Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
File:                     DA6883FC0F8611F0955A002EC4F9AE02.roa (raw, json)
Hash identifier:          ujD9rjcrRHYOqCEjUIoZvFUUB/o5LyWXBu1ngVXvlf4=
Subject key identifier:   6E:78:3C:38:CD:C5:0A:8A:D3:3E:8C:14:26:F8:52:7F:15:03:09:B4
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02F9
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
Signing time:             Thu 05 Nov 2026 03:49:18 +0000
ROA not before:           Thu 05 Nov 2026 03:49:18 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     139648
IP address blocks:        103.218.172.0/24 maxlen: 24
                          103.218.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  5 03:49:18 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebfcbe-922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:08:4f:12:ca:c1:59:e6:5e:15:8d:f8:e9:f7:
                    02:cd:2d:9a:85:8f:9d:fe:43:1f:1f:7c:1f:e6:dc:
                    c8:a9:06:82:2e:7e:48:eb:be:a5:63:a3:f7:cf:bf:
                    78:d9:d9:42:a9:15:16:9d:c9:c1:60:8a:07:b0:67:
                    34:52:93:26:d3:e5:8c:e4:fd:72:00:f8:87:11:8d:
                    81:7d:0c:e2:c7:cc:a0:81:d4:9d:fb:0f:12:29:ba:
                    f1:9f:f6:8a:ab:d8:5f:db:7c:6a:98:9f:06:73:d3:
                    9f:1e:c4:75:a2:9d:c2:6f:70:f3:80:41:f9:24:71:
                    c8:3c:11:c8:5e:f7:32:a0:78:22:b7:69:3a:b8:2b:
                    45:c2:72:64:bb:0b:ed:3c:a8:59:81:e6:ea:60:4f:
                    8b:bf:da:65:25:a5:c7:d7:65:dd:bb:de:8b:87:c5:
                    f4:6e:17:9e:76:8b:8e:6b:28:25:60:2a:5b:ef:e0:
                    4b:4a:07:84:13:fa:71:a8:80:51:b5:4f:d6:74:3b:
                    f9:41:e4:01:f4:f9:da:bf:36:aa:b2:29:b1:8e:55:
                    59:e3:71:4a:d3:43:8f:2c:37:da:70:7d:f6:79:82:
                    4f:e7:b2:b5:f7:65:5d:db:7b:68:78:32:51:d9:62:
                    e6:00:ae:78:8d:8b:a2:f9:ec:22:a3:f6:9d:4d:7a:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:3C:38:CD:C5:0A:8A:D3:3E:8C:14:26:F8:52:7F:15:03:09:B4
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:8e:1a:4e:81:75:e8:0f:80:49:03:85:ba:5f:f9:c6:a7:
         5e:08:f1:42:cc:25:96:7b:cb:12:0d:3a:6f:3d:09:24:39:81:
         84:4d:5c:c5:a3:74:c3:1a:eb:54:f2:91:43:61:08:3a:97:7c:
         ff:4c:ee:f8:b8:47:91:05:85:db:19:9e:6d:ae:ce:1b:9e:01:
         44:57:aa:a7:f4:5f:3f:bc:e1:2c:2a:fe:c1:dd:31:28:89:66:
         06:0e:39:9d:f6:1e:d9:43:96:56:ca:75:53:aa:af:80:bc:3d:
         ee:fe:a5:ea:51:eb:1f:be:36:d6:fc:e9:1d:b3:51:dc:86:5b:
         df:8c:27:60:a0:89:9f:f0:03:21:23:eb:ca:25:5f:47:80:aa:
         2a:47:f5:93:78:c9:12:1c:7b:3d:b3:8b:54:20:c2:77:c4:b0:
         2f:6a:13:cf:03:fb:36:dc:c4:e1:0a:55:95:58:80:4c:06:c6:
         6f:07:f2:da:96:e0:48:a5:02:7a:ba:8e:8d:ea:30:b6:59:23:
         b8:dd:9c:76:7c:5d:6e:da:a9:5d:5c:44:ec:3e:bd:9b:98:cf:
         16:fb:43:e6:47:3e:25:d6:06:95:7a:51:26:fb:4b:73:fd:da:
         b7:3c:a7:67:8c:58:e5:d5:e5:b7:68:cb:ee:e7:ba:a4:38:e9:
         8e:f8:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:28:03 2026 by rpki-client