Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C6BB442CE98B11F0A24D3E834F6F56BC.roa
File:                     C6BB442CE98B11F0A24D3E834F6F56BC.roa (raw, json)
Hash identifier:          CEl40HqaPGOLJrz2YqF6f1GmkSjs3nuf3JPxjBNVZBo=
Subject key identifier:   6D:B5:37:3B:96:86:57:C0:1F:92:20:24:52:85:34:19:EE:18:3E:C1
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       0829
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C6BB442CE98B11F0A24D3E834F6F56BC.roa
Signing time:             Fri 28 Aug 2026 17:32:54 +0000
ROA not before:           Fri 28 Aug 2026 17:32:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152723
IP address blocks:        103.137.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Aug 28 17:32:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a91c646-ce4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:60:53:08:bf:db:b4:be:29:15:f4:b6:0c:
                    21:ed:ec:1d:43:67:62:12:c7:06:56:98:83:e1:93:
                    1f:a3:42:98:28:32:a9:ac:76:88:04:23:12:39:8f:
                    43:b9:1a:7d:80:f8:ad:9a:44:e6:cd:f5:67:b1:6e:
                    18:51:f2:cd:c6:41:af:4a:62:65:2f:ff:24:8f:1f:
                    c7:42:54:e3:f1:b2:48:52:ba:45:3e:ae:2e:38:a6:
                    10:80:3a:b2:df:5c:39:f2:20:ca:0a:97:2d:6b:7c:
                    fd:81:2d:63:ad:fe:73:b7:da:0a:78:db:a5:cd:e4:
                    b1:64:98:2c:3f:df:ce:2d:03:77:a3:83:c8:ec:b5:
                    c8:2a:07:e4:c0:24:ad:3d:5a:45:83:b8:91:13:9b:
                    b8:06:e5:8a:7e:2f:1a:25:7a:9d:19:48:24:f0:50:
                    a4:43:10:7c:2e:99:e5:1b:19:2a:94:0b:7a:28:ef:
                    ac:80:af:1a:4e:c2:83:9d:07:63:55:2b:8e:a3:a4:
                    95:c8:ce:f6:d1:3f:58:2d:d8:f6:18:48:96:e2:73:
                    53:7b:2f:41:ab:80:39:80:ee:de:f3:27:ef:6d:09:
                    f5:65:ae:a6:1c:b0:0e:9a:39:c9:d0:9a:d5:2f:04:
                    37:15:d3:1f:ee:f0:90:56:79:dd:70:a2:0a:43:22:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B5:37:3B:96:86:57:C0:1F:92:20:24:52:85:34:19:EE:18:3E:C1
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C6BB442CE98B11F0A24D3E834F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:3a:66:31:72:77:33:c1:e3:b1:c8:be:00:7d:c3:21:fb:7a:
         ed:7b:e7:32:df:b1:71:16:9c:24:30:8f:20:d2:bf:0b:bb:9a:
         4e:ef:03:be:5c:c4:f2:50:9a:78:03:10:c0:c5:b5:16:6e:33:
         55:89:4f:ab:1c:8c:77:06:56:d6:c0:b2:8a:0f:a9:9d:82:69:
         80:2e:10:f8:ab:e6:69:66:06:aa:d5:2b:33:c7:b8:04:6e:69:
         17:c5:0b:99:44:87:c0:76:f6:98:f5:54:4d:1f:11:75:b2:25:
         19:4f:62:05:77:e9:e5:37:84:64:8c:46:3c:9e:0d:07:c2:2c:
         96:ad:47:21:8d:8e:e3:37:70:e3:07:97:aa:8a:eb:71:2c:08:
         41:9b:0d:2c:fd:11:ab:71:df:95:7b:1e:93:a7:60:75:00:8c:
         bc:3c:bf:4b:a0:90:c2:f4:ad:cd:d6:37:49:8c:6f:d9:46:b6:
         e1:47:fd:bb:38:24:8a:d1:d2:cf:f5:a6:d0:bb:ed:f1:e4:e9:
         fa:00:62:ff:49:7c:e1:9f:95:a2:d6:b0:c0:17:08:4e:51:8b:
         f2:24:35:8c:74:69:4c:ea:83:81:9e:75:6c:af:d7:0c:c4:d1:
         ed:49:9e:43:65:c2:39:78:63:6d:71:0d:32:0a:ba:4c:c9:35:
         20:69:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:59:24 2026 by rpki-client