Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/BE16D82423EC11EF8684D033C4F9AE02.roa
File:                     BE16D82423EC11EF8684D033C4F9AE02.roa (raw, json)
Hash identifier:          4/ZAS69VqXvvHrhqlkq0YkXgIDmue+Z0aUZMijygSF4=
Subject key identifier:   F3:5E:FB:B7:52:25:26:42:E7:D2:15:0E:FB:36:0D:68:A5:1F:67:73
Certificate issuer:       /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
Certificate serial:       0194
Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/BE16D82423EC11EF8684D033C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:33:27 +0000
ROA not before:           Thu 09 Jul 2026 06:33:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137972
IP address blocks:        103.118.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
        Validity
            Not Before: Jul  9 06:33:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a4f40b7-4e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:dd:f3:2c:06:b3:aa:fa:98:6e:de:16:8b:
                    f8:e9:13:66:e2:bb:d2:c1:47:d0:ac:88:07:d1:81:
                    ed:b7:2e:1d:06:79:31:77:2b:a1:a7:c7:3c:e2:5d:
                    c6:ae:5b:27:ee:c1:ce:98:92:5b:a1:61:96:f6:b6:
                    5b:2d:6f:29:4a:6f:12:ac:b1:97:e7:30:2f:9b:d3:
                    ad:bd:67:53:02:89:48:c1:d9:4b:11:25:bb:20:76:
                    9f:f8:88:c1:df:68:77:7d:cc:63:ad:e1:e9:d0:e3:
                    a6:fd:64:26:ce:2b:a4:37:d7:4f:d5:30:09:66:78:
                    bb:61:d5:5b:15:27:14:7e:5f:78:f8:ef:c6:28:1a:
                    29:40:22:b2:64:52:75:03:15:70:82:f7:3a:03:d1:
                    1c:e2:e4:0f:53:9d:26:2c:c6:4d:78:84:eb:75:80:
                    d0:63:f2:ec:4a:b3:e5:be:11:aa:d0:9a:87:49:2d:
                    db:4c:c4:62:75:62:2a:47:9a:77:84:76:42:48:a2:
                    44:1d:a8:a8:ff:6e:81:6a:ff:65:8a:3f:33:30:27:
                    01:3c:b6:0c:b3:d2:6d:e3:14:f5:ee:66:e7:b0:24:
                    18:48:33:e7:fe:28:81:71:6d:e7:4f:fc:b0:a3:8f:
                    1b:e1:af:2e:e7:48:eb:ea:60:0c:8b:f1:7d:bf:9a:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:FB:B7:52:25:26:42:E7:D2:15:0E:FB:36:0D:68:A5:1F:67:73
            X509v3 Authority Key Identifier:
                keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/BE16D82423EC11EF8684D033C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:1f:d0:70:74:e3:08:00:7f:5a:00:6c:c5:16:71:f4:60:
         c0:18:bd:f2:c7:a8:25:6e:67:02:82:0d:bb:06:ed:fe:7a:4d:
         ca:d9:83:2f:1c:c4:00:fd:a6:9b:16:02:98:40:a8:0f:3e:de:
         f2:87:f8:7b:c6:c5:92:e9:b0:bf:ff:52:05:d6:08:bd:49:d5:
         06:96:bc:08:9d:b6:71:30:0b:ee:9d:fa:7c:34:dd:a4:5f:14:
         7c:cd:df:67:4e:78:63:a9:23:09:7b:f3:79:1e:e1:03:45:0c:
         da:20:86:a5:bd:53:94:4d:40:35:70:fa:f0:59:bc:f1:8d:15:
         07:b1:4a:a4:9a:37:61:20:99:44:a0:08:bc:2f:d3:0b:5c:57:
         5b:fb:59:22:89:16:62:d1:7b:7c:e2:13:e7:5a:72:87:61:04:
         0a:8f:81:3e:dc:c4:3f:25:ca:ea:1d:ce:d7:08:7e:96:3e:ea:
         7a:1d:5b:3b:49:c7:c8:a2:a0:92:8b:a6:70:30:ce:20:b2:9f:
         d2:ca:b2:82:3e:b9:40:12:75:0d:81:1d:79:f6:34:b8:32:c4:
         83:d6:5f:77:bf:94:36:77:3c:f4:89:d5:d5:c3:76:28:79:d8:
         9c:04:1a:bc:52:d5:72:66:e1:c2:cb:45:71:25:11:03:23:9a:
         4f:84:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:48 2026 by rpki-client