Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa
File:                     45D37CC28F8111EFB699FB63C4F9AE02.roa (raw, json)
Hash identifier:          JwZ7pacGKBHVOcnwAfvD9FSN+qexZSqq2ZVTa+Xk0/8=
Subject key identifier:   25:A1:25:D2:EF:9B:6B:3A:6C:A3:3F:88:39:B1:0F:4E:A2:7C:44:08
Certificate issuer:       /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
Certificate serial:       0172
Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa
Signing time:             Sat 19 Sep 2026 02:55:15 +0000
ROA not before:           Sat 19 Sep 2026 02:55:15 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151495
IP address blocks:        103.234.191.0/24 maxlen: 24
                          103.234.191.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl
                          rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3
        Validity
            Not Before: Sep 19 02:55:15 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aadf993-2c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:ff:28:7d:75:15:e3:7f:49:e0:1d:c8:bb:
                    58:b5:e8:d6:a5:ce:bf:dd:60:0f:d2:2d:35:b0:39:
                    df:3d:84:76:9e:9c:8e:7e:ca:c2:05:94:c2:f7:8e:
                    42:53:3b:d9:18:e5:fb:ee:2c:98:a9:a8:f9:85:59:
                    94:56:32:1f:b1:a3:7a:d9:eb:7c:cc:35:ed:5d:7e:
                    c7:05:af:77:32:6b:74:5e:f9:62:a9:c2:e6:02:be:
                    11:2a:2d:df:95:26:54:2b:3a:c5:97:78:32:13:49:
                    7f:a0:ee:30:f0:6e:36:67:7f:de:0c:90:10:79:1b:
                    c8:f5:a7:97:55:dd:57:23:a1:5d:e5:ae:9c:90:60:
                    44:aa:17:5c:a1:90:90:ad:62:8c:e3:1c:52:4f:c9:
                    bb:3c:57:27:d3:d4:1f:b9:d9:36:44:6c:82:4d:79:
                    c3:ca:77:24:bc:39:2d:c9:67:0c:05:f4:c3:c8:cb:
                    56:37:c7:da:b8:34:89:dc:d8:8d:2b:4d:7d:e9:c0:
                    b2:a4:b8:c0:f4:12:17:14:a5:53:dc:72:e3:6c:96:
                    00:a8:32:7e:0e:ea:19:32:b8:21:bf:97:ac:a1:2b:
                    2f:d9:9e:29:94:66:85:c8:2f:cd:7f:a2:06:50:da:
                    ec:78:f8:c0:a3:24:d3:d1:a0:d9:8f:92:ba:c5:d2:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:25:D2:EF:9B:6B:3A:6C:A3:3F:88:39:B1:0F:4E:A2:7C:44:08
            X509v3 Authority Key Identifier:
                keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/45D37CC28F8111EFB699FB63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:b6:e4:0d:2f:a5:fd:da:06:b2:5d:7b:d2:b9:7f:f8:06:
         e9:a7:46:bf:56:ac:05:48:94:34:b1:fd:19:43:80:03:a1:07:
         d0:79:57:b5:16:24:5b:7f:e0:16:15:12:84:cd:63:78:3e:2b:
         cf:21:50:41:15:ec:f2:20:27:c6:a3:01:9e:26:17:19:68:fb:
         ce:f9:3b:1e:ab:b7:f9:0d:56:f4:16:01:c3:89:b4:d9:02:52:
         89:2f:4b:51:4c:a2:25:cc:f6:16:8a:1f:9b:6a:92:3e:61:5d:
         68:3a:f8:81:e0:f7:8f:3f:f2:09:60:f4:8a:7c:2d:1a:7c:a0:
         38:d2:35:8a:cd:ea:e6:4d:90:b5:83:6d:07:d3:a0:d6:ad:51:
         5d:05:54:d8:a4:3d:11:cc:a7:21:02:42:77:80:39:b5:3e:3f:
         09:ce:30:ff:af:86:25:c0:bb:ce:b4:6d:ee:fe:d6:e4:2e:1b:
         90:0b:6c:46:45:58:07:94:43:f0:30:bd:d2:12:59:49:b2:ee:
         d9:a7:99:98:ce:d3:5e:8d:43:b0:89:21:b2:50:fe:0f:a5:aa:
         8f:77:ce:07:08:9f:13:3e:9a:0f:49:35:ce:ab:d6:8f:e8:8b:
         0a:a3:dc:6c:52:eb:14:f1:af:db:eb:ee:33:aa:7e:0a:48:4d:
         96:35:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:54:09 2026 by rpki-client