Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/B9EECE4CB7F011F1A18F0FCD6C11F970.roa
File:                     B9EECE4CB7F011F1A18F0FCD6C11F970.roa (raw, json)
Hash identifier:          f5KLUxZEXG3ryqQW3dZ9UJ1LjZ8yLAlRALBSqwsSkfE=
Subject key identifier:   BE:CC:69:85:78:9E:4F:35:67:6C:E8:28:B9:5F:A5:B7:15:75:31:E4
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0611
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/B9EECE4CB7F011F1A18F0FCD6C11F970.roa
Signing time:             Thu 24 Sep 2026 23:44:34 +0000
ROA not before:           Thu 24 Sep 2026 23:44:34 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     30081
IP address blocks:        103.73.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Sep 24 23:44:34 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5b5e1-b333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:3a:c2:43:54:f1:3d:ee:8e:06:49:be:d5:
                    3c:73:48:bb:81:ec:77:30:b8:0d:60:9f:6a:eb:59:
                    ce:25:7b:b4:96:69:98:21:c8:65:b6:5b:a3:db:84:
                    64:eb:35:4d:b1:06:dc:ba:b3:d9:5d:6b:f7:02:01:
                    a3:9d:d7:4e:3a:ab:b8:a2:6b:6b:04:76:ee:f0:77:
                    52:3f:17:1b:0a:72:f3:94:09:f2:69:ff:3c:a8:59:
                    1c:f2:9d:05:41:38:3d:c0:fd:27:30:c7:ac:75:a9:
                    f6:93:0d:22:12:70:2d:78:d7:95:34:92:bb:88:9d:
                    12:43:3a:53:11:73:08:0e:52:20:4a:85:6b:22:f7:
                    db:e5:15:01:ca:d2:aa:a5:48:50:35:83:50:62:15:
                    bf:5a:04:08:00:f6:af:e2:3e:5f:b0:54:85:78:c0:
                    c5:2d:f9:01:6d:12:01:7a:a2:5d:c5:da:2e:45:54:
                    1f:6a:31:fa:ca:01:a2:0f:bc:1a:5c:f5:ac:f9:d0:
                    0a:dd:f7:98:20:34:ae:03:b8:b6:2f:8a:a5:26:23:
                    03:b6:08:ad:11:4b:06:02:13:9d:c8:ea:93:d4:81:
                    54:60:17:5a:d8:bb:16:31:be:2a:81:80:1d:e6:0b:
                    7c:77:59:c1:e8:68:06:bb:d9:23:3f:0b:01:7e:b3:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:69:85:78:9E:4F:35:67:6C:E8:28:B9:5F:A5:B7:15:75:31:E4
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/B9EECE4CB7F011F1A18F0FCD6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:00:38:6a:20:4e:64:89:80:07:c7:ce:37:b8:8b:ed:de:7c:
         7f:d9:55:de:a4:fa:84:79:54:ae:52:e6:84:f7:32:13:27:12:
         bc:f6:11:8a:80:fe:18:f5:b3:9d:43:60:94:bb:04:6c:8c:1e:
         9c:00:e4:cf:9d:e9:96:6e:2c:1c:b5:3b:66:81:d7:31:05:35:
         b0:e9:c1:6d:f4:2b:16:86:4e:2f:f6:07:21:0d:18:1e:71:7a:
         42:99:a0:21:e3:6a:53:a9:04:e5:f8:7d:ce:cf:53:ed:a3:45:
         37:1f:57:b9:4b:25:6b:2d:41:89:08:6b:41:49:d3:a3:5e:1c:
         42:64:20:35:9f:30:bd:83:cf:62:ed:ba:90:27:ef:1a:3e:1a:
         05:2c:38:3e:d8:00:40:df:af:2e:d3:97:d5:55:21:b6:a4:95:
         8c:60:78:d2:ce:2a:94:14:ee:db:26:0e:94:a9:4d:db:38:cb:
         24:c8:81:77:ba:c3:c4:59:c3:20:76:5b:6c:03:b3:2e:d2:63:
         99:76:e2:aa:eb:c6:8c:ee:ff:75:99:9e:23:9c:15:c8:b6:22:
         60:7f:97:4f:11:2e:6f:55:6c:7e:96:bf:94:70:bf:3a:45:de:
         b5:56:7c:6b:11:de:42:b2:ee:57:66:0a:16:55:1b:12:aa:9e:
         92:bb:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:30:47 2026 by rpki-client