Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
File:                     67818EF02BD911F09AF6B821C4F9AE02.roa (raw, json)
Hash identifier:          8sHzGwMFSRX42ll2UiRzxmeF+R81v0HwSCPkgtrSjW8=
Subject key identifier:   37:4D:F1:19:80:25:8B:DB:26:F3:43:C3:41:C0:8E:19:A5:B2:38:67
Certificate issuer:       /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial:       0124
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
Signing time:             Fri 23 Oct 2026 06:55:16 +0000
ROA not before:           Fri 23 Oct 2026 06:55:16 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     212836
IP address blocks:        103.173.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 06:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
        Validity
            Not Before: Oct 23 06:55:16 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6adb04d4-2c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:d0:d1:36:b0:ef:a9:be:67:47:70:7c:0a:
                    d1:f6:77:98:12:c9:6b:70:3f:00:81:89:bd:27:5d:
                    c8:6e:8a:b5:d3:e5:85:bf:21:6c:62:0b:1d:2d:ae:
                    ff:42:b0:c0:f6:7c:12:6e:d2:88:a4:e4:7c:57:82:
                    65:2a:e6:af:ff:45:bd:43:19:c0:0c:1e:4a:95:50:
                    d3:f7:90:f2:5c:fb:4e:47:0a:23:e6:40:0f:27:e6:
                    3e:0d:44:c6:00:f0:71:a7:6f:93:1c:72:3b:52:ee:
                    18:3b:df:ab:e3:4a:70:78:90:3f:f7:48:ea:58:02:
                    ea:0b:16:88:9f:3e:6b:ff:20:dc:c0:e1:0f:be:84:
                    7f:be:a5:bf:86:27:a0:e1:5a:51:4f:4f:8f:7d:55:
                    c6:70:ee:f2:fe:20:06:0e:c5:d2:12:7c:5f:40:17:
                    98:9e:85:d3:63:35:f9:25:f6:e7:48:a1:ee:03:b1:
                    4f:21:c7:d4:e0:28:1f:48:70:7f:b2:15:7c:e1:09:
                    97:6e:21:02:b4:e9:a9:ab:3f:6a:4a:65:5f:a0:44:
                    ea:42:0e:a5:84:b1:4f:73:1a:7c:51:09:d5:a1:28:
                    ea:40:ea:35:6c:51:b7:10:62:a2:fd:5b:ca:8b:a1:
                    8f:c0:71:20:dc:4a:c4:86:f5:b4:2e:20:5d:04:b9:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:F1:19:80:25:8B:DB:26:F3:43:C3:41:C0:8E:19:A5:B2:38:67
            X509v3 Authority Key Identifier:
                keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:90:19:0e:5d:b0:9b:e4:77:df:d0:05:e2:6a:74:7b:ff:b0:
         f5:82:54:5f:4d:80:c3:c5:5a:76:33:e0:57:c0:bb:3a:b1:2b:
         b1:f6:36:f2:97:ee:2c:c1:56:95:95:b6:41:0f:a3:c7:3f:b3:
         01:8c:1d:ee:67:85:c8:2c:c6:68:60:9d:e6:55:74:3e:01:f7:
         ce:a1:cd:2a:e0:19:48:3b:98:22:36:1c:87:c9:0e:64:ef:52:
         16:b4:1c:84:62:26:66:b8:01:21:bc:8b:14:19:78:0f:61:5c:
         30:74:0e:87:eb:0e:1d:8a:c6:2f:ca:9d:e2:f1:85:bf:2b:74:
         fa:47:4b:45:0c:9c:88:a9:0f:2a:bd:a2:1a:46:ce:9d:df:47:
         d9:66:7c:ff:d8:63:2d:28:c5:b3:98:a1:ce:2a:d4:0b:ad:b7:
         b3:cb:dd:91:c5:3d:7e:3a:52:db:47:27:1a:d1:22:23:00:dc:
         09:dd:6b:e4:44:4c:1a:35:dd:d2:61:7d:2b:9a:41:cc:1f:51:
         1c:34:45:00:11:b8:ea:ca:ba:55:9a:45:60:96:f1:16:49:61:
         7c:68:28:93:87:8e:d6:f6:17:7e:77:5e:ab:70:14:77:dc:cd:
         bf:3f:c3:0c:bc:84:4e:c8:27:81:ea:39:57:41:ec:7f:3a:81:
         6c:ac:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:02:45 2026 by rpki-client