Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
File:                     5CA72CF82A6911EC94518740C4F9AE02.roa (raw, json)
Hash identifier:          +7NkBk/u5npDwrIEbh3l98hKn0nLCCDAbxWMC/GKCXg=
Subject key identifier:   C7:C5:90:E1:C7:66:1F:E0:5B:F0:91:31:E0:BC:68:84:A5:DB:3F:24
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       05B5
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa
Signing time:             Fri 04 Sep 2026 23:44:59 +0000
ROA not before:           Fri 04 Sep 2026 23:44:59 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9723
IP address blocks:        103.38.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Sep  4 23:44:59 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b57fb-cadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:06:b4:ae:ac:76:fa:49:c8:f5:5f:f8:22:
                    91:6e:e5:74:00:dc:89:e8:8f:cb:b0:83:be:ba:40:
                    9e:7a:08:02:65:b6:53:53:38:af:cd:86:f3:6e:d4:
                    9a:f9:03:db:a9:b2:31:d4:eb:d6:79:29:16:ab:28:
                    43:57:00:f0:6d:da:f8:35:a5:5f:2c:84:08:77:a1:
                    13:21:39:e0:f3:6b:d9:2f:10:85:31:df:b7:be:e3:
                    0e:04:25:61:be:c4:87:30:7d:9a:b9:65:a0:87:0a:
                    5c:94:52:e3:92:58:3e:63:56:09:75:80:b0:66:9b:
                    da:6c:64:36:d7:27:2c:ab:c2:b3:b2:41:3a:ab:0c:
                    b3:2e:ec:34:96:1e:74:b3:16:00:b7:01:08:19:9d:
                    d9:54:af:20:95:f9:6c:22:e5:88:e3:46:cc:36:f6:
                    5c:4f:e1:5c:b9:c4:9e:2f:f1:ee:dc:86:98:c3:75:
                    52:08:2d:09:f0:d2:1b:a2:7c:41:b0:de:3f:98:99:
                    5a:80:2d:26:22:92:77:18:f7:f3:4c:53:dc:4e:4b:
                    40:67:e1:2e:ef:ea:1e:12:50:03:99:5a:57:16:5c:
                    da:22:c4:ef:6f:44:4a:21:c1:1b:1e:5c:fd:ab:17:
                    23:62:b0:b1:fb:40:25:4e:72:d0:7a:94:61:25:be:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C5:90:E1:C7:66:1F:E0:5B:F0:91:31:E0:BC:68:84:A5:DB:3F:24
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/5CA72CF82A6911EC94518740C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:61:d4:99:27:01:11:fc:51:03:ab:cc:33:67:45:6b:2b:
         98:a6:f9:4e:23:36:c9:58:95:d2:29:06:ef:f3:fa:3f:96:15:
         fb:b5:c7:0f:8e:7e:08:fa:ef:1e:1e:4f:42:7a:b2:be:33:71:
         61:2b:b6:ff:46:a9:35:16:7e:30:e5:11:22:2c:a3:f7:ca:e0:
         6d:9f:54:e9:cd:fa:bb:7b:49:87:42:b7:f6:39:f8:26:7a:43:
         c7:f7:e6:86:2a:9b:01:56:6c:c2:66:d7:99:92:f0:1c:b0:43:
         bd:4b:27:ca:61:bd:73:64:bd:b7:cb:9f:53:90:96:1d:5c:64:
         8e:59:1a:26:4f:ad:22:c5:86:0a:62:12:49:3e:1b:87:e5:0c:
         ae:b5:cd:87:b2:1c:12:21:8e:10:65:c6:cf:b6:c3:29:71:e2:
         8e:de:a3:26:55:de:a1:f9:d9:31:67:ac:73:0f:68:34:3c:6d:
         75:df:9c:80:05:e0:e6:78:f0:de:36:6c:86:14:f8:07:51:97:
         af:29:12:76:eb:e5:5b:53:65:71:80:c8:9e:61:09:de:d8:6e:
         d0:00:35:13:51:65:10:26:81:bf:f0:c0:4b:5a:2a:00:ee:8c:
         18:86:a9:c7:a5:7b:1c:ca:cc:38:68:42:86:24:54:f3:24:c5:
         b0:63:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 14:11:19 2026 by rpki-client