Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa
File:                     24D8D69CADAE11EBB6E7565AC4F9AE02.roa (raw, json)
Hash identifier:          0FJPWWCgs74V2qR0+srXlHP3r9bzqp0VjgYjnq505c8=
Subject key identifier:   1D:AE:45:E3:5E:89:A1:64:82:5D:D4:0F:56:DB:0E:19:29:0C:70:6E
Certificate issuer:       /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial:       0729
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa
Signing time:             Fri 08 May 2026 22:27:28 +0000
ROA not before:           Fri 08 May 2026 22:27:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64063
IP address blocks:        103.164.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
        Validity
            Not Before: May  8 22:27:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe6350-544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:a5:7e:40:d3:46:81:ba:a5:8e:0b:73:89:
                    fe:45:70:74:58:49:27:88:0e:d2:62:c6:ca:68:82:
                    e6:5a:3b:a9:62:f7:41:b8:3a:bd:cf:a6:33:34:38:
                    ae:9c:ec:01:48:e0:4e:85:c4:59:c4:33:92:61:0e:
                    4a:8c:6b:2b:66:df:75:23:15:58:9e:e3:73:26:9d:
                    41:2c:8a:55:82:26:4b:4d:43:bf:27:dc:ee:c2:0b:
                    8b:df:25:ed:e5:bd:a7:32:d4:31:c7:13:34:63:2d:
                    b3:0c:58:2b:26:bd:a8:60:ab:91:82:e5:e1:bd:2c:
                    d5:8f:79:f5:35:d3:ac:25:c0:cb:71:65:9f:c6:85:
                    d9:10:57:64:90:d3:6e:c0:47:1a:8b:7b:7d:02:71:
                    31:19:5d:9b:a5:17:d1:a9:c0:37:61:c5:25:9b:76:
                    25:3b:2b:12:7c:4a:ad:f9:a8:b5:9a:e1:3f:1e:a5:
                    a4:c0:e0:7a:0c:59:0e:71:f0:57:93:5b:47:2b:8f:
                    1a:b7:ca:14:f0:73:57:5c:ce:a0:d2:4c:3b:4b:4d:
                    44:27:28:72:7b:91:67:e4:e1:44:8b:5c:f6:af:71:
                    5d:c9:53:80:ac:33:9f:83:9d:97:0a:3e:2b:9f:06:
                    9b:6a:fa:5c:8b:b8:1b:f1:4a:fe:75:02:c6:95:27:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:45:E3:5E:89:A1:64:82:5D:D4:0F:56:DB:0E:19:29:0C:70:6E
            X509v3 Authority Key Identifier:
                keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/24D8D69CADAE11EBB6E7565AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:c2:04:3e:d1:de:e3:00:06:96:ba:85:92:00:ef:9c:ef:
         c2:a7:11:47:c2:86:ea:6a:2e:b6:7b:91:99:a0:3d:5b:81:33:
         1a:8c:57:4d:59:8b:68:32:eb:dc:cb:20:f3:76:22:db:c7:3f:
         9c:4b:65:ff:60:98:5d:01:34:b8:f4:a8:d5:ae:34:4b:25:1d:
         36:ab:57:38:ee:24:c4:13:78:cf:fa:38:11:eb:7a:a4:58:71:
         83:41:82:68:b7:cb:a3:0d:59:6d:ed:56:8d:82:44:b3:d3:58:
         32:56:e8:0e:88:45:16:c2:58:46:27:0d:75:b9:1e:1c:9a:6b:
         e3:20:9b:14:fe:be:a6:b3:65:dd:f7:cf:90:c3:56:c6:fe:ec:
         78:ec:fa:a7:dd:eb:3a:0c:07:d1:3e:69:bc:e9:76:8b:4b:a7:
         56:5c:dd:25:c0:2a:bc:b1:3e:de:6f:11:d7:b9:cb:c3:9c:e3:
         07:c6:0f:58:d5:40:f5:5b:41:fc:8e:8c:53:f5:00:28:dd:82:
         f3:41:ea:26:fd:b3:10:a0:94:54:a3:da:94:2c:d6:98:15:6e:
         30:fd:a9:17:dc:dd:3a:a0:a3:43:03:94:ad:dd:23:71:ab:df:
         8e:f3:72:72:64:b1:30:f6:7e:92:fa:77:59:a2:38:7a:4f:cb:
         bf:a8:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:27 2026 by rpki-client