Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F94FA23C92F211EC8D04F649C4F9AE02.roa
File:                     F94FA23C92F211EC8D04F649C4F9AE02.roa (raw, json)
Hash identifier:          bQX6Igw4+me+Rv2v5T9mzIr7bWVJ8PFd0yJC0JehJ5U=
Subject key identifier:   B1:72:CF:D6:57:2B:74:84:43:8E:D2:49:81:BC:52:EE:67:7D:DC:69
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0B1F
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F94FA23C92F211EC8D04F649C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 19:39:39 +0000
ROA not before:           Thu 10 Sep 2026 19:39:39 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134578
IP address blocks:        103.142.172.0/24 maxlen: 24
                          103.142.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Sep 10 19:39:39 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa3077b-131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:ff:93:a9:80:0e:75:36:3b:a3:80:22:8d:
                    2c:db:f2:bb:ff:44:66:57:de:18:e1:d1:d2:59:8c:
                    18:ab:fa:48:8b:c9:2b:83:a7:e7:ec:a5:a1:24:94:
                    c8:7f:ac:fb:1c:fc:c8:c9:97:d6:40:81:f4:4e:ad:
                    d3:c1:0f:d8:f8:7b:5a:8c:2c:d8:95:a7:bc:36:c5:
                    42:d4:6b:c5:ff:f1:15:cc:c1:9e:ae:fc:51:39:ac:
                    a4:1a:28:b8:f1:c6:fe:26:79:d2:79:1d:62:60:04:
                    93:9d:c1:fa:6f:08:8f:80:20:fb:fb:e4:19:68:22:
                    bc:fb:d7:15:e4:01:37:e4:17:f8:c2:18:31:c4:e6:
                    a3:34:21:a8:9e:c6:e0:32:02:c1:b0:cf:93:82:33:
                    3b:53:8a:26:c2:a2:af:04:aa:15:cc:ee:db:94:57:
                    8d:1b:d6:55:7b:b6:e2:b0:d8:73:fc:79:cd:dd:0b:
                    81:91:2f:a5:26:e6:b3:1c:15:aa:86:e0:73:00:fb:
                    46:7b:a3:9c:7a:4d:e0:22:04:fa:10:7b:3b:f7:3e:
                    4c:cc:31:f0:bc:e0:17:56:9f:37:3d:d5:86:6c:13:
                    7a:1e:bd:55:f5:10:3b:69:51:44:f8:c0:d8:5a:b4:
                    83:9f:af:9b:b9:87:a9:bb:3c:6c:8d:d0:5e:08:d0:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:CF:D6:57:2B:74:84:43:8E:D2:49:81:BC:52:EE:67:7D:DC:69
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/F94FA23C92F211EC8D04F649C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:5f:f2:20:5f:15:20:9c:0a:3b:4d:6b:6c:87:29:94:e2:f5:
         e0:2b:9c:45:20:14:b8:7d:88:0f:f1:13:ce:c2:02:f3:fb:8d:
         3d:98:bb:f3:d4:f3:9f:bd:ae:51:51:a5:7e:ec:ae:1c:14:b2:
         94:4c:33:57:45:21:af:14:94:af:c1:35:f6:38:e1:93:30:1f:
         68:10:0e:dd:5c:9c:ca:38:a5:76:ea:f6:1a:01:28:d3:fb:8a:
         b8:c6:f5:25:d2:99:03:e2:95:dd:f0:17:86:8f:7c:d8:3e:00:
         ec:34:12:a1:7b:f9:ad:06:2a:36:f8:85:76:50:d2:af:83:d9:
         7b:1d:46:d4:4c:ef:07:89:a2:fa:d9:c7:f2:21:05:56:44:ed:
         86:d3:90:58:83:5e:6f:dc:44:ae:e8:f2:d6:f5:3d:b6:b0:6a:
         b5:d1:a9:e3:00:b3:d2:cc:aa:73:aa:38:7f:0e:1a:71:1d:13:
         13:58:a7:6d:73:3d:b1:64:97:ab:fc:89:70:13:8f:82:f7:80:
         b4:01:37:ed:bd:6d:80:be:67:0d:1c:bb:7e:18:fa:91:47:20:
         05:6d:9b:49:f6:02:e6:e0:ce:28:18:ba:64:58:a1:1b:bf:41:
         8e:ba:be:aa:45:b0:75:15:af:39:3c:28:cd:96:41:b9:fa:3d:
         04:67:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:43 2026 by rpki-client