Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa
File:                     746DFE7C37CE11F0A4C19C85C4F9AE02.roa (raw, json)
Hash identifier:          dtXkZfiM0ERBHHWrLamJ8GXtgcxhjLrc2S9aTf/QknE=
Subject key identifier:   2E:2E:22:E8:02:46:93:B1:66:B2:45:E6:BE:43:C7:F8:1F:08:43:47
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       095B
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa
Signing time:             Mon 14 Sep 2026 20:41:27 +0000
ROA not before:           Mon 14 Sep 2026 20:41:27 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     142591
IP address blocks:        103.253.108.0/24 maxlen: 24
                          103.253.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Sep 14 20:41:27 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa85bf7-8a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:35:a0:80:df:40:78:77:8d:70:f0:76:fe:
                    c8:14:dd:99:f0:4b:cb:09:e8:ae:9f:52:58:30:99:
                    41:8d:05:4d:fc:27:6e:5d:3e:e9:55:e7:24:aa:e7:
                    23:69:d7:13:00:90:88:67:b8:fe:5d:d2:56:b1:0e:
                    f7:26:a8:1c:c8:ac:39:6b:0d:48:28:30:e3:1f:5a:
                    db:2f:5d:c8:17:5e:a6:a9:30:a2:de:91:bd:11:9a:
                    13:1e:15:ba:da:db:65:d0:57:e7:6f:b4:b5:a2:8b:
                    82:26:11:67:91:53:b8:8f:1a:d9:cf:23:bc:eb:72:
                    7b:fd:3e:0c:7b:a6:6c:5a:bc:cc:1b:a8:6c:3d:85:
                    f7:a4:65:14:fd:74:14:b8:79:22:e8:98:80:c6:7e:
                    46:b6:d1:2f:d6:88:1b:03:13:9d:d8:8d:bd:e2:1e:
                    80:a6:e4:ae:27:20:40:bf:a4:0c:81:01:a4:fc:92:
                    f5:32:6f:2a:4f:f9:fd:79:12:88:a7:8b:5a:21:5b:
                    49:f1:a3:1c:24:86:08:f8:cb:b3:26:20:92:91:a5:
                    e2:ef:23:0d:e7:3d:cf:60:67:57:85:79:33:90:3f:
                    37:d1:1e:83:f5:aa:11:1d:c7:ce:c1:12:c4:5d:c0:
                    05:99:5b:be:f7:bd:02:16:c5:30:44:29:0b:0e:55:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:22:E8:02:46:93:B1:66:B2:45:E6:BE:43:C7:F8:1F:08:43:47
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/746DFE7C37CE11F0A4C19C85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:9b:b4:74:7d:48:8c:61:15:06:c1:dc:84:f2:a1:c8:a0:
         3d:9b:45:14:7f:d7:11:cd:6c:ff:35:ac:ba:3e:7f:6c:50:66:
         cc:85:88:d8:4c:16:41:0d:f3:da:80:2f:a7:c8:3e:d1:51:36:
         5e:58:d8:75:b7:13:8a:77:cc:58:1d:b1:9c:b7:16:90:82:0b:
         b9:21:6a:aa:1a:c9:2f:20:12:e2:84:94:77:56:67:74:33:b1:
         3c:54:74:09:8a:88:ff:05:1d:e7:be:eb:a5:86:b6:c8:bb:fa:
         60:34:fd:39:70:96:0c:d3:08:46:c7:3e:4a:9c:fc:ce:7e:dd:
         b7:6f:4b:b0:03:f5:38:c5:71:00:9b:ee:31:62:64:79:22:47:
         72:5e:c7:05:e9:ac:f9:d8:33:23:ba:9b:83:e5:b0:8d:c9:cc:
         6a:ac:99:af:c7:2b:8c:2d:32:5b:2c:8c:e9:86:0b:ca:da:03:
         a9:7d:9b:a3:cf:e6:98:2f:c3:ce:0f:ae:b4:d7:bb:a1:b9:9a:
         7c:97:51:0e:bc:f8:a7:69:3e:00:11:7a:1e:48:26:e9:6c:d5:
         09:a0:31:67:04:e3:5e:56:32:2c:56:cb:cd:e6:d3:23:83:3f:
         2e:05:d4:35:2e:75:2a:3c:d3:af:eb:a4:68:9e:46:3d:ba:fc:
         7e:82:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:06:45 2026 by rpki-client