Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
File:                     8E4647E6EB2911EB9891D01DC4F9AE02.roa (raw, json)
Hash identifier:          1LoYhNhbrJS2K/AOCU0/gnT+ZLyx3HtIk+zT/REHe2Q=
Subject key identifier:   0D:F4:CE:1E:F3:C9:55:E6:2A:69:45:99:22:D9:D7:F7:AD:E6:F9:17
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0DE7
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa
Signing time:             Sat 08 Aug 2026 18:35:30 +0000
ROA not before:           Sat 08 Aug 2026 18:35:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.80.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Aug  8 18:35:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7776f2-063f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:39:91:13:42:0b:17:a7:1f:46:bc:fa:84:
                    6a:03:1d:bf:a7:c5:86:b7:8e:fc:1b:15:e9:b3:c7:
                    51:d9:9c:b9:ab:64:c7:39:2f:5e:3f:fe:3b:54:e8:
                    15:39:0e:25:64:69:f5:60:29:4d:07:34:bb:76:fc:
                    42:21:cc:59:d3:d4:38:a8:c4:72:9d:f2:c8:a6:7f:
                    b2:94:ff:5c:d6:fa:4b:b8:f3:1c:7e:d4:89:cc:67:
                    4f:ec:81:2a:7c:7f:aa:12:2b:7d:25:c8:93:87:19:
                    30:23:3e:99:4c:34:dc:07:81:39:a3:52:f9:7d:09:
                    44:ef:87:19:34:21:b1:3b:28:4b:5a:cd:84:8f:74:
                    08:38:7a:f1:ab:a5:ec:55:75:6a:e2:64:7f:2c:05:
                    41:9e:36:7f:71:82:0d:a7:2f:8a:e2:60:23:c7:5f:
                    fe:68:a6:7e:70:7a:f1:73:91:d8:af:8b:d5:c3:c3:
                    48:69:b6:ef:fd:24:4d:45:96:5b:d9:84:27:ad:30:
                    34:92:0f:b0:ca:43:5f:bc:29:d4:30:8c:7c:18:a5:
                    93:a9:0e:50:38:33:85:58:16:52:79:5a:9b:56:08:
                    c1:c7:69:49:43:51:2c:e9:a2:b3:67:b5:f2:98:bc:
                    9f:07:26:33:73:e1:e7:ca:0c:73:f0:ec:69:b9:f2:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:CE:1E:F3:C9:55:E6:2A:69:45:99:22:D9:D7:F7:AD:E6:F9:17
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a0:65:72:7c:c6:9b:ff:f1:a9:20:ab:f3:51:b9:44:1a:ad:
         8b:92:be:94:0f:03:3e:c7:4c:14:64:78:27:10:a4:f4:c7:e2:
         be:39:25:bb:55:ae:b0:0a:b3:51:f2:43:b9:53:c1:51:28:39:
         fa:bb:c5:30:dc:49:c8:a5:92:92:40:24:5d:11:6d:51:fc:f0:
         0c:bd:d6:12:34:37:42:39:e9:fc:54:1f:aa:28:6c:99:ff:88:
         4e:9d:60:d1:3f:5d:34:a7:6d:00:28:f5:48:93:7a:f2:15:92:
         dc:8d:ac:4e:96:02:0e:5b:cb:6c:a1:6b:1f:ce:d3:a0:4c:fa:
         af:b9:f2:ff:bb:8a:1a:d1:c3:b3:e6:5d:f5:1d:6c:fe:e2:6d:
         b1:ec:bd:f8:8f:48:0b:98:5d:52:8f:6c:17:f1:d5:e1:70:10:
         30:3a:43:01:42:6f:e0:b6:6a:c5:42:35:fc:8b:4e:20:e0:65:
         5b:ab:ad:db:99:5e:75:49:31:66:d0:fa:5e:40:c6:04:2a:5a:
         32:33:a4:ef:9e:78:76:51:45:30:da:87:56:cc:3a:cf:0b:c6:
         b9:a2:cf:b1:d3:43:b2:68:8c:fb:75:2d:f1:13:68:b5:e0:d0:
         f4:32:ed:19:43:b8:f0:3e:01:41:24:d5:5b:0d:85:88:08:92:
         5d:ae:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:36 2026 by rpki-client