Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa
File:                     4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (raw, json)
Hash identifier:          bVKHxia6aHQtaaNVyyZWVecYBGynbvbR+1XTYbf4Q38=
Subject key identifier:   97:43:F8:63:A8:0C:CF:4D:0B:9E:EB:76:8A:00:AA:C0:E3:60:66:E2
Certificate issuer:       /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
Certificate serial:       0D0C
Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa
Signing time:             Mon 10 Aug 2026 18:36:16 +0000
ROA not before:           Mon 10 Aug 2026 18:36:16 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     58695
IP address blocks:        103.15.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl
                          rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096
        Validity
            Not Before: Aug 10 18:36:16 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7a1a20-de58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:65:b7:24:fc:37:d0:4c:2c:4b:57:2f:9f:
                    24:22:94:8d:a7:d4:22:c3:40:25:06:f7:1a:22:a1:
                    86:13:1b:77:b6:ca:dd:71:cf:4d:ef:35:7e:40:e9:
                    5d:29:3c:fa:01:b1:64:e6:1f:f1:74:24:cc:ce:a1:
                    0e:18:77:f5:04:1f:8c:67:d1:52:b6:84:55:0b:fc:
                    6a:f7:9b:cc:09:30:8a:50:ac:b2:45:39:a6:3f:92:
                    c0:df:90:74:1b:8a:16:fa:bf:be:27:27:17:d7:53:
                    e6:ab:dd:ce:76:b8:cc:02:e8:7d:31:1c:6f:c7:b2:
                    94:25:b6:5b:c6:72:c9:e3:54:3a:64:f0:b1:a2:40:
                    58:6f:24:0d:ed:12:80:a1:2e:df:61:ed:db:4b:d0:
                    69:96:16:7f:0e:14:ba:29:03:cf:12:45:7d:27:77:
                    14:fa:42:83:c2:56:47:fb:22:54:2e:5a:79:21:ec:
                    c1:45:fc:87:77:4e:f7:2a:69:81:2f:40:7b:a8:df:
                    4c:ef:85:15:d7:d0:1b:1a:c9:55:8a:da:82:fb:08:
                    2e:77:fc:43:6d:94:5d:a2:27:34:96:00:e4:fd:1f:
                    db:46:0d:b9:35:65:60:93:c9:85:a0:16:76:d9:62:
                    39:ca:02:fc:84:e8:ce:c2:de:b9:90:fb:29:d2:5b:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:F8:63:A8:0C:CF:4D:0B:9E:EB:76:8A:00:AA:C0:E3:60:66:E2
            X509v3 Authority Key Identifier:
                keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:05:b3:08:b5:88:94:ec:93:f5:0f:d2:b4:6b:74:52:c2:94:
         26:ed:76:19:d1:6b:01:61:e5:e6:31:cf:24:a9:e6:5b:ab:b1:
         81:a1:10:21:51:f6:07:79:37:49:50:21:e4:c0:04:81:14:88:
         6c:e3:27:8c:b7:5c:c0:18:bf:90:32:69:b8:16:88:2a:23:8f:
         89:ea:fd:55:0d:42:df:c0:f4:1a:aa:58:29:84:50:cb:a9:26:
         2c:dc:d3:3a:78:01:c7:8f:9d:97:e4:b2:99:23:a1:89:1c:78:
         28:6f:9e:7a:0d:80:34:78:1b:47:4c:55:a2:54:0f:33:f9:9f:
         82:fe:e5:cd:a2:fe:ff:16:7c:14:d4:18:c5:fd:30:ea:d6:32:
         b3:af:90:31:91:f9:c1:a7:81:36:5d:d6:25:e8:45:2b:00:55:
         80:01:ca:f8:59:9f:1e:83:17:61:60:13:22:d7:9d:07:96:6f:
         fc:91:3b:48:f7:aa:df:eb:37:a2:0a:65:2d:19:bc:6c:ec:e0:
         8b:20:07:dc:80:e6:50:cb:f3:e9:69:33:e3:4a:8e:45:8e:35:
         7a:29:8d:f4:f3:49:27:cd:84:50:cf:7a:0a:3b:40:82:26:f1:
         72:1b:96:ca:18:7d:64:67:63:67:16:66:cc:57:8e:15:20:d3:
         93:4b:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:01 2026 by rpki-client