Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa
File:                     AC58009E782A11EFA7DD8F7CC4F9AE02.roa (raw, json)
Hash identifier:          UxSfVK8mOg7oI1TREX9lZ6O+DFZlz9v5PI0cc9vSjto=
Subject key identifier:   E8:C3:92:29:C8:84:C7:95:25:D0:E9:FB:CA:F7:5A:12:FF:36:48:2B
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       0628
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa
Signing time:             Tue 22 Sep 2026 22:44:44 +0000
ROA not before:           Tue 22 Sep 2026 22:44:44 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140612
IP address blocks:        103.172.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Sep 22 22:44:44 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab304dc-67cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:e5:77:c7:af:fe:7b:01:0d:34:0e:fe:82:
                    3e:62:cf:33:3b:55:ad:8e:4b:a7:08:49:04:2c:bf:
                    c8:c7:3e:58:b3:a0:c6:66:24:14:54:e7:25:b8:a0:
                    c4:a6:a4:a8:9c:49:30:5e:fe:c6:63:18:e7:23:cb:
                    ca:03:36:1a:ba:f2:8e:be:48:b4:4f:a7:f5:7d:bd:
                    1d:5a:b2:02:89:cb:94:65:8d:a8:19:b8:a9:d5:5c:
                    21:57:eb:81:f4:23:83:e2:95:45:76:e3:2f:29:a0:
                    79:be:72:63:1a:92:d2:87:18:00:af:ed:f7:3b:4a:
                    87:4b:14:2d:07:ce:8b:4e:94:3d:66:df:fd:b3:ef:
                    1f:8d:4d:32:b6:d8:83:4f:be:31:34:58:5b:7d:36:
                    54:4d:06:e2:55:e7:9a:14:1c:10:81:a4:aa:de:a5:
                    9d:2d:66:bf:82:99:04:88:d7:e4:b8:cd:3f:93:eb:
                    8d:fe:a4:b1:b0:0c:94:b9:55:bb:8d:4f:df:58:a5:
                    c6:bf:c9:34:14:09:32:5f:8e:10:2f:2b:95:2e:10:
                    f2:7d:cb:f2:05:7b:50:1c:93:e1:8c:69:7c:a0:b8:
                    80:47:13:d6:5c:f6:ca:b1:5e:ec:9c:d3:c4:bd:b4:
                    1e:f0:6c:c9:a5:81:b1:38:6d:05:fd:cb:07:96:a5:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C3:92:29:C8:84:C7:95:25:D0:E9:FB:CA:F7:5A:12:FF:36:48:2B
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/AC58009E782A11EFA7DD8F7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:17:54:cb:a0:83:4d:39:35:93:d5:5d:3a:86:74:90:c7:
         6b:80:e4:75:50:75:87:d9:86:c7:32:c6:f7:a5:5f:cc:10:68:
         6a:d2:e7:ad:13:82:61:c7:40:61:a1:76:c9:a6:b1:94:6e:56:
         82:f5:1a:a1:5a:7c:b5:7c:8f:f1:01:bb:cc:a9:22:10:04:ef:
         8f:29:7f:97:92:fd:90:61:eb:ca:f5:3e:96:13:8b:8c:b0:0a:
         8a:de:fc:2c:3a:d3:31:3e:d1:29:bb:39:0a:13:16:ce:f7:aa:
         00:b4:09:9e:5f:00:55:ce:f0:a4:cd:ef:d4:22:7e:f8:f3:ec:
         34:fc:d3:99:c9:05:7f:19:dd:6e:55:f3:c2:f8:ea:71:2d:11:
         58:d3:01:89:9e:62:dd:56:08:16:13:1e:21:27:da:16:c0:16:
         f1:72:23:5a:65:06:e6:41:a6:02:fa:7b:90:9f:96:f9:14:c8:
         07:fe:04:d0:66:a0:2a:05:71:0a:37:85:17:66:df:4b:88:f0:
         66:dd:b5:b0:07:db:03:95:d0:69:57:3d:fc:2c:7e:ef:d8:61:
         3b:48:dd:7c:53:11:f3:f6:b0:51:40:80:d8:d2:43:c9:c6:a0:
         75:63:8f:94:47:ef:49:a7:0f:d4:c0:69:7d:94:5f:5e:02:f8:
         a9:36:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:26:49 2026 by rpki-client