Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa
File:                     D902277E8EA711F19DEFB3165011F970.roa (raw, json)
Hash identifier:          makP1nCQSr7msWQWb7v+jKtBFmxktQvlRg6b5kvtgUc=
Subject key identifier:   4A:B0:37:13:51:1D:CB:B9:7A:AE:28:50:79:01:A2:E6:CA:3F:6D:67
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       05BD
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa
Signing time:             Sun 02 Aug 2026 19:24:58 +0000
ROA not before:           Sun 02 Aug 2026 19:24:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9288
IP address blocks:        103.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Aug  2 19:24:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6f998a-0c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:5e:40:b1:04:4d:af:9c:25:14:2c:7f:ae:
                    b9:7a:b7:dd:de:1d:08:36:c6:99:c5:f0:38:9f:df:
                    9e:a0:74:8b:35:d3:64:63:fd:53:d8:f7:48:6d:c7:
                    e6:a0:ca:f4:e7:f3:fe:8c:30:4b:ca:8b:83:ba:d2:
                    84:40:9e:f8:19:39:db:ff:00:d6:60:f6:56:70:b5:
                    e6:fe:63:af:06:4e:eb:1c:ff:fa:57:34:06:19:cb:
                    bb:87:e9:2e:e3:ba:ad:6e:16:af:32:f3:10:57:bb:
                    ae:89:98:55:c6:57:f9:73:06:7a:19:e7:2f:ad:f7:
                    f3:4a:41:03:b6:14:55:14:a0:69:f7:26:01:85:cf:
                    b2:20:0f:13:67:c6:c4:66:ca:14:5f:fe:dd:3b:e0:
                    e3:0e:3f:7f:57:ef:b0:c7:96:36:f8:7d:d4:99:32:
                    99:08:5b:db:7b:55:56:16:e6:fb:4c:c5:07:7c:e1:
                    97:21:f3:5d:36:64:1f:6c:c2:ab:29:fc:7d:04:d8:
                    de:31:62:8e:0f:65:a8:70:e3:ed:18:a9:d6:cd:d8:
                    04:eb:07:76:ed:92:ca:29:2e:f5:c1:86:55:c1:cf:
                    d5:28:dc:a8:76:d2:a5:a3:6d:dc:db:44:e6:3a:74:
                    cd:25:5e:59:50:0d:a7:4c:21:41:af:33:75:a0:69:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:37:13:51:1D:CB:B9:7A:AE:28:50:79:01:A2:E6:CA:3F:6D:67
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/D902277E8EA711F19DEFB3165011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:da:89:19:d1:d5:97:0c:a2:1f:e4:4b:27:f0:8b:d5:ff:
         13:32:91:fc:88:41:93:f0:18:1c:5e:e4:8f:74:7d:1b:a1:a2:
         a0:b5:62:11:b7:66:5b:38:a3:2f:63:73:4e:39:2a:bf:f6:0a:
         e8:90:16:89:46:61:66:19:6d:c5:fc:60:53:c8:05:8e:32:1f:
         4e:e3:cc:34:9e:53:23:ad:dd:b3:e5:bf:72:e9:b9:d4:9b:8f:
         20:c1:cb:79:a2:ea:45:cd:2e:76:ef:8e:f8:14:a6:73:aa:cc:
         a2:fe:57:bb:1e:9a:33:0a:e6:2c:21:bb:3e:94:18:00:b2:91:
         e1:70:00:d7:d6:51:4a:19:e7:26:0a:b2:cc:75:ac:3c:61:6d:
         9d:6b:d3:e0:d8:69:e0:3a:c6:b9:e2:98:58:12:20:05:08:51:
         57:66:17:5e:9f:f8:7c:e4:e1:69:0c:dc:68:d9:4f:91:a3:73:
         8c:da:69:81:4d:91:90:df:3f:d4:46:92:1f:1f:84:ce:e5:6e:
         64:a9:61:6c:fe:a7:27:85:f7:e6:02:f5:a9:6f:92:4b:e2:b8:
         1b:e0:21:aa:a4:83:3a:5d:ab:6c:a1:bf:af:ff:e1:1f:55:c2:
         12:2b:22:94:4d:82:b2:f8:4b:06:fb:ad:6d:5d:eb:c1:17:54:
         15:f4:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:07:01 2026 by rpki-client