Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
File:                     6E98B3182D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier:          G3kaiurPfatRPZP7CqPIKbvlqsnpSEfzHgPDnICHiCk=
Subject key identifier:   14:5D:8A:B1:3A:85:27:B6:1B:CF:0C:5B:4C:D1:12:42:90:70:25:D6
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       030B
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 02:27:20 +0000
ROA not before:           Thu 23 Jul 2026 02:27:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.10.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Jul 23 02:27:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a617c08-dab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:8d:f3:56:94:cc:3e:af:31:63:6b:b1:d1:
                    a7:0d:40:52:27:2d:82:46:59:66:bb:ae:c6:ac:c1:
                    3c:74:c3:66:89:62:20:9d:2a:c2:ae:66:ce:14:3e:
                    04:42:14:1c:88:80:af:26:69:a6:20:61:34:fc:f3:
                    42:af:ca:d3:65:db:50:ee:fb:18:35:c8:66:b1:a0:
                    02:7c:74:eb:01:3a:ba:f5:77:7b:07:cc:af:b3:af:
                    f0:4d:2b:c5:e7:c7:42:fb:c6:df:2e:57:04:0d:04:
                    d9:b3:99:fb:64:c6:f5:24:b6:d7:7c:0d:92:ea:a2:
                    79:a6:44:dc:a1:d4:f4:a3:67:f3:0f:7c:f4:ca:d2:
                    e4:49:e7:2f:4a:04:60:f0:2f:99:c9:8b:16:63:47:
                    bc:bc:b6:30:05:30:37:c2:55:af:2c:e4:35:fc:07:
                    ba:4c:a4:74:15:c3:8f:86:a4:72:96:7e:43:0c:8a:
                    f2:ad:95:d3:25:c5:69:91:dd:c2:bc:df:65:43:51:
                    b6:3f:d2:7b:fa:b1:d2:08:70:34:b5:ca:d3:19:29:
                    f1:2c:a2:0e:ff:cb:36:ec:81:22:24:eb:23:d9:51:
                    4c:3e:20:59:ee:e4:41:6e:55:d7:4c:45:41:69:3b:
                    6c:95:56:a6:6a:bc:47:4c:e7:3b:64:47:da:c8:e8:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:8A:B1:3A:85:27:B6:1B:CF:0C:5B:4C:D1:12:42:90:70:25:D6
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:24:9c:2a:f7:b6:7d:17:fd:5a:9f:bd:44:43:c2:97:77:7a:
         96:ac:0e:b3:c3:4e:93:16:df:54:09:55:16:2c:e0:4a:94:36:
         15:a4:5c:38:e4:e2:45:f7:b3:19:86:45:d6:10:0a:18:2a:aa:
         48:72:1b:81:65:72:88:b2:7f:e0:77:c7:d1:10:4e:9f:c9:b9:
         a6:75:a3:aa:ba:00:f5:5d:c4:f6:1d:58:44:64:15:0e:92:3d:
         58:2c:36:f1:7f:b4:32:9d:0e:ec:a5:9b:82:4c:26:0e:8d:41:
         06:b6:03:bb:ea:7e:39:5c:cc:d6:f9:07:ce:c0:75:06:dc:a9:
         06:c7:59:00:66:a9:83:d9:5b:bc:67:67:07:a3:7f:af:5d:64:
         58:8f:75:8f:f6:19:5a:e5:7c:a1:52:f9:b6:34:72:43:3b:66:
         e4:87:5d:07:dd:d2:4e:9d:8a:0b:6b:ec:20:da:71:aa:56:93:
         58:fc:d9:00:4e:18:3a:e6:df:77:c7:84:6b:83:ec:3f:06:de:
         62:48:b6:a8:7a:01:a3:18:2a:2e:15:7c:03:57:d2:24:aa:81:
         87:ce:8b:ee:4a:69:a3:37:95:61:5c:37:19:7b:83:2d:1f:e0:
         db:d2:ae:33:5a:01:2d:57:b9:7f:9f:a9:58:90:d6:4e:8c:79:
         67:9f:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:48 2026 by rpki-client