Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/32357EA676C611EEA45B7909C4F9AE02.roa
File:                     32357EA676C611EEA45B7909C4F9AE02.roa (raw, json)
Hash identifier:          uvnuFfPHDz8klL7miM6941+tnPJCsl1Yqm1R/ZCMe6o=
Subject key identifier:   D0:E6:B3:3F:27:32:61:12:DB:8D:C4:89:31:60:F4:13:4C:49:66:F4
Certificate issuer:       /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial:       0222
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/32357EA676C611EEA45B7909C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 03:52:06 +0000
ROA not before:           Thu 03 Sep 2026 03:52:06 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     151839
IP address blocks:        103.159.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
                          rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
        Validity
            Not Before: Sep  3 03:52:06 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6a98eee6-4814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:8a:c1:a2:41:4d:5b:3e:cc:c0:13:d7:2a:
                    88:8c:5e:1c:14:8d:76:33:38:be:d2:7d:d5:c6:d0:
                    f7:0e:31:6a:5e:ae:05:86:66:67:fa:77:48:56:fc:
                    04:eb:33:f6:d3:20:9d:27:b7:9f:9d:2d:b7:df:c6:
                    f0:4c:3e:e7:da:a0:fc:22:d5:6a:f4:98:0f:91:a3:
                    a8:32:2d:69:45:3c:ff:93:03:ba:26:f0:92:9c:90:
                    b4:31:55:4f:79:c0:4c:ee:1a:da:43:1e:25:ee:98:
                    03:a3:33:ae:7a:02:e3:0d:32:95:d7:fb:3f:12:84:
                    9b:59:06:c2:8c:71:1a:ef:e6:4f:61:7f:cd:df:66:
                    7b:30:2c:c3:f4:0b:64:64:0c:30:89:73:2f:d5:44:
                    f1:5b:6c:f5:ee:71:45:0c:56:cd:d4:6d:bb:36:0d:
                    52:4c:f0:d8:be:7d:77:a4:75:58:03:e9:3f:38:47:
                    49:f9:82:28:a5:69:22:ca:e8:87:5a:11:4c:82:73:
                    fc:92:99:cf:ce:5b:0a:ef:64:7c:4a:8b:04:7e:d9:
                    a7:e4:07:16:04:fb:c5:e8:a7:4f:bb:61:97:a2:b3:
                    85:90:35:78:f9:ce:da:a3:4d:f9:a3:e7:89:27:c9:
                    6a:c1:72:d5:6d:f9:d1:46:42:3c:2c:91:04:92:7a:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:B3:3F:27:32:61:12:DB:8D:C4:89:31:60:F4:13:4C:49:66:F4
            X509v3 Authority Key Identifier:
                keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/32357EA676C611EEA45B7909C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:13:cf:27:41:c8:a7:c8:e7:b6:7e:c6:bb:54:3c:b1:aa:
         11:54:4c:2e:6b:21:05:9a:cb:0a:cc:7b:84:0e:cf:3f:02:6e:
         93:49:1f:e5:1c:47:33:55:b0:e1:0d:60:4e:9a:81:b6:ee:5b:
         5f:ff:29:c4:1b:2a:22:d2:d9:ac:38:39:99:05:93:95:b3:b0:
         06:ff:65:6e:3b:b1:76:71:8b:a4:5a:b6:19:78:35:69:c0:16:
         b2:bd:b8:52:58:8e:07:e9:ed:67:32:19:e5:e7:e3:70:a9:c2:
         2f:8e:a3:e9:f6:5f:49:1d:36:8d:af:e7:5a:45:63:e5:eb:59:
         cc:f3:3d:71:43:0c:10:95:69:9a:4a:4c:a1:62:9e:d1:6e:da:
         f3:a6:da:4f:b8:c3:22:9e:51:8f:5e:ff:59:ad:c4:b1:0f:52:
         71:00:68:55:08:bf:a2:9b:22:6c:f2:e6:6c:52:0a:65:b0:6c:
         e0:81:de:25:c2:a3:d1:84:e7:41:38:85:4b:e3:0e:27:b6:cd:
         5b:35:e6:34:d9:b9:f7:e6:53:01:94:9e:a0:19:c9:f8:8e:ca:
         2b:a7:69:87:3f:d3:2e:de:ad:2d:2c:0d:e3:d4:2d:6a:ca:21:
         b9:67:7f:68:de:fc:83:fd:6d:a0:1e:a8:ef:46:64:6d:06:9e:
         f4:1a:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:43 2026 by rpki-client