Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa
File:                     E4AEC0ACA75F11F19F6EA77F3611F970.roa (raw, json)
Hash identifier:          jAX/VFWI/LGqcl+oM9q5+Phgjxnh7/enJfNQUBHHpkI=
Subject key identifier:   FA:B9:59:7C:A4:0E:9C:80:72:EF:7F:12:4F:5B:1E:A0:55:49:70:71
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       208E
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa
Signing time:             Thu 03 Sep 2026 06:22:53 +0000
ROA not before:           Thu 03 Sep 2026 06:22:53 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137187
IP address blocks:        103.211.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8334 (0x208e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Sep  3 06:22:53 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a99123c-07e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:8d:31:b2:c5:91:de:72:0d:8f:dc:06:d5:
                    ae:47:6b:eb:f3:45:b2:24:64:70:14:46:2b:4a:cf:
                    73:04:f2:d3:c5:d8:b9:88:68:25:c4:26:6a:31:d3:
                    13:f7:15:92:6f:2b:31:17:9d:6b:e9:6e:f5:ef:0c:
                    b9:3e:30:c8:61:9d:a8:62:3c:c2:33:75:36:d3:fa:
                    67:46:dd:17:09:18:37:ad:b5:9f:f8:23:24:e0:e3:
                    ea:39:25:b8:7f:b3:62:58:fe:94:07:e5:d5:64:31:
                    7c:f6:aa:c1:95:89:2b:d0:0a:4d:c1:fd:0b:34:6c:
                    5b:73:9c:52:24:15:7a:95:2d:8d:92:0c:44:39:84:
                    60:72:4a:5a:77:35:0d:9c:9c:2a:70:fa:8b:a2:d3:
                    81:55:f5:29:0b:62:37:c9:3a:58:f8:0a:4e:b8:cc:
                    eb:14:3b:f4:42:43:31:99:a0:48:da:3a:bb:b5:56:
                    12:98:30:7f:24:66:2d:f4:28:35:53:6d:4b:98:ee:
                    b5:a2:c9:d8:43:35:62:89:71:95:8a:64:ed:3f:94:
                    78:04:bd:44:75:de:5c:d1:70:8c:fd:11:5e:d4:21:
                    14:e4:61:89:ee:40:23:57:26:e4:44:02:7f:58:e4:
                    68:9a:7f:d9:51:08:39:b0:1e:c7:c5:78:c4:46:c8:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:59:7C:A4:0E:9C:80:72:EF:7F:12:4F:5B:1E:A0:55:49:70:71
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/E4AEC0ACA75F11F19F6EA77F3611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:58:d1:be:e0:af:5f:ce:79:06:7e:e9:cc:48:fc:14:ac:
         cd:01:97:82:33:7d:c0:25:b9:cd:2d:2b:86:4c:cb:67:38:ed:
         84:14:55:45:2b:b5:33:ca:82:f4:be:5e:37:ee:8e:18:ac:18:
         dd:cc:9c:a0:54:ef:14:24:47:00:8d:e3:c1:c7:2a:52:69:9b:
         c8:07:26:cb:ce:12:19:c3:b8:c9:f7:84:e8:fb:65:9a:4d:ea:
         76:6d:de:9f:a1:6e:24:9a:56:00:5d:df:43:67:ae:94:c3:d7:
         68:e5:7e:b0:9e:a5:01:57:7e:f7:8b:4a:37:b6:39:58:d1:83:
         5a:61:96:8d:a3:d4:53:1a:b1:55:71:10:df:b4:56:2a:41:18:
         cd:d7:7b:3c:7f:57:37:f8:07:e6:57:aa:a1:c0:6d:cd:fc:de:
         87:8a:99:90:7d:2e:c3:4c:0d:57:03:af:34:5d:77:37:7b:26:
         a5:1f:10:73:43:54:92:3b:48:26:e2:d5:28:3b:6c:16:65:94:
         72:0e:ae:7c:5a:e8:eb:76:bc:f9:cb:de:46:69:6a:6c:f2:b3:
         c4:ef:8b:51:0a:ca:7c:c0:52:51:1d:83:9e:36:61:cd:79:c6:
         a0:19:8a:e1:57:60:25:90:dd:99:d3:4e:84:b4:06:c1:8e:26:
         b5:54:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:14 2026 by rpki-client