Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/0EB7317299AA11F1BAD0E41A7111F970.roa
File:                     0EB7317299AA11F1BAD0E41A7111F970.roa (raw, json)
Hash identifier:          8OuhmagAmsUG01wzlgf+KfYSs7YjWuqfz/27xcrRefY=
Subject key identifier:   6B:4D:06:9A:AF:27:9A:D1:8A:F1:65:5B:7D:3F:5D:40:4C:70:E2:4C
Certificate issuer:       /CN=A91FF8C9/serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29
Certificate serial:       0A
Authority key identifier: B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/0EB7317299AA11F1BAD0E41A7111F970.roa
Signing time:             Sun 16 Aug 2026 19:40:43 +0000
ROA not before:           Sun 16 Aug 2026 19:40:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38319
IP address blocks:        103.240.52.0/24 maxlen: 24
                          103.240.53.0/24 maxlen: 24
                          103.240.54.0/24 maxlen: 24
                          103.240.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF8C9, serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29
        Validity
            Not Before: Aug 16 19:40:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a82123b-cc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:cf:3e:80:18:77:e3:cd:84:ef:db:70:15:
                    19:2d:b0:b2:b1:5b:05:a4:7a:b6:33:b6:35:62:5e:
                    f5:de:4b:ad:cb:12:f8:18:dc:ab:f5:16:53:4c:dc:
                    14:d0:6b:65:5c:10:06:0f:b2:08:65:04:aa:d7:22:
                    b9:86:7e:18:19:a5:b5:92:b2:5c:52:65:87:06:b2:
                    9e:b8:0e:e8:e8:90:42:44:22:29:3c:01:a2:56:6d:
                    d6:b9:5a:63:71:20:66:eb:67:c1:f6:06:36:38:af:
                    91:50:c5:79:2b:e4:6f:51:e7:0b:e3:48:c8:4c:d4:
                    25:cb:0d:7c:6c:0c:59:c2:bb:ab:56:8e:d1:7c:e6:
                    11:a3:63:26:48:c9:78:d5:1f:5e:d4:4c:f8:38:19:
                    0d:9b:43:0e:62:d4:0e:a9:33:89:33:8e:dd:17:65:
                    74:d8:60:23:84:d4:db:35:93:b3:86:67:31:3b:d4:
                    da:83:06:31:c2:58:1b:86:75:38:9f:53:06:e5:8d:
                    85:3b:93:e8:ad:42:6a:32:c1:78:97:c1:af:7b:3f:
                    cf:50:8f:1b:87:40:ce:7d:af:f4:7c:c4:bd:85:a8:
                    b8:bc:4a:7d:aa:96:e9:6a:1b:f5:50:f2:3d:88:f7:
                    e6:79:1f:dd:9d:dc:72:aa:16:46:e0:a9:35:d9:f4:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:06:9A:AF:27:9A:D1:8A:F1:65:5B:7D:3F:5D:40:4C:70:E2:4C
            X509v3 Authority Key Identifier:
                keyid:B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/0EB7317299AA11F1BAD0E41A7111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:30:d9:f8:7a:a0:6b:0c:60:9e:1a:e1:bf:fe:d1:46:29:2f:
         55:ca:cb:95:6a:03:f5:25:07:4e:d5:1b:40:55:67:6e:16:a9:
         f3:d3:98:72:e3:fd:f6:3b:4f:3b:0d:76:de:ce:ea:5f:9d:92:
         38:1f:49:df:9f:c5:7b:23:31:a1:5b:14:06:17:49:3c:50:4b:
         ea:d4:70:bd:54:21:e9:c1:8c:6a:36:9d:ac:7d:6d:a7:f8:c7:
         f9:63:f9:31:0d:73:28:84:0b:be:f6:91:a2:33:b4:fc:33:5e:
         fd:34:35:18:c2:f9:5c:29:3d:d2:e4:08:97:29:ff:a8:42:51:
         31:d8:11:34:ed:f4:c7:3a:80:fb:78:bb:36:0a:ff:9a:82:c0:
         4f:77:2c:0b:bc:20:76:ca:04:6d:76:9d:03:34:0f:58:6a:f7:
         8c:75:8a:2d:69:66:bf:28:1d:f0:ba:6d:65:1d:80:71:5e:83:
         e7:0a:09:13:92:48:3b:91:46:f9:00:17:dc:7a:bc:36:fc:40:
         6d:53:d1:fc:88:c1:da:12:6f:16:3a:b0:b7:4d:b8:cd:e3:18:
         8d:65:ed:61:b4:1f:83:8f:11:62:d9:b9:cc:fe:bb:eb:f6:7b:
         21:0d:90:cd:d9:50:a1:d0:16:fd:dd:b7:7a:85:2f:14:81:e2:
         99:fa:aa:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:12 2026 by rpki-client