Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa
File:                     0648277C065B11F1BBF0D547343D8C67.roa (raw, json)
Hash identifier:          tnd3O6X0ks7RgR3+GqtXF3fphQTlyMf6t7mYRYp7hBc=
Subject key identifier:   E7:EF:9B:D2:92:73:1C:54:AD:0C:36:21:ED:5A:26:44:E7:8F:97:B0
Certificate issuer:       /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial:       025B
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa
Signing time:             Fri 25 Sep 2026 02:53:33 +0000
ROA not before:           Fri 25 Sep 2026 02:53:33 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     149430
IP address blocks:        103.158.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
                          rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
        Validity
            Not Before: Sep 25 02:53:33 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5e22d-11dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:4b:4a:81:8c:da:fc:c7:3d:fb:5d:48:e2:
                    a0:48:60:e6:d4:f7:2c:5e:1c:56:8a:49:31:f3:a1:
                    55:25:36:2e:12:ea:06:d8:0b:2b:69:ab:e6:6d:4a:
                    6c:bd:ea:f1:ea:8f:34:5f:3f:81:04:ab:9c:34:ef:
                    77:04:dc:8b:64:0a:45:37:54:6f:c0:1f:68:af:35:
                    a7:6b:e8:f8:17:a4:c1:94:bb:1d:c9:bc:23:29:dd:
                    b6:9b:be:19:27:fc:ec:a7:af:6d:49:29:55:30:82:
                    28:78:15:4c:9e:d9:9c:cd:e3:b1:21:18:fc:06:d5:
                    c9:33:36:0c:85:a6:4c:32:2d:30:bf:9a:92:08:fb:
                    63:f0:e9:e1:83:50:ab:d4:e2:31:d9:a0:e8:d2:69:
                    41:01:0b:f3:c8:f9:b1:ae:0e:63:07:4c:e4:73:19:
                    a9:51:b6:13:b4:e5:7b:70:1c:ac:54:55:5e:f8:15:
                    73:f4:c5:c3:c2:02:a6:37:2f:bf:01:eb:1e:d7:25:
                    d3:ba:3f:57:40:94:05:e1:63:af:81:3f:9c:be:84:
                    6b:f1:c7:2c:da:57:e5:34:15:24:dd:f4:48:62:de:
                    1f:1e:cd:8c:6e:b5:4f:ba:d3:c8:6b:86:a4:d7:d6:
                    aa:5e:40:56:a9:ce:02:63:40:d3:bc:d9:44:e2:e1:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:9B:D2:92:73:1C:54:AD:0C:36:21:ED:5A:26:44:E7:8F:97:B0
            X509v3 Authority Key Identifier:
                keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:a9:b8:22:5e:e0:7d:c0:8d:5e:40:e9:78:e1:6f:31:ed:
         c1:ab:73:f4:af:26:03:e8:39:4c:98:e4:bd:79:eb:d6:61:33:
         82:e9:e2:15:57:be:9b:42:c8:ce:c5:03:0a:73:e8:cb:d9:d0:
         18:1b:2f:85:7e:5d:57:7b:26:a5:2e:0c:38:bd:dd:d7:8b:ac:
         69:ff:ad:40:0e:db:10:9b:7e:ba:20:29:4e:f5:08:35:e1:ad:
         6f:51:4a:45:4b:7c:74:c8:75:d6:26:6e:bf:38:4d:bb:ed:01:
         6d:92:b7:7c:8a:80:4f:43:8b:e4:b9:2b:e0:27:36:ca:55:80:
         19:e3:e3:df:49:51:bf:44:ca:66:fc:73:3f:72:bd:80:a5:8b:
         3e:85:0f:c3:26:07:f0:c5:57:f7:ed:db:3f:ca:cf:0b:fd:d0:
         83:ab:df:40:81:26:71:ad:ff:02:1a:d7:b0:25:91:f1:7a:66:
         0a:70:b0:b8:6b:71:e6:6c:6a:92:7a:4a:7a:e5:24:1e:bd:5b:
         e6:34:e1:0a:4b:d5:6a:d4:76:68:fd:fb:71:9a:29:7e:3a:a0:
         63:c4:c8:9a:e9:56:d3:22:e5:98:54:12:16:5b:3a:27:d4:45:
         ee:c1:3e:30:df:09:bf:b0:ef:87:7e:a0:29:20:c2:e5:65:8e:
         e5:4a:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:23 2026 by rpki-client