Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/D91C7DD6B7BF11F18286FEA15E11F970.roa
File:                     D91C7DD6B7BF11F18286FEA15E11F970.roa (raw, json)
Hash identifier:          +1VV6DN4ESBcwJus+3vUWYfHCZpEb8gf7Dch8Lwy0U0=
Subject key identifier:   0A:EF:04:E9:64:7F:C0:CE:13:00:7B:3B:BE:CA:0E:C6:D1:0E:14:74
Certificate issuer:       /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial:       0286
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/D91C7DD6B7BF11F18286FEA15E11F970.roa
Signing time:             Thu 24 Sep 2026 02:30:04 +0000
ROA not before:           Thu 24 Sep 2026 02:30:03 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142631
IP address blocks:        103.171.104.0/23 maxlen: 23
                          103.171.104.0/24 maxlen: 24
                          103.171.105.0/24 maxlen: 24
                          103.208.66.0/24 maxlen: 24
                          103.229.232.0/24 maxlen: 24
                          2401:c0a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
                          rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
        Validity
            Not Before: Sep 24 02:30:03 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6ab48b2b-3dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:73:1b:69:65:40:68:37:ef:d5:7a:25:57:
                    4d:9f:09:1d:7b:9d:47:06:d9:83:aa:4c:9f:34:33:
                    87:93:7c:a9:a7:56:a1:dd:17:10:67:75:03:cc:17:
                    39:60:76:ae:0f:64:53:9e:06:47:8c:bf:c0:19:07:
                    1a:31:59:88:03:01:21:3f:91:2c:66:e5:44:1c:0e:
                    55:52:39:bd:f4:95:6e:b9:84:73:7f:c5:c7:7f:92:
                    02:d9:95:e0:cd:5c:62:69:85:12:62:0f:22:72:0e:
                    17:d7:6f:0b:85:46:85:da:f8:02:e0:af:f3:83:6f:
                    3f:8d:d8:22:71:96:b2:b4:0a:e3:d3:75:0d:27:f0:
                    70:19:da:ed:7f:a3:2d:97:ee:2d:59:e2:7a:f5:01:
                    b8:5e:47:b7:f9:9b:0c:9d:22:06:7e:84:5f:eb:23:
                    56:cc:ca:9d:6b:0e:07:6c:2d:aa:14:d3:18:c7:16:
                    7e:a4:ee:86:48:5b:5a:c1:db:e5:70:dc:2c:11:7a:
                    3e:60:81:37:3b:90:fe:00:15:8d:e0:46:70:dd:4a:
                    76:48:a6:8a:6f:e6:5a:eb:1d:37:ae:63:d1:f3:f5:
                    9d:00:93:45:20:2c:88:55:93:82:62:d7:c5:3c:07:
                    0f:64:b2:0c:ae:64:ac:e0:ae:d3:83:ec:e5:cd:8a:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:04:E9:64:7F:C0:CE:13:00:7B:3B:BE:CA:0E:C6:D1:0E:14:74
            X509v3 Authority Key Identifier:
                keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/D91C7DD6B7BF11F18286FEA15E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.104.0/23
                  103.208.66.0/24
                  103.229.232.0/24
                IPv6:
                  2401:c0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:67:aa:83:4a:1e:29:aa:f0:07:10:e5:7b:21:4f:64:ef:
         b9:23:8f:23:5c:9f:d1:8a:be:20:f6:aa:91:ee:2e:51:5e:3b:
         73:7e:b7:63:b5:f2:79:ae:0e:e2:8e:fa:12:69:5e:85:61:55:
         ab:a8:b1:18:95:17:84:13:ab:23:83:52:79:bb:a1:33:a2:7c:
         80:61:90:ea:cd:99:e8:8e:b5:5e:87:8f:19:bd:e6:a9:45:dc:
         87:04:92:3d:9a:e4:40:a8:cb:1f:61:c8:2f:c3:cd:d9:fd:54:
         01:1e:95:88:f9:e6:e3:da:e6:c8:2b:cf:b3:39:34:e6:df:9b:
         1b:b6:58:5c:d4:6c:e5:24:df:61:96:18:fe:e1:38:b0:ea:dc:
         a5:0c:76:e9:93:18:78:84:de:73:42:25:f0:e1:58:4b:b6:6f:
         7e:36:ac:33:65:a6:ed:b8:18:b8:26:7e:e7:8e:90:fa:b6:bd:
         54:3e:f7:e7:44:01:de:ed:2d:39:7d:f7:29:d5:21:80:05:38:
         e1:80:69:49:7b:ce:5e:2e:a5:ba:e4:77:ad:1c:2e:88:0c:bf:
         6d:54:67:dc:86:27:32:85:5c:45:59:95:81:22:2b:f0:59:f3:
         9f:62:72:2c:34:b7:89:ca:80:75:5b:42:65:3c:0c:17:f0:9d:
         3c:46:9a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:31 2026 by rpki-client