Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/7ADAAF92545811F19F64406CAE833773.roa
File:                     7ADAAF92545811F19F64406CAE833773.roa (raw, json)
Hash identifier:          xI0r7I+dhDQtMs+mqxINqgGM8qzp+tpn3e3wkKegM20=
Subject key identifier:   3B:E1:FB:05:26:88:4D:5B:73:CE:D2:BB:25:96:EB:48:14:27:C3:A0
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       06C0
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/7ADAAF92545811F19F64406CAE833773.roa
Signing time:             Tue 22 Sep 2026 22:44:56 +0000
ROA not before:           Tue 22 Sep 2026 22:44:56 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     147002
IP address blocks:        103.172.134.0/24 maxlen: 24
                          2407:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 22 22:44:56 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab304e8-4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:9c:7a:95:5c:c2:02:a5:ba:66:ed:32:39:
                    ae:fa:5b:5c:28:34:8a:ff:f8:3f:6a:32:93:7c:75:
                    af:af:7a:48:0f:54:64:05:88:c6:33:37:7a:b3:99:
                    5c:e0:ec:8e:fa:88:4e:ad:7f:ca:4e:10:17:47:3e:
                    c2:aa:be:da:61:2c:cb:6f:fa:01:0d:11:e5:d1:be:
                    79:ab:b0:a6:94:31:86:35:a5:e3:52:c9:03:38:ff:
                    b7:fe:de:4b:46:ac:67:a4:8c:42:5b:f4:d8:bf:f6:
                    5a:35:25:72:ce:b4:b1:b8:95:07:a8:5c:79:1f:87:
                    fc:be:92:94:9f:ec:0f:0d:76:19:d3:d6:34:e1:e4:
                    1a:85:fb:90:34:8a:ff:71:ea:5b:36:bb:2f:6d:4b:
                    db:fc:9a:c3:20:27:eb:a2:6a:a5:cc:1a:07:03:c2:
                    de:d2:b7:f0:7b:6b:d2:dc:f9:62:11:45:dc:0c:c8:
                    b4:e4:b6:17:f3:c7:6d:6c:6b:44:e5:52:7c:3f:cf:
                    70:88:f7:8d:bb:d6:1c:aa:2c:8f:44:c4:b7:7e:bd:
                    7e:91:73:88:e7:02:64:d4:83:7d:6d:ab:3d:18:cd:
                    9c:6b:cc:65:7d:35:71:42:4f:1b:0b:67:6f:cd:fc:
                    86:54:e1:6b:bb:cd:55:87:d6:cb:a8:eb:6f:4d:70:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:FB:05:26:88:4D:5B:73:CE:D2:BB:25:96:EB:48:14:27:C3:A0
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/7ADAAF92545811F19F64406CAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/24
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:13:c7:f7:77:8b:73:5f:ed:10:1e:5d:bc:ec:65:4c:56:9b:
         cb:51:03:02:71:0d:2a:cb:42:cc:d6:37:65:92:7a:1c:52:ad:
         12:98:47:04:9e:d2:73:e3:4a:a0:f9:13:12:d6:6c:1d:ec:b8:
         b8:04:34:8f:4e:6f:32:b0:6e:95:88:46:24:e6:57:eb:66:48:
         c7:31:15:a7:ad:73:88:bf:50:23:30:96:b4:11:77:6a:1d:70:
         ba:68:6b:55:b3:0d:b3:84:4d:b2:d3:6f:e4:33:3d:e6:33:87:
         b2:91:97:f1:b4:a2:2b:ec:b5:3e:2a:53:e2:67:0d:54:47:12:
         a2:98:89:c1:51:a5:ef:87:ed:09:1e:64:d1:6a:69:06:f7:25:
         00:da:af:b5:3c:8c:96:26:0f:c3:33:c1:6d:6b:d9:bd:a3:96:
         e4:50:39:75:04:1b:5b:67:be:37:6a:1a:94:6a:0d:79:92:33:
         59:5e:b0:f1:dd:17:5b:d3:3b:e0:4f:27:66:f0:58:8e:aa:3b:
         44:db:8d:7a:24:2c:61:cf:26:18:2b:98:e0:b8:61:a7:c1:32:
         73:81:62:16:1c:c7:9d:70:2c:1c:98:20:8b:80:0a:48:e8:99:
         d0:2b:79:27:8a:fd:9b:5f:a0:21:af:a1:b0:6b:98:ca:fd:1f:
         5a:ec:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:16:28 2026 by rpki-client