Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa
File:                     185EA954250011F192DC095DB9833773.roa (raw, json)
Hash identifier:          9EdyDv/MVn8x73r1PoQ2hUZDh9n0G9GLA9V6/QPeY90=
Subject key identifier:   20:D0:C0:1F:1D:F6:D9:F4:47:A2:1A:4A:62:56:BB:16:F4:D9:CE:DE
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1AE6
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa
Signing time:             Sun 30 Aug 2026 16:32:16 +0000
ROA not before:           Sun 30 Aug 2026 16:32:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153319
IP address blocks:        103.115.4.0/23 maxlen: 24
                          2001:df4:45c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6886 (0x1ae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Aug 30 16:32:16 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945b10-4690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:a6:e1:51:0e:3c:98:0c:dd:02:da:cc:c7:
                    28:42:c0:6c:ae:55:ee:28:96:34:f9:06:a4:c9:ee:
                    ec:9f:a5:60:87:5f:11:f2:1e:86:15:f2:74:5e:47:
                    57:a9:14:d2:71:b0:2d:a9:c7:f8:69:8c:7b:7c:29:
                    bf:66:42:f5:4b:49:ff:68:57:d9:c1:fc:f1:02:73:
                    c9:d1:62:4c:f4:a0:dc:0c:17:fb:aa:ef:af:da:46:
                    4c:27:cc:48:fe:2a:fb:ad:9b:a1:6e:f6:a0:8d:72:
                    f9:4a:a2:8b:9a:00:9e:94:e1:dc:a4:aa:9c:0b:69:
                    46:1c:33:a3:8d:0d:24:e3:08:a6:81:0d:b3:b9:57:
                    fb:de:a4:41:85:3f:f7:8a:eb:ce:d5:a7:e0:b5:d1:
                    02:c6:b6:34:ef:90:29:e9:7f:11:2e:ef:6d:c1:3c:
                    c8:4a:a1:9c:5f:14:5a:d4:2e:1d:b1:bc:1f:ad:17:
                    38:47:ba:53:78:01:16:1f:37:7b:db:e4:b8:ed:29:
                    7a:dd:b0:6a:c1:6f:48:3f:6f:6e:85:f5:18:d9:53:
                    aa:31:a4:32:3c:d3:ab:ab:93:0e:23:84:15:4c:e5:
                    47:07:a6:00:ac:93:4f:d0:62:9d:fc:8b:bb:53:66:
                    bb:2d:bc:bf:08:1f:26:b8:17:6c:79:f5:8b:7f:fb:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D0:C0:1F:1D:F6:D9:F4:47:A2:1A:4A:62:56:BB:16:F4:D9:CE:DE
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.4.0/23
                IPv6:
                  2001:df4:45c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:46:2c:45:12:f3:83:b6:9a:83:f3:c6:91:6c:4e:bd:db:
         de:79:39:8d:1b:fe:ed:cb:9f:7e:8e:3b:20:f9:91:45:07:1c:
         21:09:10:d1:08:d3:94:5c:a3:9c:2c:ab:24:bc:c1:d6:f6:2a:
         06:04:eb:91:1e:f8:2b:1e:c2:67:bf:43:0d:3e:d7:1a:62:66:
         5a:ef:f8:65:03:f3:6a:a7:fb:ea:50:bc:53:f7:40:2d:44:7c:
         10:23:eb:0d:e4:d1:df:bd:1e:1d:07:6c:09:4b:b8:10:c0:ac:
         c4:b3:97:d2:4b:13:74:e9:51:03:1a:d4:db:5d:b3:1f:f2:e0:
         2f:f5:ec:ce:4f:46:2b:46:67:36:3d:d9:f3:cb:43:b2:b7:32:
         10:3a:08:af:4a:4a:00:01:ff:76:46:97:4b:72:c0:50:87:58:
         cc:7b:b2:69:d4:32:8b:36:b1:f5:d0:71:68:de:1d:d4:1c:27:
         66:51:ba:53:d0:13:7f:02:1c:dd:2d:e3:be:50:95:67:63:44:
         48:45:7d:1e:e6:71:f8:82:bf:0f:86:1c:3d:84:4a:5d:3d:8d:
         34:bc:b2:68:39:f9:87:7d:0f:92:27:3e:74:66:22:2a:5a:c0:
         a8:f2:8e:ed:d6:81:58:f9:6e:ac:d0:e4:53:ec:40:07:71:9c:
         d7:41:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:17:08 2026 by rpki-client