Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa
File:                     652A87CC65EC11F0BAEF8066C4F9AE02.roa (raw, json)
Hash identifier:          3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=
Subject key identifier:   18:A2:58:E0:0F:FB:C7:35:CD:4A:15:B3:DB:E9:B7:96:9D:7E:B6:97
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       03B4
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 01:49:59 +0000
ROA not before:           Wed 05 Aug 2026 01:49:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138115
IP address blocks:        103.67.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Aug  5 01:49:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7296c7-3191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:9a:b1:b6:fc:8f:a2:7c:5e:9c:8e:a1:02:
                    fe:96:b1:05:90:c0:57:9d:8d:d6:bf:be:44:c4:c6:
                    55:02:c7:78:d8:de:ed:f2:62:f3:a7:10:c8:b3:cd:
                    99:8c:3e:a8:6d:f7:e7:4d:b4:e8:bf:f2:c2:f5:84:
                    12:22:e0:4d:f7:f9:af:8a:48:ba:c0:94:ad:4a:c0:
                    1f:a6:b0:77:6a:26:6c:de:49:6a:9b:54:f2:3e:db:
                    00:37:1d:1a:66:b4:a4:c2:e3:57:3c:88:74:6f:d4:
                    e2:bc:18:61:2c:12:c4:6e:10:5b:5f:d6:ed:75:12:
                    20:98:39:b1:26:ba:92:ba:46:7e:8b:5e:ae:37:31:
                    44:ff:be:e9:b7:61:8a:d7:cf:4a:92:53:a2:d6:fe:
                    7c:7a:22:47:99:16:4c:96:85:f3:26:88:65:11:0a:
                    36:f3:29:c6:dc:5c:9d:5b:bb:e2:0b:4e:ce:fe:fc:
                    f9:4e:e1:8f:d5:09:2f:4b:2a:e9:d5:1c:6d:45:f8:
                    f9:99:63:cd:6a:62:54:3c:ae:73:c1:f6:00:6c:2a:
                    b1:e2:3d:13:29:31:91:47:f6:3d:3d:3a:6c:94:86:
                    d4:e6:1c:5a:7d:44:58:b1:a7:d1:09:4c:4a:59:7a:
                    cd:0a:d9:fb:8e:41:16:98:cf:19:8b:db:a5:41:ea:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:58:E0:0F:FB:C7:35:CD:4A:15:B3:DB:E9:B7:96:9D:7E:B6:97
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:58:f5:b9:f0:78:fa:49:fc:ad:8b:d1:99:9f:95:64:b4:
         31:25:3b:db:68:18:23:e5:76:b7:34:f5:fa:25:f3:2c:32:26:
         b3:30:13:fb:4f:d9:29:31:26:09:81:6e:4b:65:03:25:c8:f2:
         ba:36:67:3a:1a:f3:9e:3c:39:4f:e8:8a:f0:a1:13:41:65:2f:
         3c:2a:e1:8b:94:d6:13:c7:c3:c3:44:ce:e1:c5:ec:e3:81:d7:
         53:a5:65:c2:46:3a:8d:ba:66:f6:14:ea:61:cd:ff:39:5f:bc:
         28:02:a7:32:a1:e5:fe:d9:c3:a2:43:2f:d4:9a:72:2a:49:26:
         51:d8:2a:91:07:ce:03:0a:85:d7:b7:3a:cb:45:fc:79:11:b8:
         60:68:51:df:f9:f5:7e:31:6b:81:00:52:ae:d5:22:40:a9:ab:
         b3:59:bf:66:ab:21:c8:cc:3f:8a:13:ad:07:b6:49:79:8e:3f:
         25:23:fc:f9:57:3f:94:29:68:f8:b5:63:85:fa:27:1b:d2:c4:
         4a:18:7d:d6:40:24:c9:e8:60:fc:88:7e:2d:06:34:82:62:ca:
         a4:74:b5:65:98:7b:66:70:0b:69:27:b9:e8:a9:2f:78:3a:48:
         14:4e:97:dd:8a:25:6f:54:48:23:a4:de:02:42:0c:90:15:91:
         ee:cb:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:22 2026 by rpki-client