Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa
File:                     9E1721445CFB11EAA377D527C4F9AE02.roa (raw, json)
Hash identifier:          hyQjscEo1jj0I5lMXuv6OJ6RmMigRvuR1H8n5/+x76M=
Subject key identifier:   04:37:40:CD:99:D1:C1:B1:F7:BA:78:38:81:C5:5D:58:17:F3:6F:F2
Certificate issuer:       /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial:       0B81
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 19:39:12 +0000
ROA not before:           Sun 30 Aug 2026 19:39:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138025
IP address blocks:        103.120.69.0/24 maxlen: 24
                          103.146.75.0/24 maxlen: 24
                          2001:df6:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2945 (0xb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
        Validity
            Not Before: Aug 30 19:39:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9486e0-ea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:ab:76:da:ac:ce:b3:f7:80:fb:ee:44:96:
                    f6:69:60:81:0a:cb:a5:a6:1c:5e:8e:1e:e8:76:76:
                    22:d8:47:3f:49:cd:1d:43:01:d8:ec:f1:91:72:16:
                    b4:d8:f9:dd:fe:1f:11:fa:ed:86:2b:07:0d:8e:95:
                    13:7b:f4:d2:a3:48:a8:56:7b:b4:dd:15:50:59:7b:
                    40:fe:c0:a0:e3:c4:1a:2e:57:d0:e4:43:22:03:b8:
                    e3:94:9a:69:b1:09:18:b7:7b:f1:6d:f6:de:fc:c2:
                    05:27:82:e4:d5:8f:62:2f:4a:07:84:b2:48:75:f7:
                    e3:54:56:bc:7f:27:08:16:f7:c2:df:b3:68:53:e4:
                    90:f2:4a:82:4d:36:65:fb:6d:a1:97:2e:9e:b3:e2:
                    2d:39:ce:62:8d:74:4b:4e:6d:54:ec:1d:26:78:01:
                    95:d8:86:8f:37:b9:7b:7c:92:9e:4b:9c:50:9f:ee:
                    fe:a1:0b:11:5a:49:76:ba:62:70:1c:e8:48:74:8a:
                    73:f4:fd:5d:f3:4e:74:e5:90:47:1f:51:d1:e0:16:
                    77:7a:44:8f:16:f4:38:02:c1:8e:a4:35:0e:3b:63:
                    bf:39:22:42:22:c5:18:e3:e0:d5:0c:87:10:b2:ca:
                    60:24:e8:ee:9e:e8:a1:5d:36:f7:ad:12:a3:79:53:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:37:40:CD:99:D1:C1:B1:F7:BA:78:38:81:C5:5D:58:17:F3:6F:F2
            X509v3 Authority Key Identifier:
                keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.69.0/24
                  103.146.75.0/24
                IPv6:
                  2001:df6:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:7b:18:b7:e6:19:30:51:1a:cc:b3:01:6b:57:28:b2:4a:46:
         8a:88:33:02:df:e8:fd:61:bf:e5:10:b9:2f:40:a8:3a:e8:16:
         59:10:54:c9:0f:a2:3c:8d:16:d7:db:89:01:ec:04:8f:31:19:
         ec:86:6a:8a:17:af:2e:b0:02:80:da:f2:e8:5c:6f:53:c5:40:
         1e:05:7d:d3:0d:88:65:de:4c:95:0a:d3:a2:26:d4:9b:d8:48:
         51:da:2c:de:c8:ca:e1:01:6e:e8:a7:fd:31:99:dc:83:2a:89:
         cf:71:ec:77:1f:7d:56:2e:b8:62:3f:3c:33:30:60:10:c2:fb:
         19:03:9c:63:3d:1e:62:73:c3:3d:03:79:aa:80:df:7b:aa:62:
         0a:ed:9c:99:bc:73:c8:f8:f3:2d:18:04:88:55:5c:6d:0f:ad:
         23:24:69:86:7e:25:9f:91:99:71:6a:b7:21:38:af:b3:99:f5:
         ae:35:8b:28:54:8d:76:31:52:fa:17:66:68:e2:84:4c:df:c6:
         a7:99:75:7c:99:31:c3:8c:41:f3:a3:08:84:f6:58:3d:7d:84:
         7e:48:04:0f:91:63:93:f8:c7:11:93:5b:b5:6f:b1:20:e1:55:
         2f:a5:dc:87:4a:11:54:2b:a3:f4:50:32:66:b1:a8:21:14:ce:
         36:7c:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:20:30 2026 by rpki-client