Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa
File:                     E58351049F2011EE8D92FF5EC4F9AE02.roa (raw, json)
Hash identifier:          371rZFT06QQZXuImrGUztiEpwJgbqjigOCtsTXlfZ5Q=
Subject key identifier:   51:5E:B0:4C:CB:C1:EC:4C:69:E3:51:5D:29:6A:25:CB:38:5A:F8:3A
Certificate issuer:       /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial:       025B
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa
Signing time:             Tue 15 Sep 2026 02:52:33 +0000
ROA not before:           Tue 15 Sep 2026 02:52:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45650
IP address blocks:        103.246.64.0/23 maxlen: 24
                          2001:df2:c540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
                          rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
        Validity
            Not Before: Sep 15 02:52:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa8b2f1-e401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:ba:98:12:61:a5:02:f4:e3:4f:a6:fa:bb:
                    e0:57:c7:22:4a:a1:d3:97:09:b8:d4:57:d8:52:98:
                    b7:19:df:e5:de:e9:a5:24:a8:33:35:af:e9:3c:fc:
                    4f:2f:c9:7b:ee:3b:19:bd:bd:8a:cf:f8:9e:79:df:
                    33:de:4b:f8:b3:2a:f0:5e:f9:39:52:3b:54:2f:b8:
                    73:3e:fc:4d:c5:86:b3:f8:62:5b:c9:3a:7a:6b:21:
                    19:0e:69:33:58:83:68:49:00:26:b9:66:db:67:f4:
                    c0:a5:57:4f:95:da:48:2f:2b:3c:b6:d2:c8:c5:b8:
                    7d:b6:02:4e:47:09:be:17:fb:7d:fe:11:49:54:ce:
                    e7:3a:93:a8:9b:c6:2f:17:a5:b9:f8:2d:91:ab:d0:
                    d7:bf:41:7f:26:cd:b0:b9:8a:71:d3:af:9d:40:d0:
                    54:18:65:0c:7f:ee:88:83:ba:6c:98:cb:08:ae:52:
                    13:b0:1d:9c:e1:50:e8:a8:86:4e:7c:b3:0a:be:35:
                    b0:11:6e:3f:2b:cc:ee:63:35:7a:8c:48:eb:1c:ab:
                    69:57:01:a4:b6:94:fd:64:24:a8:76:36:8d:3e:43:
                    27:a5:df:35:db:9a:c9:01:9d:c3:eb:86:fc:82:8c:
                    22:eb:fb:7e:ee:7e:93:2b:3a:71:20:74:3b:8b:71:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:B0:4C:CB:C1:EC:4C:69:E3:51:5D:29:6A:25:CB:38:5A:F8:3A
            X509v3 Authority Key Identifier:
                keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.64.0/23
                IPv6:
                  2001:df2:c540::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:18:55:06:6f:05:fd:0e:95:b3:31:1c:5c:5d:0c:14:0c:
         48:3b:3e:57:f3:4d:8c:af:5a:a3:40:aa:1b:4c:11:09:53:cd:
         4b:61:7b:7f:b6:be:3a:cb:41:85:cb:76:55:1b:83:5b:f8:84:
         91:ec:6a:ef:a8:2a:e2:10:a7:52:33:89:44:a8:a1:cb:07:f5:
         e4:b1:69:52:61:50:74:e5:bb:61:9e:7b:07:32:7f:0f:25:47:
         b7:f1:3a:4a:d8:82:3c:74:40:d2:bb:20:5e:1e:41:00:76:2a:
         72:d9:e2:8e:88:79:c7:c4:4d:c3:e0:0d:04:ff:53:46:61:e7:
         b0:0d:20:83:45:46:5f:e0:f3:80:a3:17:51:d0:99:b3:a1:3e:
         bf:97:c7:da:70:61:b0:11:7c:5a:f0:ce:ba:b0:27:af:a6:d0:
         b4:cd:b5:1e:5c:d1:d4:f9:3f:3c:b0:7e:41:fd:17:07:56:0e:
         d2:89:42:6d:94:b1:57:44:b4:db:74:8c:20:05:98:9f:69:f6:
         63:dc:b9:a5:ae:07:b3:72:08:37:c8:3e:eb:ec:4b:81:fa:1b:
         fd:20:73:85:a8:f6:ba:45:02:09:24:14:88:1c:a8:0c:80:ff:
         7c:91:bc:d6:74:fb:cf:d5:e2:b4:95:6a:d6:b7:2b:90:f6:7f:
         73:85:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:39:37 2026 by rpki-client