Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
File:                     04231ECC326F11F0B0723439C4F9AE02.roa (raw, json)
Hash identifier:          w3uOUeW/FatR7+z01Z2HvN2GffooWt+q9F95kyByhRI=
Subject key identifier:   9A:21:4E:CB:F5:7C:58:FE:6B:B4:DC:35:F7:29:B4:A1:5A:78:69:CA
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0C5E
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 19:41:08 +0000
ROA not before:           Tue 28 Jul 2026 19:41:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135426
IP address blocks:        103.17.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Jul 28 19:41:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905d4-336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:70:4f:17:7a:dd:d2:4e:55:3a:01:3d:3c:
                    79:28:8d:19:ab:56:f5:8a:35:be:24:c9:ce:49:2f:
                    b9:70:d7:ed:ac:57:6e:f1:5f:b0:ef:73:7b:89:44:
                    c3:77:8a:13:e6:34:14:cd:62:8b:d0:37:ce:d1:af:
                    a3:9e:d2:03:47:e0:7f:cc:48:27:1e:7b:50:f6:75:
                    82:25:81:66:f2:bb:9e:5e:2a:3e:f3:e0:6b:14:ea:
                    4d:98:34:d6:77:fe:27:98:73:39:c6:41:fb:36:ec:
                    fb:c5:55:4a:48:23:27:83:21:19:ae:e2:02:5f:70:
                    70:61:16:f6:bc:69:ef:7d:b7:0f:a5:3e:f9:38:b5:
                    d6:59:d1:b6:d1:7b:43:bc:fd:7b:87:de:ad:15:b3:
                    a7:c7:be:a6:a1:80:80:22:fb:9c:a3:1e:f1:95:e5:
                    f0:43:d9:46:84:fc:35:c6:b5:af:13:9a:2d:dc:3d:
                    b4:82:e7:86:64:3c:44:05:29:96:44:f5:60:9b:25:
                    24:ff:fa:44:23:3e:07:4e:1a:4b:3f:19:28:a1:5d:
                    0c:e8:b8:f0:a3:7d:cb:86:65:19:9b:35:ad:bd:a6:
                    00:2c:3d:54:90:e5:3b:03:83:e4:e0:93:c2:a1:a0:
                    1b:67:38:8a:a4:2a:71:a6:d7:63:7e:fb:50:a1:32:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:21:4E:CB:F5:7C:58:FE:6B:B4:DC:35:F7:29:B4:A1:5A:78:69:CA
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:c4:cf:04:90:40:bc:47:0e:14:4c:48:9e:e4:3c:4c:02:
         41:6f:ad:cc:de:c2:09:31:c8:9f:37:0e:06:09:32:0d:34:69:
         32:7f:b3:39:49:da:f9:76:8f:a5:58:ef:19:bf:1a:a7:02:43:
         00:08:df:25:a6:66:ea:6c:4a:f5:7e:62:5b:23:33:6b:a7:b3:
         fe:78:7f:9d:49:30:27:3c:f4:a2:90:1c:1b:44:09:af:25:06:
         16:0c:83:f3:d3:17:78:07:fb:67:0c:6e:91:d7:8a:92:2d:47:
         04:1a:66:57:e3:a0:28:d4:99:78:a1:b7:99:90:49:69:78:f6:
         d4:0a:b9:0b:7e:f6:5e:ab:37:52:5e:d0:c1:62:e6:fe:fd:92:
         08:42:8c:2a:72:af:78:ee:82:25:d4:5e:39:ac:33:4f:1f:6c:
         b4:54:f9:52:62:e2:d6:28:23:3e:e7:a7:ff:29:5d:7e:c5:ae:
         55:65:02:dc:70:ca:cc:31:e1:35:ed:b3:c6:b4:87:ea:c3:bb:
         52:b4:94:89:26:bc:1d:85:c4:a4:3a:89:bf:0a:47:91:79:ae:
         90:21:08:54:b0:1a:83:bc:35:e8:ea:b3:ca:1c:fe:fa:56:01:
         6d:44:83:02:e2:0a:f4:72:ce:b3:43:6a:e2:b9:35:eb:a5:bc:
         e2:d8:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:49 2026 by rpki-client