Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0B241CB2A6B311F1B22327223B11F970.roa
File:                     0B241CB2A6B311F1B22327223B11F970.roa (raw, json)
Hash identifier:          Wt14FIQP3ssl0Qzbl4IG7F3qL3er1NNc+D/wePYI5gU=
Subject key identifier:   E8:80:A3:97:9D:BE:C0:7C:E1:23:E0:31:A8:13:5F:4B:DF:BE:F8:69
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       0298
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0B241CB2A6B311F1B22327223B11F970.roa
Signing time:             Wed 02 Sep 2026 09:45:34 +0000
ROA not before:           Wed 02 Sep 2026 09:45:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149638
IP address blocks:        103.130.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Sep  2 09:45:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a97f03e-8292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:17:46:d7:71:73:f4:69:73:b9:50:ca:7d:
                    ee:44:4b:b0:2a:6e:95:94:14:fe:8f:54:22:3a:cd:
                    f2:2b:2d:53:0d:59:e9:dd:1c:64:de:4f:93:27:6c:
                    11:d3:bb:d2:e3:9a:68:2b:c8:dd:57:9a:fd:39:8f:
                    fc:9d:8e:03:8d:ce:18:0e:e0:d9:4b:ae:68:2e:2f:
                    70:0d:bc:0d:e3:4d:a6:da:e4:4c:38:2d:0a:7f:b7:
                    9e:45:54:49:f2:3d:bf:fa:88:de:5c:a7:44:e6:81:
                    32:25:76:2a:13:e6:f7:c4:8d:71:24:72:66:34:31:
                    3a:f1:f3:de:ba:b3:02:f1:f0:68:93:42:b2:96:09:
                    65:8f:75:28:2a:8a:b5:24:44:39:53:c4:81:83:68:
                    51:95:e5:74:14:a5:20:48:17:b8:1f:bd:f2:43:9d:
                    7e:c0:42:3c:dc:6f:39:ca:98:ab:40:f7:b6:c5:a0:
                    2d:0d:7f:a5:78:69:29:a3:fa:1b:e1:88:cf:e8:f0:
                    39:f2:96:ad:0a:8c:ec:14:be:9d:ed:b6:1d:70:60:
                    9b:d3:db:8c:4b:89:b4:73:cf:50:6d:ad:5d:ea:7c:
                    41:7e:63:84:0b:c8:a8:6a:11:f9:09:f9:67:d2:63:
                    8d:bb:4b:72:6d:d4:c8:63:5b:3f:23:95:ed:f7:ef:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:80:A3:97:9D:BE:C0:7C:E1:23:E0:31:A8:13:5F:4B:DF:BE:F8:69
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/0B241CB2A6B311F1B22327223B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:14:84:d5:75:2e:c2:29:22:7b:cd:ce:84:35:e8:56:97:
         b7:96:c2:4d:63:e9:ee:f5:60:71:b0:ec:51:d4:17:9f:17:b5:
         4f:b9:87:3c:63:59:58:0f:a5:cf:bd:2c:42:08:ad:c2:b5:9b:
         dd:1f:66:15:06:45:d0:5e:3f:04:ec:f4:2b:a7:bd:fd:33:3d:
         2e:c0:5a:f3:95:33:c5:51:61:b0:d6:ab:cb:06:d0:c4:a7:37:
         46:43:d2:ff:dc:2b:0a:e8:37:ac:04:7a:2c:0c:d5:e5:d4:2e:
         63:2f:0e:65:af:fc:94:51:52:80:f1:33:66:f6:f3:31:4e:47:
         09:fc:1e:15:1e:4a:f4:68:b5:e0:28:29:71:d3:ae:40:e5:d6:
         dd:b7:80:e8:47:fe:ec:ad:23:ee:fb:5b:90:4b:12:6f:b8:ce:
         8c:ac:53:5e:6e:92:69:b7:2e:c4:78:c0:8c:20:50:c7:d8:f0:
         32:6d:c7:bd:61:33:ac:eb:d7:24:70:17:2e:2d:50:d2:b4:41:
         6a:c0:42:15:43:66:4f:7a:17:41:d2:a9:7c:45:7a:c0:16:6a:
         11:6d:35:27:16:18:4d:08:7a:07:9e:bb:d5:01:e9:a5:13:16:
         56:fb:5f:fb:81:7f:63:05:94:a6:92:fe:97:7b:cc:1f:fa:41:
         6c:7f:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:57 2026 by rpki-client