3:e8:e0:1c:
                    1f:74:38:e1:50:c6:58:ef:1e:fa:02:39:6c:da:1b:
                    c3:0b:2b:c3:48:04:47:c0:e3:29:20:40:1a:81:62:
                    6c:46:56:d7:03:58:98:58:92:3f:04:82:9a:6a:1a:
                    a0:63:c2:3c:0c:43:9b:4f:d9:90:9a:98:49:f0:f6:
                    22:41:90:97:58:5f:53:1a:c1:e9:6f:74:a6:73:90:
                    d6:bd:07:7e:f4:41:07:07:83:4f:65:59:5b:ef:53:
                    57:b5:92:f7:78:a3:2d:14:f0:3c:bd:d6:90:82:39:
                    b1:22:23:09:cb:b0:11:26:46:34:0c:f7:24:db:16:
                    b5:a2:09:86:77:bf:08:27:b5:eb:b4:ca:06:a8:ba:
                    72:e4:66:b2:a9:e1:1d:6a:ba:a9:58:1d:ab:2c:75:
                    31:7b:3b:41:9f:0b:76:e2:bb:bf:9f:a6:46:22:8c:
                    c4:60:51:85:f6:48:29:ec:3b:d1:61:a8:75:53:4e:
                    92:1b:2d:34:17:c7:13:e2:a9:35:5d:a5:42:0a:f7:
                    06:38:51:6a:ed:81:62:88:55:23:68:ad:3e:fd:16:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:BD:7E:CB:A6:6D:95:E6:10:FF:F0:97:C8:26:CD:37:FD:98:B3
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/2B6E7D32FC5311ECBCE27247C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:45:ad:f8:8a:34:49:b8:79:5f:84:f1:da:dd:9f:a8:76:6f:
         78:6a:de:5d:c3:0c:a7:fa:16:d4:8f:e9:2a:3a:06:db:11:3e:
         2e:cd:f7:80:5d:f2:e6:e2:28:24:26:4a:be:ca:8d:2c:b8:13:
         ed:d0:77:4d:a1:0e:85:6f:6b:41:c2:0f:30:9f:44:ad:83:c5:
         fa:d5:b8:9b:7d:ec:86:e8:73:2d:b2:cd:df:cd:2c:93:23:a4:
         d1:86:7e:8d:e7:e7:3c:28:88:ba:a8:94:6c:df:32:f4:c8:7f:
         12:d8:70:4c:24:44:65:2c:1b:ca:94:50:7f:d3:88:a8:e3:2e:
         07:0a:06:e8:c0:38:d6:76:22:67:33:ef:03:32:10:e4:31:56:
         86:96:36:4f:67:ec:86:c9:94:fa:99:2e:6d:ed:55:c9:67:40:
         6a:0c:ee:62:d1:d7:f7:b4:11:49:36:7a:f9:83:49:20:a4:8e:
         25:34:f6:a8:1a:6f:13:19:95:a7:d3:90:04:07:da:82:c2:d2:
         d2:3c:99:32:3e:46:6a:e3:c5:b3:cc:17:b8:15:2e:89:cd:ff:
         8f:f6:f4:d2:18:4b:e2:71:8c:a3:46:44:d2:a8:58:3f:f4:9f:
         49:66:fa:31:b1:73:a7:13:c0:c2:4b:a5:10:c0:05:d8:8a:1d:
         01:f4:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:49 2026 by rpki-client