Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/E898D0F2A57711F190C4BF715811F970.roa
File:                     E898D0F2A57711F190C4BF715811F970.roa (raw, json)
Hash identifier:          9sXZijGFnIBXRK1K09OHFsr106RisC+Rzkh8g0lLCiw=
Subject key identifier:   3B:F2:5F:A3:38:11:3C:5B:DC:9F:71:FF:18:AF:5B:17:66:4B:11:DE
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       06F5
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/E898D0F2A57711F190C4BF715811F970.roa
Signing time:             Mon 31 Aug 2026 20:09:45 +0000
ROA not before:           Mon 31 Aug 2026 20:09:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        103.145.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Aug 31 20:09:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a95df89-886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:e6:2c:9d:19:cd:d5:4c:71:07:09:31:6d:
                    f1:bc:e4:26:68:a5:f7:f2:ad:02:77:71:12:fb:87:
                    23:12:9a:1e:2d:29:5e:23:eb:45:d6:39:be:71:16:
                    81:57:0e:9c:31:17:16:93:bd:da:f0:02:d3:4e:5f:
                    30:e4:37:b2:51:cc:9f:15:c4:fc:e2:b9:70:d0:4a:
                    f4:b2:91:27:e4:d3:70:a6:25:7b:92:d3:e4:dd:ce:
                    23:14:a3:cc:d2:4a:b0:b6:f4:ce:47:ad:7c:41:83:
                    81:41:b1:40:92:14:af:96:5f:ef:47:3e:bd:b2:71:
                    77:8b:90:b2:cc:c0:e5:01:dd:85:e4:fd:5c:3c:95:
                    85:b5:ff:3d:08:7c:64:ce:76:6e:b9:71:84:aa:09:
                    45:7e:fc:c6:c7:0e:ba:2a:f1:81:01:44:f6:6f:9e:
                    83:b2:2f:3a:d6:22:11:67:72:b5:d4:d7:32:00:6c:
                    1c:81:b6:bf:b2:a7:7f:09:ed:c3:67:69:d4:df:b4:
                    07:8e:7b:f6:0e:29:be:f3:a4:5c:b9:93:be:34:68:
                    66:29:68:bd:3e:00:14:86:ee:b0:36:f2:6f:92:8e:
                    89:03:ee:e9:27:1d:36:ee:58:22:29:17:94:82:42:
                    f9:4a:cc:63:71:64:61:b9:3a:ab:2d:5c:5d:7f:bf:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F2:5F:A3:38:11:3C:5B:DC:9F:71:FF:18:AF:5B:17:66:4B:11:DE
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/E898D0F2A57711F190C4BF715811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:ae:df:7a:0d:6f:de:50:97:05:f2:5f:36:82:fa:95:37:
         93:5c:2f:56:ce:46:76:77:5c:7e:3a:a3:a0:c6:d0:69:6a:7c:
         ee:d2:7b:4e:e3:6c:dd:8d:1a:8c:7a:23:b2:4c:03:fd:ca:b6:
         e7:18:05:6f:44:71:15:3e:73:cb:f0:7f:a1:f1:d6:ec:d3:34:
         c6:5f:1b:9e:8a:b3:b3:26:c4:96:b4:f7:4f:fd:b0:a4:eb:85:
         93:fa:5c:b5:d0:98:5f:29:3b:d8:35:1e:e9:89:e5:4d:b2:be:
         36:89:e7:27:fd:b0:73:e9:30:de:57:49:9d:60:fb:e4:e6:67:
         70:1f:de:48:6d:e0:77:ba:1e:23:d7:f1:66:29:f3:37:a6:c8:
         14:d0:09:cb:65:41:0e:f2:93:21:b0:48:90:60:72:b8:ce:5a:
         85:c1:5a:54:ae:9e:9d:d2:1f:d9:83:92:12:aa:e2:eb:72:85:
         b6:27:52:95:06:85:62:b0:d4:84:53:80:b6:a1:ca:bc:a2:b4:
         40:de:86:b8:2d:e5:4e:3e:cc:81:fe:0c:ef:a9:b7:88:d7:67:
         fe:92:1f:26:f6:dc:90:67:16:03:d0:06:fb:a4:d3:bb:31:61:
         5f:16:de:a9:6d:87:50:45:d7:49:1e:91:c3:12:13:76:d8:56:
         6c:f9:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:18:07 2026 by rpki-client