Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/317FCFCA85B411F1928328FC5DA30FBC.roa
File:                     317FCFCA85B411F1928328FC5DA30FBC.roa (raw, json)
Hash identifier:          it6HwI6gYN9kRsjao8LVj1cZthgpU769+I6sMCyi7EQ=
Subject key identifier:   B1:A0:81:2A:B6:E9:62:20:95:42:46:FA:34:B4:46:C9:6E:7B:77:FD
Certificate issuer:       /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial:       0236
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/317FCFCA85B411F1928328FC5DA30FBC.roa
Signing time:             Wed 22 Jul 2026 10:00:40 +0000
ROA not before:           Wed 22 Jul 2026 10:00:40 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134480
IP address blocks:        103.239.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
                          rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
        Validity
            Not Before: Jul 22 10:00:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6094c8-595e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:55:f6:08:cb:76:5c:16:b0:49:d8:17:8d:
                    b3:d4:ec:04:be:5d:0c:13:c6:1d:3f:76:b5:5b:76:
                    4e:9a:eb:d9:99:5d:b8:af:a1:15:01:44:0c:99:54:
                    8a:2f:13:52:3d:79:18:46:8c:0c:2f:ca:ec:62:3a:
                    ef:9b:5f:8e:b3:d4:be:bd:d4:98:c2:f0:0c:b8:53:
                    7e:b3:96:19:ad:81:eb:9e:e1:28:3a:b5:38:af:99:
                    f5:fe:33:88:15:48:4f:75:31:0e:eb:5b:5f:3a:7f:
                    58:24:5e:e1:6b:c4:d5:2f:b3:0e:ab:a2:c7:04:7d:
                    12:d1:ff:0c:71:77:a0:df:4a:89:57:ae:88:08:f9:
                    5f:21:2e:1b:d2:37:ea:71:9c:40:f7:f1:a2:ff:30:
                    7a:a9:8f:19:5d:11:54:94:6d:b6:69:b9:c9:c8:d1:
                    bf:fb:4e:53:76:f9:e6:74:12:fa:64:ae:e8:bf:ec:
                    aa:fb:34:3f:45:d9:b4:fd:98:49:6a:a4:22:51:66:
                    95:9a:1e:24:63:90:fb:58:46:ed:d3:63:29:3c:75:
                    6b:43:ba:5b:7e:6d:e4:b8:84:40:3f:ae:44:08:4f:
                    63:61:a3:9e:b2:d1:08:8e:28:dd:eb:33:1b:8a:60:
                    fa:e4:98:29:68:d9:36:b9:4f:b8:36:6c:11:b6:89:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:81:2A:B6:E9:62:20:95:42:46:FA:34:B4:46:C9:6E:7B:77:FD
            X509v3 Authority Key Identifier:
                keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/317FCFCA85B411F1928328FC5DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5e:ae:66:4c:8a:77:85:b2:04:ae:0e:02:7a:b6:c0:7b:1e:
         cf:31:51:dc:f3:24:5d:fc:b5:dc:82:c9:26:3f:fc:d4:24:d5:
         50:5a:ab:d6:a3:e4:01:a0:66:7a:45:5a:02:10:d9:ba:fb:41:
         b2:1b:bb:54:62:a5:9b:0d:ac:9a:d9:09:70:88:62:f7:f2:87:
         f3:e1:fa:0a:e4:cd:33:e7:31:e5:5e:1e:b9:d6:24:50:42:77:
         3b:50:1f:ae:df:66:ee:9d:a8:1f:83:9f:3b:81:2f:f0:aa:a7:
         3f:92:3e:25:ac:b0:b7:05:39:bd:d0:af:99:eb:4a:f4:5b:69:
         4b:a0:86:09:87:05:61:3b:d5:af:54:24:ab:bb:83:d3:dd:f5:
         76:c6:18:6d:97:44:d7:6f:46:cd:ed:40:e3:b3:22:d9:13:29:
         97:94:78:eb:d2:3d:cb:5a:dc:ed:ae:52:8e:80:be:cc:72:c8:
         c1:81:8d:d5:26:97:aa:9c:61:0e:ff:82:c5:c3:07:8f:26:b6:
         4d:43:0f:f7:c4:02:f3:c3:91:d7:eb:a2:99:86:d8:77:37:a5:
         03:f3:30:a4:a2:00:3b:be:c5:22:3c:82:17:ea:e7:11:40:1a:
         ca:a0:12:9c:3f:e9:7b:d6:fc:94:1f:30:77:9d:f6:85:ff:c3:
         4e:82:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:51 2026 by rpki-client