Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/AE11F30C2F2E11F09F70883CC4F9AE02.roa
File:                     AE11F30C2F2E11F09F70883CC4F9AE02.roa (raw, json)
Hash identifier:          mpUuGZI6KmVbex+TLhzX+QXd6pTfWDsJ8c8TeYKZYZ8=
Subject key identifier:   AD:BD:10:ED:E8:B7:F5:A8:21:EF:A4:E8:7B:C4:62:13:CF:9A:3C:89
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       06C5
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/AE11F30C2F2E11F09F70883CC4F9AE02.roa
Signing time:             Tue 22 Sep 2026 22:45:06 +0000
ROA not before:           Tue 22 Sep 2026 22:45:06 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     58325
IP address blocks:        103.172.134.0/24 maxlen: 24
                          103.172.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 22 22:45:06 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab304f2-1d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:3d:b5:dd:3f:1f:c5:69:c3:a3:c4:6d:da:
                    24:34:46:1a:c3:1e:fb:41:e4:f7:12:98:b5:ce:b4:
                    8c:86:6e:5f:89:17:be:13:83:99:5d:1d:3f:9a:82:
                    5c:97:1e:17:2b:53:cc:95:42:be:97:f4:1c:33:eb:
                    6f:0f:e8:62:05:f8:2c:0d:6e:d7:3c:9e:2b:65:93:
                    b3:d4:eb:c2:74:37:2a:7d:68:37:cf:35:e9:23:de:
                    11:41:e3:c9:10:bd:93:72:11:fa:52:9c:89:5b:37:
                    48:1e:ea:c7:fd:98:e7:e1:c3:6d:d2:da:e8:cb:00:
                    aa:de:fb:99:98:be:81:f1:99:c3:16:df:f2:78:42:
                    80:be:d4:fe:44:b5:c4:fe:d0:b2:97:5b:8f:7a:e6:
                    a0:b9:44:9b:33:56:18:80:ab:ea:33:9d:3d:2e:0d:
                    b5:78:b6:c2:f2:5a:c3:49:d2:23:70:ec:71:9f:d8:
                    23:4e:a7:4b:d9:2a:88:fe:64:3f:31:61:37:39:ec:
                    09:3d:20:81:99:18:de:46:f2:06:a2:6f:cf:d3:da:
                    97:0b:2b:23:ba:85:48:2a:55:6e:de:b0:be:63:16:
                    d6:35:04:e5:09:1c:12:c4:d7:86:55:1f:2c:1a:50:
                    60:ed:71:7a:c8:57:7a:73:ff:85:67:d6:37:f9:cb:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:10:ED:E8:B7:F5:A8:21:EF:A4:E8:7B:C4:62:13:CF:9A:3C:89
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/AE11F30C2F2E11F09F70883CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:67:f2:d5:51:ab:cc:7b:78:0e:73:c9:e9:d9:21:4f:d3:
         8e:76:06:d5:23:14:fe:7e:23:a5:2c:6a:b6:b4:eb:2a:d2:07:
         03:d7:46:8d:28:0a:06:13:db:c9:0b:9c:89:fd:34:1f:e0:5f:
         1a:19:83:be:74:27:49:8f:f6:ad:de:e7:b3:c0:05:26:66:75:
         ff:d7:97:23:fc:bd:16:87:7a:95:8d:1c:34:d2:16:d2:f1:26:
         80:d4:14:4f:db:14:d0:09:8b:5f:9e:d7:32:f9:4a:49:56:1b:
         5c:e9:00:60:e4:68:e4:0c:06:a1:60:9e:d6:bf:61:2c:f4:ec:
         86:29:1a:63:ac:25:db:81:cc:51:d9:bc:e4:de:ed:43:a9:1c:
         e2:08:24:8b:ac:4f:f7:bc:4d:fe:14:d3:84:55:44:b1:80:62:
         b7:bd:a6:e9:6c:ca:ba:d4:dd:0e:d9:b1:da:2b:1f:34:60:cb:
         4a:e1:01:a5:75:c7:f6:e9:40:09:c4:f2:2a:48:5c:77:48:f6:
         c7:5f:06:06:13:b4:19:c4:b4:c6:f2:97:61:02:ec:6a:de:fd:
         88:91:40:a0:f8:ed:67:d7:5c:2c:2a:9d:92:17:fa:da:a1:ce:
         ef:be:74:ce:a6:af:35:72:fa:c6:e2:69:1e:2d:a8:7a:10:30:
         a3:d5:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:11:16 2026 by rpki-client