Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa
File:                     E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (raw, json)
Hash identifier:          EtIVrjW3D9LKTRC7oaoRmQY6Qz3nhGLe2dzCq7rzB8U=
Subject key identifier:   4B:7F:0A:D9:55:FB:97:6F:3C:A7:47:5E:44:5F:6D:F9:CF:B2:F9:7E
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       0625
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa
Signing time:             Sat 04 Jul 2026 23:24:48 +0000
ROA not before:           Sat 04 Jul 2026 23:24:48 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142300
IP address blocks:        103.167.162.0/24 maxlen: 24
                          103.167.163.0/24 maxlen: 24
                          2001:df6:b980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: Jul  4 23:24:48 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a499640-6f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:ac:a4:7e:dc:ed:87:89:26:98:1c:b9:11:
                    da:98:a7:5e:67:2f:ed:72:7a:0c:d8:91:69:33:ac:
                    67:00:46:90:09:71:bc:23:35:a7:e6:87:d8:b1:4d:
                    35:a9:6d:0b:e9:f3:cf:15:51:f2:46:50:c3:2e:8b:
                    d0:9c:7c:e8:1c:62:62:41:1d:78:f9:44:32:57:28:
                    53:5a:39:09:ad:98:08:95:0c:53:9d:0f:b7:96:3b:
                    63:c0:92:fa:a9:eb:0c:86:6e:16:36:4b:76:83:4b:
                    c5:92:10:46:97:f6:16:84:b8:dc:da:cd:8e:1c:39:
                    62:93:21:d6:12:01:d6:71:2e:1d:f3:a9:5c:e1:69:
                    37:72:bb:3a:0b:e4:9f:cd:de:cc:94:e5:63:70:4f:
                    7f:19:f0:3e:aa:eb:95:de:a7:b6:f8:86:f5:64:77:
                    78:7b:2d:f3:28:6f:7e:8e:24:9d:c8:22:da:65:47:
                    a8:b0:78:5f:9a:b0:89:2e:d2:59:6f:34:aa:c3:23:
                    d7:f4:a6:48:3a:7d:40:a9:28:e9:de:91:4a:93:35:
                    48:4e:7f:8c:22:d9:78:ff:2f:d1:61:7c:a5:b1:56:
                    45:d4:a4:46:de:f1:ec:e3:65:66:f8:a5:ee:67:16:
                    00:a1:66:ed:8b:eb:e2:59:89:11:ec:1f:61:ce:19:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7F:0A:D9:55:FB:97:6F:3C:A7:47:5E:44:5F:6D:F9:CF:B2:F9:7E
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.162.0/23
                IPv6:
                  2001:df6:b980::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:45:57:d2:13:6e:03:a4:14:2a:47:44:fb:68:71:1e:12:48:
         fd:08:3b:57:ec:d3:2b:c0:34:15:f5:8a:ec:8a:87:15:45:d4:
         f2:ea:13:11:da:58:6e:22:17:30:09:b2:67:db:d4:38:06:86:
         8c:89:ee:bd:04:22:4c:4d:87:e5:b0:3f:f2:7e:2f:b0:5c:29:
         a8:b1:05:fe:bb:db:c2:12:23:5c:f5:4f:14:73:4b:88:a2:fa:
         4a:f4:47:a8:6a:2f:b5:8c:b9:09:dd:23:35:4c:69:bf:5c:4a:
         0e:6e:8e:27:96:12:cb:ed:74:e0:f6:b7:46:27:9d:50:ac:45:
         85:14:d6:54:7a:ff:ee:9f:49:41:f9:c2:13:3d:25:5e:79:f6:
         ab:fc:72:76:fc:bc:3c:99:77:35:b2:66:3d:19:b8:8d:f8:07:
         1a:5a:f5:e7:47:56:de:55:0c:4b:c8:24:1b:55:d5:2a:95:8f:
         c7:a5:29:74:c2:ec:99:74:35:a4:71:4e:aa:6b:0a:f3:28:6d:
         21:17:12:dd:4b:2c:82:ce:c1:08:26:54:e0:7c:44:fa:8e:ba:
         76:21:66:d0:0f:c4:b7:65:f6:c7:dc:02:d2:ea:da:00:9e:32:
         e7:af:00:9e:60:cb:fa:a4:81:d9:75:28:e4:b1:b5:79:49:7c:
         af:db:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:39 2026 by rpki-client