Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/4D4DACA8B7CE11F1BB178B786211F970.roa
File:                     4D4DACA8B7CE11F1BB178B786211F970.roa (raw, json)
Hash identifier:          rhw7J+REm+fhc7dqSV7lc8XLtmAbDUD52Vk+O2Gm/uc=
Subject key identifier:   B2:47:3C:7C:14:7A:B5:D9:07:38:08:DC:58:57:7C:8D:D4:35:5A:C3
Certificate issuer:       /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial:       0264
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/4D4DACA8B7CE11F1BB178B786211F970.roa
Signing time:             Thu 24 Sep 2026 04:13:32 +0000
ROA not before:           Thu 24 Sep 2026 04:13:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151622
IP address blocks:        103.215.230.0/24 maxlen: 24
                          103.215.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
        Validity
            Not Before: Sep 24 04:13:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab4a36b-2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:06:10:24:71:e1:94:1d:3e:b6:9d:35:da:d4:
                    f6:ee:41:ac:16:66:8e:33:3c:97:fd:26:fb:fb:50:
                    38:05:3b:16:10:7c:fc:58:f6:48:83:74:af:e6:8c:
                    92:7a:89:32:c4:ea:bc:48:6e:91:d7:84:c4:95:6f:
                    e5:fa:76:66:aa:64:67:b7:cb:a6:cd:79:12:2d:e7:
                    fa:dd:90:31:6b:0c:45:f1:ad:85:44:30:3a:74:e3:
                    c7:26:4d:5f:cc:85:dc:fb:4d:f6:e2:18:94:60:86:
                    ff:ac:a7:cb:15:c0:d5:2e:1b:57:1c:dd:51:00:25:
                    2e:a4:9d:eb:92:12:79:9c:f0:44:d6:0c:3b:07:46:
                    8f:e2:40:5a:c9:2f:8c:1e:9a:7b:c0:4e:e4:0a:c5:
                    00:1a:8c:a7:77:e9:d0:8e:a9:d6:16:0b:92:00:f6:
                    05:00:a0:63:25:29:00:cf:07:75:53:33:12:89:8e:
                    58:6a:6d:9c:c4:5c:5a:41:1a:8f:d4:25:38:b7:77:
                    77:90:f5:6a:99:b1:a6:f5:c0:a5:47:9d:c3:36:cb:
                    52:7b:fb:9e:e3:38:56:44:e8:61:80:ae:e6:d8:18:
                    ce:68:2d:2c:8e:47:d2:29:dd:20:c9:51:22:02:9b:
                    47:9e:1b:e8:e4:81:e8:fb:96:89:5c:8c:14:52:99:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:3C:7C:14:7A:B5:D9:07:38:08:DC:58:57:7C:8D:D4:35:5A:C3
            X509v3 Authority Key Identifier:
                keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/4D4DACA8B7CE11F1BB178B786211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:4e:4e:39:12:e0:32:29:fd:33:6a:8e:5c:32:4e:ac:4d:
         7a:4e:7c:54:af:26:54:f1:e8:d9:7a:ff:88:72:b6:4f:13:b0:
         5a:50:c6:47:29:dd:3c:f1:3a:6c:09:b7:f9:01:41:f8:d3:12:
         de:c5:f5:10:f7:54:24:9f:c3:a9:ad:1d:25:6c:c8:9a:78:b0:
         d4:f1:e7:7e:1f:61:d8:09:a8:cf:1e:7d:a5:5d:84:dc:eb:ab:
         98:77:3b:aa:7f:22:ab:d7:31:f6:22:d3:55:65:e2:e5:ef:99:
         e5:94:ea:69:eb:4b:18:8b:25:92:fe:39:eb:db:f6:23:1e:63:
         43:c2:dc:75:27:a5:c6:7b:41:ba:dc:f8:e1:35:8d:d9:f1:76:
         88:88:55:54:c4:7a:99:35:67:2f:e4:3d:4f:09:64:2a:86:c6:
         61:52:6a:bc:72:8a:4e:56:a5:de:fb:53:b6:60:b3:c8:2d:d8:
         29:2b:56:9f:72:ee:ff:2d:04:b2:2d:e3:26:6d:57:15:b9:d3:
         39:a9:b0:41:b5:e1:a5:4a:f4:ca:18:7e:09:40:cb:40:94:25:
         a8:a9:b4:d3:14:12:d9:8d:a7:9c:68:dd:fb:ab:ff:19:ee:41:
         27:09:0c:a9:71:b9:25:a8:a9:d1:1d:7d:be:11:27:12:d1:0a:
         77:0e:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:39:37 2026 by rpki-client