Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
File:                     1FC6B062419811EAA268D964C4F9AE02.roa (raw, json)
Hash identifier:          cx014ESLOhFM76yzPtNnnrYviqo4Epy6yhT+irMExDQ=
Subject key identifier:   F4:54:1A:92:9C:79:F8:91:8E:F0:31:AD:9A:C9:D9:0F:EE:02:C8:55
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0C29
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 19:38:41 +0000
ROA not before:           Wed 02 Sep 2026 19:38:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9919
IP address blocks:        103.246.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Sep  2 19:38:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a987b41-e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:1d:5d:e3:fa:73:8b:f9:07:3d:b3:68:68:
                    7a:56:be:b2:42:6d:64:fd:56:a3:bf:75:49:17:01:
                    43:1d:e6:de:47:24:e6:c1:08:f6:f6:ab:98:31:99:
                    71:15:13:a2:ba:83:2c:4d:bb:0d:a6:fa:f5:bd:26:
                    13:4b:f0:4b:56:a8:2e:95:8e:1d:2b:51:9e:94:e1:
                    d4:6c:5b:c8:75:cf:58:1b:3c:3d:c0:1a:ce:42:9d:
                    de:08:3b:d4:fc:7d:e5:c3:40:71:99:8b:ac:c6:2d:
                    45:93:ee:60:6e:ea:34:9a:ff:79:c4:2b:e4:e9:d8:
                    6b:41:01:91:e3:fa:a4:92:2c:79:d3:12:93:c9:99:
                    96:35:6b:4b:41:f0:00:6d:1e:8c:56:e6:62:91:0c:
                    74:21:8d:9c:7f:a8:56:3e:16:7c:0d:86:74:1a:e8:
                    39:5c:52:04:f4:40:e2:3c:d5:45:6a:bd:cd:48:53:
                    ee:c2:dc:1f:23:98:9e:22:a1:dd:25:89:93:82:f6:
                    9e:f2:f8:65:0e:ce:29:dc:ae:a7:77:db:5e:1d:e4:
                    9c:91:a8:03:e7:fe:9d:cb:94:c9:76:89:6b:94:83:
                    2b:a5:7a:0e:7e:e5:33:3c:27:5a:f6:3d:9d:c0:60:
                    84:b7:1a:b0:fe:bb:44:08:b0:91:6b:b0:9b:1c:4d:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:1A:92:9C:79:F8:91:8E:F0:31:AD:9A:C9:D9:0F:EE:02:C8:55
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1FC6B062419811EAA268D964C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:40:71:9d:dd:4e:6a:94:64:6a:27:64:3b:26:e7:36:82:
         0a:7f:ef:ff:32:2c:20:21:31:fc:b0:af:09:69:57:9c:c1:31:
         0e:57:ba:95:40:96:fb:b7:bc:da:58:6a:69:d5:eb:f5:26:86:
         63:07:58:31:96:4e:ff:15:b3:2d:c4:fe:2c:0e:79:5e:b2:1e:
         e1:1c:f2:f0:8c:ea:07:cb:e8:57:f0:48:11:2b:6b:05:b4:57:
         a0:df:d5:94:88:ac:89:3d:fe:a4:96:f9:17:04:26:41:03:b8:
         7b:20:19:01:ea:9a:2a:36:92:9c:fb:58:d3:32:d6:99:f5:e3:
         1e:8a:cf:e8:c6:0e:62:59:a9:af:4f:bd:df:af:17:dd:4e:b9:
         f2:0a:0f:8c:5c:cb:2a:92:62:66:f2:ab:8b:54:5f:08:1f:d7:
         b1:5d:a2:8e:5c:f4:4b:84:01:95:8c:46:57:1e:08:b4:1f:18:
         57:fb:e2:fd:78:00:1d:58:87:06:fc:91:8d:87:6c:a1:cd:e4:
         74:80:22:6d:48:ac:fc:df:4d:43:ff:02:86:e5:76:cb:70:bd:
         50:f3:51:20:a4:66:58:cc:c5:27:54:54:7e:e2:f0:d5:2c:7b:
         e0:87:af:af:a9:1a:66:e5:fd:f9:bb:46:dd:ab:1a:17:a6:1f:
         a4:f1:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:32 2026 by rpki-client