Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa
File:                     B4C25A82772811ECA418E366C4F9AE02.roa (raw, json)
Hash identifier:          wNCrjn2erftwz/bIA2AQkyoUF1YD/PXyJopCVrCD0lg=
Subject key identifier:   AB:A6:1C:66:7B:65:56:17:6B:73:35:A6:A2:FB:9B:01:BF:28:5C:68
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       04E9
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa
Signing time:             Sat 22 Aug 2026 23:48:09 +0000
ROA not before:           Sat 22 Aug 2026 23:48:09 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138693
IP address blocks:        103.170.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
                          rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Aug 22 23:48:09 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8a3539-d6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:73:9d:c4:ba:b8:83:09:0c:2d:cd:39:4a:
                    ca:ac:2e:ce:61:ee:93:75:45:cb:cb:5e:51:67:4b:
                    1a:2f:d9:b7:24:54:d5:c3:2b:e7:24:83:b0:69:67:
                    0a:4b:9c:c8:6c:06:63:34:34:98:23:cc:c3:47:e6:
                    3b:d9:10:d0:a4:f7:61:e4:14:38:44:bb:1d:86:fc:
                    fe:91:ff:18:a5:c9:4b:a2:8e:86:f4:36:07:89:d1:
                    be:a6:a8:30:53:d0:46:5e:6b:ae:1e:47:89:3c:6a:
                    71:78:20:fd:95:8b:7d:ca:05:33:1d:5e:06:1c:27:
                    6c:9e:31:6d:79:cb:18:8f:30:70:66:06:4e:77:10:
                    29:6d:14:12:c0:fd:22:5a:d9:39:57:3d:22:a8:70:
                    0c:a3:41:a1:0e:05:26:b3:d3:c4:41:55:6a:df:1f:
                    b7:c5:cb:68:34:c2:0c:04:b4:67:c0:c8:c4:22:c5:
                    00:61:ac:e3:67:be:28:0f:2e:41:60:00:7f:4b:a0:
                    68:a9:32:9d:a5:f6:92:29:e8:0b:d8:f8:7c:f1:00:
                    36:e1:9b:65:18:e6:07:d0:0f:7e:d2:da:b0:b2:d4:
                    ba:02:65:9a:36:6f:f4:a1:e1:46:58:d5:1a:50:c4:
                    43:8f:3a:bc:35:33:ac:40:45:f1:9d:da:58:d7:d8:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:1C:66:7B:65:56:17:6B:73:35:A6:A2:FB:9B:01:BF:28:5C:68
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/B4C25A82772811ECA418E366C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:55:df:e0:1f:d7:6d:8a:92:e9:95:7a:ba:3d:57:09:94:
         aa:93:ec:ad:55:49:18:ff:8d:ea:f5:e8:76:fd:53:7e:55:d8:
         04:48:c8:c7:bd:05:28:7f:d3:89:28:f0:52:d1:ed:8d:3e:c0:
         64:59:05:7d:49:33:8c:a0:b3:29:ee:c8:fa:99:3e:bc:68:79:
         1c:3a:92:cc:9d:73:80:12:1d:c3:26:7f:d4:1f:3b:6b:e4:25:
         54:03:53:d5:6a:d2:a0:4d:47:74:27:cd:89:34:74:c4:2a:1e:
         8d:be:ba:9e:c2:51:0f:f1:b2:fc:6a:e4:cf:2d:c0:42:79:44:
         c2:46:2c:be:98:0f:cc:69:da:55:c8:1c:5e:b6:78:0c:6e:c2:
         5c:91:3f:94:be:f6:e1:37:ad:78:77:6e:3d:e7:a5:1a:77:6f:
         48:30:4b:13:e1:3f:49:f3:f5:4f:2c:86:b1:b9:d5:71:33:73:
         7c:ee:7c:be:87:46:18:fc:de:65:d9:b6:1d:0f:06:0b:cb:d3:
         b5:e7:15:62:19:9a:1e:c8:fb:c1:ff:2a:61:2b:03:a6:12:9a:
         bb:21:92:7f:c1:13:b9:98:21:76:a3:84:cf:e6:0d:b0:17:25:
         fe:74:3c:fa:2b:f8:42:1e:3a:95:3f:72:47:be:2f:58:8c:84:
         2c:2e:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:16 2026 by rpki-client