Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
File:                     94A5320663A111F092E32646C4F9AE02.roa (raw, json)
Hash identifier:          fUCheIlZiOEqL+zo0CZL2wr4PBAsx1uBgM0P+XWWqrM=
Subject key identifier:   83:58:A9:B6:3A:59:1B:56:C2:C9:C4:AA:55:E4:37:7B:5A:E9:D1:AF
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0894
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 21:41:18 +0000
ROA not before:           Wed 30 Sep 2026 21:41:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140697
IP address blocks:        103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Sep 30 21:41:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abd81fe-58cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:33:ea:80:ef:11:3d:0d:4c:60:cd:60:21:
                    d0:78:83:da:a6:a5:1c:53:5e:9f:c3:e6:bd:67:59:
                    4d:42:af:e1:88:cf:fe:b8:83:88:00:2f:35:5b:3f:
                    be:ab:3a:c8:2f:cd:78:2d:83:19:9b:70:57:05:35:
                    41:5b:86:ac:70:1f:b1:d8:94:23:cd:c1:eb:d5:b9:
                    f7:57:f1:47:14:8f:b1:e1:e9:57:80:0c:2f:c0:c8:
                    c8:b2:82:c5:1f:05:6a:ea:81:cf:d5:33:16:cd:6a:
                    4c:da:bc:f5:60:aa:17:bf:2b:fd:48:bd:8b:32:c8:
                    e9:b9:9e:88:57:dc:5e:20:21:54:30:c4:11:57:e1:
                    b0:23:2e:1d:38:a9:57:1c:49:83:28:89:5e:99:ac:
                    8c:57:30:ca:5d:2b:c5:c4:9e:20:4c:9a:d9:04:31:
                    a7:7b:66:a3:ab:3f:b5:85:ad:90:8a:43:8a:c0:4c:
                    e1:ed:6c:15:a3:da:7c:52:a1:7a:e1:aa:bf:63:85:
                    4d:3a:7c:28:9d:c0:80:b9:03:1f:0c:c2:69:97:bc:
                    18:c6:ce:0f:08:f0:ec:02:02:90:90:1e:a4:9e:9d:
                    f6:a8:b8:f3:db:7f:68:04:ab:b4:5e:7a:89:35:3f:
                    93:41:18:23:65:64:fb:59:36:6b:47:d2:99:34:f1:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:A9:B6:3A:59:1B:56:C2:C9:C4:AA:55:E4:37:7B:5A:E9:D1:AF
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:73:c4:f7:21:c2:b1:32:15:da:6d:aa:8d:92:d9:5b:b0:
         6b:70:1e:31:23:21:c4:11:30:1b:e5:19:7c:2d:68:dd:1c:0a:
         ad:8f:b8:4b:b6:59:cc:98:bc:48:f3:73:f6:bd:b3:db:5e:48:
         37:aa:61:ba:bb:a1:07:e7:35:36:69:49:df:33:12:62:50:d2:
         db:28:9a:a2:da:75:1e:5b:31:d8:ee:1d:86:20:05:ce:b1:ae:
         76:d1:0e:d6:24:a1:a9:ca:41:14:8e:b9:7c:13:dd:9e:48:5c:
         2d:d4:ed:71:e4:64:26:08:fa:1b:b5:8a:fc:a5:89:e5:5a:6e:
         81:35:23:22:0d:29:4b:0b:86:d4:c5:90:a9:9e:ae:df:95:92:
         71:a0:79:d3:b1:d0:0e:38:2e:6e:09:86:cb:67:ed:45:06:3f:
         9f:15:d5:de:12:28:60:ae:67:bf:bb:55:45:9e:17:0e:05:c6:
         c9:d3:15:c4:ae:58:05:00:d9:91:e8:4f:09:01:22:37:35:aa:
         77:3d:2d:9b:21:2c:a2:eb:fd:0d:c3:06:e8:c2:d8:27:ed:b8:
         51:07:0d:54:ba:1d:f9:a4:47:b0:35:f9:7d:60:96:b8:a0:87:
         e8:76:d8:d1:06:bb:da:ba:4b:19:ba:ff:03:00:13:e2:d5:2a:
         4e:b1:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:23 2026 by rpki-client