Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa
File:                     AC9A49A6B79811EF9C8DF330C4F9AE02.roa (raw, json)
Hash identifier:          cMVoIEw+TpzHoIqDpumZq8IhMLK4MbPk8VbE2szvauI=
Subject key identifier:   CE:02:94:06:BC:BD:1C:DC:5E:49:BA:47:6E:46:04:69:26:B7:21:C8
Certificate issuer:       /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial:       026A
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa
Signing time:             Sun 11 Oct 2026 03:51:46 +0000
ROA not before:           Sun 11 Oct 2026 03:51:46 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     38562
IP address blocks:        103.203.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
                          rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
        Validity
            Not Before: Oct 11 03:51:46 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acb07d2-15a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:a8:91:a5:b6:70:2a:80:ef:42:9d:0f:ce:
                    81:3f:ca:f4:97:ed:31:51:ec:d4:51:6d:50:d9:e9:
                    de:a7:2b:b6:27:76:c5:e9:71:34:a1:ad:4f:ae:a6:
                    30:9a:e2:6e:f5:07:75:91:6f:45:8b:c2:9f:eb:95:
                    f1:3d:8d:9a:fe:5f:0e:ca:e8:21:36:b4:df:f2:3a:
                    64:98:d7:ea:d1:13:41:33:e5:55:34:89:44:0d:af:
                    2e:7d:ed:50:76:25:77:0b:8e:6c:77:ba:60:6e:16:
                    89:d9:51:48:84:33:ca:ec:fa:93:51:e0:1c:f1:36:
                    23:29:48:bc:2a:a2:23:5d:80:44:27:84:b3:67:97:
                    8c:3e:c1:9e:13:13:f9:9e:16:d8:d2:00:03:fe:32:
                    cd:95:bd:c7:ba:d2:ce:d2:c4:9b:6e:43:13:83:1b:
                    a1:99:b4:c0:d2:dc:0f:fe:20:d7:19:fa:72:d5:39:
                    f4:d4:ad:5b:25:2b:49:c3:48:ed:c3:0b:bf:1a:72:
                    98:5f:66:8a:b5:4a:c8:94:f9:8f:b1:d9:f7:70:8a:
                    19:1d:66:56:5a:b2:82:11:fb:0f:3d:25:c4:7a:7e:
                    83:0d:ce:ee:a7:cc:04:1d:b9:ec:ce:fc:34:13:6c:
                    df:21:d1:eb:4b:af:de:43:2e:52:5a:3a:f9:6c:76:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:94:06:BC:BD:1C:DC:5E:49:BA:47:6E:46:04:69:26:B7:21:C8
            X509v3 Authority Key Identifier:
                keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/AC9A49A6B79811EF9C8DF330C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:6b:93:71:0e:13:fa:93:ad:01:b5:01:4f:4e:f0:06:9b:
         53:51:63:4b:e3:a4:86:68:64:cc:00:ea:e3:41:4a:df:6e:ea:
         f6:92:63:af:0d:48:c8:29:ab:ec:62:8c:69:6b:f0:a5:07:07:
         f4:1d:e1:e0:a8:d6:1e:6a:56:53:8e:8b:14:29:58:4f:c3:f1:
         3f:4c:dc:01:c3:1e:8e:3e:b5:56:eb:0e:fb:75:a2:30:54:b4:
         76:76:21:f4:32:a4:62:74:93:06:ad:58:d9:09:99:62:08:cd:
         cd:16:cc:70:d5:fa:72:99:4c:0e:d7:08:92:49:12:ab:3a:84:
         8d:ec:d8:59:91:f2:37:1f:f9:0a:19:9f:d1:84:dd:e9:ad:aa:
         02:a1:9d:b6:e6:0e:60:20:cd:e2:3a:ec:db:c8:85:a8:e5:9b:
         fc:c1:b0:f8:98:d9:63:d3:26:38:12:be:a5:a0:7e:3f:0f:c0:
         72:71:e4:f3:19:7e:46:8b:e1:a0:64:cf:ec:fb:bc:30:bc:11:
         96:35:8b:13:80:a2:25:97:50:82:ba:84:9c:c3:02:99:2d:3f:
         8d:5b:d9:94:7a:c2:63:d4:ea:b3:96:1c:61:87:98:10:5e:1e:
         f1:30:7d:dd:da:60:fe:05:64:28:a9:9d:79:14:20:d5:32:a1:
         d7:d9:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:44 2026 by rpki-client