Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1E3FCA688C0911F19F6D15F94111F970.roa
File:                     1E3FCA688C0911F19F6D15F94111F970.roa (raw, json)
Hash identifier:          tbrTy2IMlg/8Hfl5uG4XQkXTRBnGsmTxtfTLyKs7+zg=
Subject key identifier:   B9:A2:2F:7A:C3:64:B2:37:B3:25:CB:EC:B6:5C:D5:90:28:04:D9:B7
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0C29
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1E3FCA688C0911F19F6D15F94111F970.roa
Signing time:             Thu 30 Jul 2026 11:23:42 +0000
ROA not before:           Thu 30 Jul 2026 11:23:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     39600
IP address blocks:        45.126.84.0/24 maxlen: 24
                          45.126.85.0/24 maxlen: 24
                          103.18.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 18:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: Jul 30 11:23:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6b343d-a0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:5a:ab:a6:2b:f6:54:5e:1b:61:12:86:90:
                    09:68:04:4f:0d:d4:2e:33:24:43:c7:f8:ab:74:24:
                    2a:71:78:5d:b2:c5:78:5e:d2:bd:e8:fb:8f:a7:16:
                    cb:7e:09:58:84:a3:12:20:75:0c:20:c5:51:be:37:
                    4b:83:9d:44:9a:ba:50:f3:e0:72:4e:96:51:e2:ac:
                    20:54:a4:e1:2d:27:66:a1:29:24:4f:e5:e0:3f:9d:
                    f3:be:09:c6:02:60:20:69:93:f3:25:6f:b5:6b:f5:
                    80:8b:e8:23:92:ff:10:12:e3:86:a7:90:06:45:54:
                    12:a6:24:83:0e:a0:24:18:15:6a:93:10:2e:52:4d:
                    39:93:f4:73:74:26:7d:95:c1:63:26:1e:d5:59:81:
                    ee:ab:80:8d:53:64:0a:d9:af:6b:57:23:57:ac:5e:
                    41:07:dd:72:2a:85:3f:26:a6:f5:c1:45:19:eb:7e:
                    8e:b9:af:cf:15:66:81:85:eb:63:50:31:c7:e3:7b:
                    d8:0f:a4:d1:95:de:cc:12:ea:de:81:fb:c8:09:48:
                    2c:c7:38:9e:f5:42:70:35:0d:bf:cb:8a:a3:a7:c3:
                    04:0f:3d:eb:22:85:03:51:66:94:e0:bc:4f:87:14:
                    60:9e:19:ba:42:30:b3:0c:62:c5:bb:8a:9e:41:80:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:2F:7A:C3:64:B2:37:B3:25:CB:EC:B6:5C:D5:90:28:04:D9:B7
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1E3FCA688C0911F19F6D15F94111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.84.0/23
                  103.18.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:29:06:f6:aa:3e:54:1b:05:59:a3:04:8e:3f:9c:3d:73:
         63:3d:00:60:59:fb:5a:cc:7b:d2:6a:c5:f9:65:5b:35:c6:6b:
         1c:bd:43:65:1a:b5:d7:c5:d3:c2:25:86:cf:dd:b9:d6:11:2f:
         ae:e5:b4:79:80:ee:39:b4:f4:fb:59:0f:80:0b:e5:cb:66:81:
         be:4e:4a:5d:f2:c7:23:fa:73:a1:cd:1e:b4:4d:ef:60:63:e9:
         c7:9c:b9:90:1d:a9:39:03:15:82:b0:fc:76:0f:ee:9e:fa:98:
         62:31:03:5c:78:50:de:3c:3f:bd:0e:ab:b5:16:6b:4f:d8:16:
         0f:ed:00:56:4c:b7:4d:bb:8c:a5:f6:55:e8:5b:75:7f:a0:0f:
         a9:17:7f:9d:c6:0d:76:88:ee:97:d6:7f:55:88:be:bf:2d:bb:
         37:7c:c1:76:38:06:a0:9c:95:fc:e6:47:51:bd:c3:67:a6:89:
         9b:2b:11:74:cb:30:d1:9b:c4:49:fe:18:89:de:20:a9:78:0b:
         c2:6f:ff:5e:fa:26:7b:03:fd:6d:53:55:e9:42:e1:53:2b:73:
         9d:58:af:a2:17:74:05:50:d9:63:cb:d2:43:b9:2a:49:95:d9:
         64:03:0b:28:bc:91:db:6e:44:f7:dd:4a:2b:51:d1:01:92:c7:
         ed:05:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:15:54 2026 by rpki-client