Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/F5AA194CB2C911EF91AE9209C4F9AE02.roa
File:                     F5AA194CB2C911EF91AE9209C4F9AE02.roa (raw, json)
Hash identifier:          06dX2KVWPpmUbkoYBEvGaO5JfDjEnnsVzxsCvPM9wdk=
Subject key identifier:   EB:7E:38:59:4D:64:C9:CD:4B:E3:65:A3:68:87:D1:9B:C9:00:DE:D3
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       0263
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/F5AA194CB2C911EF91AE9209C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 02:53:27 +0000
ROA not before:           Sat 29 Aug 2026 02:53:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     13378
IP address blocks:        103.245.24.0/23 maxlen: 24
                          2001:df2:c240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Aug 29 02:53:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9249a7-9beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:5c:d7:15:fc:62:35:2f:bf:47:a9:30:d2:
                    dc:7a:b0:11:74:ee:f6:39:ce:be:d9:62:e7:67:ab:
                    96:28:63:2f:f2:1d:00:a5:d3:ca:b5:a8:0b:9a:95:
                    08:e3:8a:7b:61:eb:59:1b:dd:01:19:2f:c7:b9:5d:
                    72:b5:a8:8a:14:eb:03:8c:c6:e4:ed:09:53:23:0c:
                    97:37:d3:5e:1c:5f:4b:e5:3d:0a:69:4d:6d:27:ef:
                    1e:90:0c:37:4c:77:32:b9:c2:60:90:89:fa:26:2f:
                    38:40:bc:a0:eb:ad:27:c7:db:4e:a2:11:aa:21:b0:
                    f3:d0:a9:3e:1d:ed:94:43:81:55:dc:59:ad:b5:40:
                    e0:a6:e8:1c:e4:4b:d3:91:49:ce:fb:1e:28:df:3c:
                    53:87:a0:9d:82:26:8c:53:b5:63:14:e4:8d:96:2a:
                    f1:0b:f9:2a:3c:f3:20:b8:61:ae:cc:07:17:98:de:
                    eb:7a:8d:b1:5d:b5:46:31:91:8f:99:b8:ab:1d:ab:
                    cc:ad:29:29:61:96:90:a3:1d:db:1c:65:ab:81:4c:
                    75:fc:07:a5:38:4d:bb:29:e8:c9:3e:7a:4a:57:72:
                    f3:71:e1:28:ed:f7:02:b5:6a:41:75:49:1c:99:d7:
                    6e:af:01:df:e2:81:fa:58:6c:7e:32:9d:32:3b:a0:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:38:59:4D:64:C9:CD:4B:E3:65:A3:68:87:D1:9B:C9:00:DE:D3
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/F5AA194CB2C911EF91AE9209C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.24.0/23
                IPv6:
                  2001:df2:c240::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:82:76:0f:fe:9d:97:d8:e9:b1:a3:ef:8d:1e:97:4a:00:4b:
         53:f7:01:e4:45:ee:dc:53:ef:9d:9c:ee:72:57:66:0b:76:e1:
         73:09:99:3d:a2:a1:4e:85:9d:ff:fc:72:c5:72:bb:46:f6:0b:
         69:2b:55:8c:75:21:9c:3b:d3:a2:70:18:83:b7:da:49:c6:72:
         43:c1:64:19:06:57:6f:63:90:36:a4:f1:2a:b5:0e:58:57:1a:
         ec:05:86:f2:61:5d:73:0d:7f:e9:43:38:bf:b5:11:bf:ee:50:
         06:2d:8b:a2:d5:9d:88:e9:ad:ff:11:3e:85:7e:1a:80:22:6e:
         b4:ce:89:d8:25:04:af:34:ce:c8:6a:94:3c:18:83:67:d3:f9:
         c1:cd:2f:78:b4:15:53:58:8d:f3:e2:77:af:0b:3b:bc:98:5e:
         ef:9e:98:ec:02:55:94:87:cf:8c:2f:a0:03:be:79:40:95:7d:
         3c:75:ec:a1:bd:57:83:57:20:04:ea:96:41:97:63:ce:d6:f2:
         dd:48:e0:5f:4a:8c:c1:46:bb:e6:f2:c2:a4:5d:68:2f:94:df:
         41:de:07:d4:d0:26:ad:e4:fa:49:b7:dd:25:5e:d2:1c:3f:95:
         3e:8e:ac:18:51:2e:3e:43:f9:98:c2:f2:3d:fa:0a:44:a1:46:
         68:13:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:56:26 2026 by rpki-client