Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa
File:                     E9AA7826EB7B11F08DB6A8BC506F56BC.roa (raw, json)
Hash identifier:          u4xqBhgnnM28svrhCtGriaCsv9epoGUwlCWmvk1LxnQ=
Subject key identifier:   03:A1:CA:B2:18:30:6C:A2:AC:31:15:C5:B4:A3:BB:13:CD:40:25:28
Certificate issuer:       /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial:       86
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa
Signing time:             Tue 01 Sep 2026 07:56:56 +0000
ROA not before:           Tue 01 Sep 2026 07:56:55 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.37.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
                          rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
        Validity
            Not Before: Sep  1 07:56:55 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a968547-2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:25:3c:d3:8f:09:30:64:15:83:31:8f:e1:
                    e8:38:e4:56:f0:e5:0d:10:80:33:7a:ee:27:5c:85:
                    3e:57:33:6f:8b:b8:1e:8b:30:a6:2b:85:80:93:bd:
                    c0:20:b7:49:cb:0a:61:b0:6a:d5:18:a5:19:35:b0:
                    72:28:95:58:fb:05:9c:bc:1b:b8:39:bb:96:d5:24:
                    92:7f:fb:3e:10:4d:f2:3e:c9:fc:e9:4d:8e:ef:46:
                    2c:04:9f:d0:5b:49:6c:df:cd:17:61:a2:83:bd:4e:
                    e0:2b:ed:a5:87:24:96:49:73:fd:a5:25:07:08:3e:
                    84:fc:a6:d4:fb:e2:d7:9f:7f:fd:ab:6b:18:24:6d:
                    12:78:68:38:fd:d4:84:ff:68:72:76:66:2e:e9:92:
                    3c:d7:8f:da:09:50:d0:ad:35:a4:a3:74:4a:8b:ea:
                    0a:e7:ac:d2:c1:eb:83:f7:c7:ce:b9:aa:2a:4d:95:
                    03:53:e5:48:29:8e:42:d0:f4:bf:65:b0:60:c5:45:
                    21:7e:ea:b8:c4:16:b2:cf:64:0b:b1:47:c6:ac:da:
                    c3:39:ff:fa:d4:15:8e:ac:5c:0c:15:c9:23:63:ae:
                    7d:28:d2:ae:d0:0d:61:b8:c6:db:04:39:05:e1:2a:
                    a8:f2:51:2e:13:cb:d8:2f:d5:3a:5e:8a:40:0d:b6:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A1:CA:B2:18:30:6C:A2:AC:31:15:C5:B4:A3:BB:13:CD:40:25:28
            X509v3 Authority Key Identifier:
                keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:d7:80:45:84:0c:32:97:e5:34:8c:17:4f:5d:11:a5:2d:
         79:9f:16:88:9b:59:d2:e7:0e:11:77:c3:94:a9:8b:a1:22:fc:
         8b:84:0c:ba:cb:7f:63:75:1b:82:a6:68:fe:4d:a3:7e:61:5e:
         bd:2d:80:21:9d:ad:50:a0:cd:58:ac:6c:5c:36:9c:98:bf:9f:
         01:53:e8:3e:80:ab:e7:f7:46:b8:20:b3:bf:36:6b:b2:32:d3:
         0a:b2:e3:50:5d:af:41:1a:e1:ee:a4:19:a0:7c:5e:25:37:ff:
         5d:ad:b0:56:22:dc:d5:d7:af:b3:76:05:45:9b:c9:9b:b1:e7:
         25:1e:b5:7b:60:bd:06:7c:e4:a8:e0:a4:71:85:3c:55:91:6a:
         c5:69:37:5c:f8:b2:af:cb:68:d3:e0:ea:02:97:b8:2f:ab:49:
         45:cc:a3:9e:01:01:78:0a:52:f4:ca:41:cf:a6:fd:8b:dd:69:
         f1:3b:1e:9e:d3:d1:c6:c8:35:8f:f9:28:54:70:f5:12:68:24:
         88:fb:70:12:f3:65:2f:40:ad:e2:1b:81:d8:2a:a5:71:03:a5:
         7b:cd:40:70:54:11:2d:f3:36:89:4b:d2:15:88:1a:77:e5:5c:
         0b:34:6a:10:2a:ed:fe:ba:e6:19:49:69:bc:d6:b2:2c:d4:01:
         cc:91:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:31:26 2026 by rpki-client