Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
File:                     DEBDCECAC2CF11EFA805380FC4F9AE02.roa (raw, json)
Hash identifier:          BRuGyycZQc3GJn0eRf2SInG58O4wsAgObAJqTyqyfeA=
Subject key identifier:   15:E4:19:EC:7C:B8:CE:2A:74:1E:C2:B2:AF:A5:59:EF:56:25:5C:57
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0586
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 23:47:58 +0000
ROA not before:           Sun 30 Aug 2026 23:47:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135046
IP address blocks:        103.152.116.0/24 maxlen: 24
                          2001:df4:e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Aug 30 23:47:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94c12e-ea2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:7f:af:0a:99:0c:2b:c8:a2:df:f0:28:6a:
                    73:a9:ba:ab:ee:21:4c:1c:59:c7:e5:d6:ee:77:4d:
                    8e:3a:fe:62:97:81:8a:08:c7:e3:4b:cf:d0:26:db:
                    bd:72:59:2b:81:81:05:ea:ba:ad:b5:52:df:3b:d8:
                    73:df:fb:6e:59:9e:93:89:c1:c2:3c:b8:39:8a:44:
                    56:ed:6f:95:b4:4d:71:75:d5:d3:38:3e:4e:80:ca:
                    f6:8f:88:09:5d:a1:f6:f8:77:04:9f:58:22:76:f9:
                    8d:8e:7c:00:00:14:7c:00:6b:65:84:5c:c0:0d:f4:
                    10:08:96:e8:2f:33:46:60:1c:2b:56:c9:ca:ea:fa:
                    f1:64:cf:da:54:e6:35:c0:20:a4:d8:37:fc:b7:78:
                    e6:c6:2e:41:b4:f3:0e:ba:b0:d5:ce:7d:15:d2:04:
                    c3:f4:04:0b:b1:9f:a8:c3:9e:88:7d:95:5d:b7:06:
                    9f:1d:4c:68:dc:45:db:6f:3e:6c:93:50:f8:75:66:
                    9a:8a:c1:4d:57:55:98:50:01:e5:4a:da:00:b4:f6:
                    4c:ca:4b:68:79:2f:6a:41:e6:0d:51:1c:b6:b1:06:
                    2d:71:e0:ce:5b:f5:c4:96:31:73:a1:2a:4e:57:f3:
                    6c:ec:9b:22:66:dd:ea:a9:06:93:3c:83:5e:4d:f6:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:19:EC:7C:B8:CE:2A:74:1E:C2:B2:AF:A5:59:EF:56:25:5C:57
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24
                IPv6:
                  2001:df4:e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:20:14:31:2e:f9:77:8d:62:37:6f:f2:42:56:ad:94:8d:
         cb:ec:d5:cc:c4:a6:1a:aa:84:36:32:cf:f0:e2:d6:93:71:98:
         16:48:b6:02:b1:3e:cf:13:2b:d6:d5:82:51:ad:9e:86:64:de:
         42:01:2f:ef:08:29:15:24:a6:6a:80:ff:05:66:01:93:e9:a3:
         58:60:3d:b2:c5:67:93:c5:4d:86:7c:df:49:bf:41:cc:91:81:
         04:12:73:b7:b0:50:e3:c9:ff:99:17:8e:e2:d1:82:16:ba:b7:
         06:3d:e0:95:ac:fe:59:28:cf:6e:a1:6b:80:97:1b:4f:2f:f0:
         b7:65:cc:27:ea:61:12:a7:c3:a5:79:ce:1e:a7:83:f9:be:92:
         a0:af:b5:4a:2f:c3:74:b0:8a:d5:f9:87:56:16:bb:5a:23:ac:
         40:86:ab:00:82:9f:95:c3:e4:29:d7:16:0a:ac:c6:16:09:28:
         3b:f7:63:a5:84:9e:19:c0:a6:bb:4d:86:0e:8e:82:29:85:7a:
         30:d7:29:8f:d8:c2:d3:81:0e:08:f7:10:45:6c:2c:86:43:cc:
         ee:2b:aa:8a:b6:c9:9c:9f:f3:2f:3d:95:51:c7:cf:f8:aa:7f:
         fc:49:f5:53:0e:ff:71:16:b8:8a:a6:4a:f5:c5:59:eb:e1:f7:
         d7:86:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:27:50 2026 by rpki-client