Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa
File:                     CE1A524210DD11EDBC7EA35FC4F9AE02.roa (raw, json)
Hash identifier:          Y517FjnOIlJoEuMsljxEPUYQv1AnUzE1TBfadkK2NDY=
Subject key identifier:   DC:39:84:9A:BA:C4:43:56:90:07:AD:69:CE:E4:15:F8:FA:C4:75:B0
Certificate issuer:       /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial:       036C
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa
Signing time:             Thu 13 Aug 2026 00:50:34 +0000
ROA not before:           Thu 13 Aug 2026 00:50:34 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150129
IP address blocks:        103.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
                          rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
        Validity
            Not Before: Aug 13 00:50:34 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7d14da-bf95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:fb:4d:87:0d:1f:99:6f:55:b6:c4:3a:38:
                    fc:4c:d2:60:d5:6f:64:29:49:16:e5:f4:e0:fa:05:
                    c2:ee:b4:7e:16:2f:99:ae:61:ff:75:2b:09:f6:f8:
                    52:a7:64:bf:57:b4:23:d7:53:b8:0b:82:e3:0f:b6:
                    2e:31:fb:c9:4b:f1:a6:12:5c:6f:b0:f2:3a:54:83:
                    5b:e2:3f:15:00:82:ab:c3:4d:98:7d:9f:b6:9b:67:
                    66:4b:f7:f1:99:56:cb:19:64:5b:79:43:36:19:80:
                    b1:cf:9f:95:79:80:c6:5c:55:57:cc:54:f9:2b:3f:
                    dd:ec:99:67:6e:2f:6d:87:6b:f9:c2:6b:ea:e0:6e:
                    0e:b6:2d:e4:62:f1:b5:b0:8f:09:9b:1c:a0:b0:4f:
                    9a:14:77:a7:84:af:f3:f8:81:5f:ab:7c:45:1d:f3:
                    95:c3:94:a8:d7:be:dc:52:e8:3e:15:10:55:93:b5:
                    4a:1f:9d:cd:8a:f2:cf:29:17:b5:40:52:50:62:32:
                    53:6e:69:25:a4:40:2c:9f:41:8d:31:7e:89:ea:80:
                    79:10:a8:4c:d6:45:33:e4:ee:a9:f5:96:c4:9a:bf:
                    38:a7:cc:27:7f:cf:60:30:75:5b:ad:8f:eb:c5:ae:
                    48:4e:c2:7e:e8:cf:65:2f:50:93:d0:85:b6:ed:c6:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:84:9A:BA:C4:43:56:90:07:AD:69:CE:E4:15:F8:FA:C4:75:B0
            X509v3 Authority Key Identifier:
                keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:46:62:fc:7b:67:06:94:8a:16:49:c7:90:aa:4a:d2:d8:
         b5:d9:ed:fc:5a:e3:9a:e7:ed:e3:ac:08:5a:01:73:a4:c9:9b:
         b1:ac:03:86:45:31:56:b7:87:76:94:5a:c2:e6:28:f1:95:b8:
         0b:b0:f4:73:44:c2:09:36:3a:39:d4:7c:75:8e:87:db:cc:7d:
         70:10:74:85:e2:a5:0a:5e:98:05:b8:e8:09:4a:46:e5:5d:49:
         2b:90:27:54:80:3e:4a:bc:7f:d8:c5:2c:06:85:c4:99:b5:10:
         ef:2c:a2:06:c8:5d:9e:6c:35:29:0b:95:1d:90:51:cf:5a:73:
         d5:06:16:f3:65:76:b9:28:bb:8d:52:a8:19:0d:cc:e5:fd:df:
         42:1b:21:33:b0:5b:c9:a8:34:70:f5:1f:00:09:ca:b9:b3:56:
         0d:b9:04:76:f7:e8:b7:ed:f5:6d:80:62:cb:a9:78:37:25:c7:
         17:dd:bd:3e:6d:95:89:4d:d9:40:af:bf:ee:18:73:a5:c2:af:
         bb:51:10:64:30:e9:37:01:fc:e0:c6:5a:1b:0c:c4:b3:21:d1:
         63:08:c1:cd:84:44:30:df:0d:c0:51:2c:d1:43:17:36:3b:64:
         fe:73:4e:0b:1d:c3:25:ed:22:45:b5:d6:d5:70:45:fd:31:8c:
         c8:3c:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:29 2026 by rpki-client