Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/6762C6E0909211F18C4BD3AE6911F970.roa
File:                     6762C6E0909211F18C4BD3AE6911F970.roa (raw, json)
Hash identifier:          GO5zh7MCHBg56U5rWYeNTB2vPGPUOw86aIMrka1N4cg=
Subject key identifier:   FD:6C:9E:17:A3:01:22:9B:BE:4C:0B:55:1F:0B:E3:98:71:8A:76:BE
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0461
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/6762C6E0909211F18C4BD3AE6911F970.roa
Signing time:             Wed 05 Aug 2026 05:56:30 +0000
ROA not before:           Wed 05 Aug 2026 05:56:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151704
IP address blocks:        103.243.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 00:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Aug  5 05:56:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a72d08e-3d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:5e:b1:20:ce:bd:a3:d0:d4:97:71:1f:b2:
                    41:9a:1b:1d:f7:2a:e0:a7:61:8f:cd:df:85:f9:f0:
                    1c:99:58:08:d4:82:62:1b:e8:aa:97:42:82:19:35:
                    ba:88:c6:ba:4a:4a:05:d9:ec:4c:df:f9:0f:74:a1:
                    1b:5b:ed:84:52:fd:2b:b4:be:96:14:81:77:9c:6e:
                    30:2c:7e:83:12:c5:db:c7:bb:fc:26:69:45:77:cc:
                    0d:fd:dd:e0:3c:f3:db:31:f6:0a:c7:1c:78:ee:6b:
                    e3:22:19:28:1a:bd:5f:ad:c8:1d:02:d9:64:53:fa:
                    d4:de:e3:20:2b:a7:3c:fd:cb:b3:18:3a:ea:11:f7:
                    7a:96:53:b1:f5:b2:c5:fb:73:c1:a5:80:b7:c1:10:
                    bc:98:2f:a7:aa:b7:8c:5d:7a:59:3c:f5:61:9a:66:
                    b6:23:55:5a:cc:b0:8e:df:2a:68:ce:1d:f6:f6:44:
                    98:c2:24:e1:e0:16:a6:ae:a5:2a:f5:88:57:fb:fb:
                    ff:8a:15:d9:a0:d4:05:87:1d:6c:78:a3:b6:df:29:
                    69:02:77:08:9d:ad:23:56:be:96:46:03:1f:b5:c0:
                    6e:2b:09:ce:1c:d4:c5:e7:20:4e:aa:76:b0:06:80:
                    fd:db:27:45:55:e4:1f:77:d7:c5:04:b8:30:61:46:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:9E:17:A3:01:22:9B:BE:4C:0B:55:1F:0B:E3:98:71:8A:76:BE
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/6762C6E0909211F18C4BD3AE6911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:2e:85:74:24:7c:4c:05:80:13:59:68:2d:f7:e1:9f:4d:
         bb:de:10:fb:eb:e9:6b:98:73:14:1b:94:80:49:27:1d:2a:38:
         8f:3c:99:15:db:be:ac:ed:fb:ce:86:b4:bd:c3:22:2a:e6:a8:
         6d:f6:fd:44:56:33:8c:10:09:70:8b:9e:6c:bb:c9:ce:2e:dd:
         63:de:af:09:df:fa:19:75:9f:49:1f:50:62:c7:c7:0f:88:d1:
         c9:6b:24:03:3c:0a:f6:19:2d:82:73:bf:17:04:19:3f:08:3f:
         9c:45:47:08:2c:46:f4:03:bb:a4:3f:c6:13:56:ab:91:46:3e:
         a2:0f:d8:5a:3b:33:82:03:b3:31:fb:fa:ee:f8:15:04:17:d9:
         5e:a6:e5:82:8e:6b:28:9c:22:7e:a0:62:8c:4c:bd:ae:95:94:
         70:e5:95:76:a2:d1:09:da:fd:80:ce:a3:b6:ac:0d:80:fb:3c:
         06:34:b7:45:ef:c9:3b:c5:e5:04:a5:41:e1:ee:83:9c:d1:f2:
         53:85:e2:c5:ba:71:94:d3:64:f7:e5:ea:23:8f:b3:e6:3b:06:
         dd:2d:79:93:b0:9e:bb:07:57:1e:91:38:c6:6e:83:df:53:6d:
         d1:c5:6d:a2:a6:bb:8f:09:80:a1:23:72:a9:7d:27:e8:8b:2a:
         26:34:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:21 2026 by rpki-client