Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa
File:                     BD37307CAAD011F0ACA9F95DC4F9AE02.roa (raw, json)
Hash identifier:          HaxUN7r4AyaePSzuDt2/4Dt2IifBKM121wU+Ww/9xJU=
Subject key identifier:   B0:4E:3F:DB:52:54:BB:60:74:25:9E:AD:3D:4C:23:73:B5:C4:FF:19
Certificate issuer:       /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial:       B8
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa
Signing time:             Fri 25 Sep 2026 07:56:45 +0000
ROA not before:           Fri 25 Sep 2026 07:56:45 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     136976
IP address blocks:        103.122.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
        Validity
            Not Before: Sep 25 07:56:45 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab6293d-1d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:a0:98:f1:52:49:76:11:a8:39:e8:1e:da:
                    89:4b:8d:f8:31:4d:d8:07:f8:46:34:de:61:5d:b8:
                    c1:c2:4a:ba:4d:72:00:77:8e:ad:f4:b6:03:5a:09:
                    37:c2:03:c5:db:54:4e:b3:80:d3:34:7e:d0:00:d2:
                    ae:d5:ee:68:ad:77:88:94:08:56:7b:b8:2f:2d:75:
                    32:4d:fa:ac:73:b1:9b:82:77:7a:8a:57:b6:62:25:
                    68:41:b9:cb:a9:5c:30:5c:6e:d2:23:e9:1f:91:65:
                    cf:74:1a:1b:7f:00:a7:1b:fe:ef:2e:ab:34:12:0f:
                    16:43:d2:5b:01:b6:a8:a4:67:d8:c3:8d:64:ed:28:
                    63:1f:24:c2:f3:5f:c9:30:7a:57:cd:fc:d9:0d:a9:
                    ea:7f:a1:00:e0:76:cc:4a:15:06:d7:05:16:35:81:
                    c9:de:1a:ee:68:67:f5:b7:40:20:32:60:d6:b4:b5:
                    a5:bb:50:e5:10:96:23:8a:4c:6f:91:6b:4d:03:6e:
                    10:3f:c4:a0:16:c8:3e:9d:73:73:bb:b7:16:07:d8:
                    9a:d8:e7:45:5a:0f:da:b5:bd:66:6e:b9:4d:29:1c:
                    f3:b5:46:e1:ef:46:d6:b3:58:bc:b8:a2:d5:10:2f:
                    0e:0c:e8:cd:85:34:8c:23:75:0d:d3:e1:d8:7a:0b:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:3F:DB:52:54:BB:60:74:25:9E:AD:3D:4C:23:73:B5:C4:FF:19
            X509v3 Authority Key Identifier:
                keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e7:af:ce:28:08:98:7b:eb:e1:fc:45:df:32:a9:26:b7:34:
         02:6a:28:a6:2e:0c:58:70:d2:8b:96:8f:7c:55:89:9c:17:10:
         b1:74:56:eb:00:69:64:e7:3e:75:63:86:28:4c:97:ed:71:fd:
         f5:8a:8a:76:e4:a1:2a:fc:1a:97:f6:fe:35:3c:49:d9:87:1f:
         b0:ca:35:6d:9e:7a:5e:a2:dd:87:a1:3d:32:68:90:1b:82:40:
         db:07:d4:49:ab:ad:66:e5:4a:0e:00:f6:9c:90:6b:e7:44:dd:
         ea:47:db:27:16:06:8c:75:9b:0a:16:01:6e:d6:c6:78:c5:53:
         91:d1:a4:ab:38:8c:e9:fb:8a:89:e7:15:13:49:d9:6a:a1:36:
         36:a0:34:cd:d4:9a:f3:c4:2d:2c:5e:c7:39:61:bd:84:38:fe:
         70:94:40:c3:8c:09:79:68:e7:cb:7d:7d:0d:fb:7d:af:4f:3d:
         8a:37:74:81:7f:79:ab:14:f7:7c:9e:4e:0f:80:b8:cf:59:aa:
         bb:ea:82:8c:2c:87:8f:68:e4:2a:33:c1:6e:eb:83:6f:ca:3f:
         f5:e5:5d:b6:06:2d:f4:c4:5e:28:57:c1:84:83:14:c0:de:ea:
         eb:19:5d:be:dc:13:95:c1:31:b8:96:54:26:08:4b:a4:3c:8a:
         20:f5:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:47:41 2026 by rpki-client