Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa
File:                     32509B68EDAE11E595DF6C28C4F9AE02.roa (raw, json)
Hash identifier:          I/TmvonDYP4Bv7N13eYAiL26u40J8leXDIRrxhh6nq4=
Subject key identifier:   6F:F3:07:8D:70:12:BB:4D:E2:39:E9:35:2D:36:82:ED:B4:8F:EE:6A
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       35DF
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa
Signing time:             Thu 22 Oct 2026 15:10:27 +0000
ROA not before:           Thu 22 Oct 2026 15:10:27 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9443
IP address blocks:        103.5.92.0/22 maxlen: 22
                          103.5.94.0/24 maxlen: 24
                          2402:8700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13791 (0x35df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Oct 22 15:10:27 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ada2762-24d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:a9:14:bc:2f:e9:84:aa:83:ad:78:1d:cc:
                    c7:d8:20:b2:df:29:a1:06:c7:81:67:da:67:37:f7:
                    35:b7:26:89:90:c1:9b:64:3a:f4:9f:ff:e9:cf:8d:
                    f4:97:d9:45:17:82:2c:9f:7e:f2:07:26:e2:c7:ff:
                    bb:be:00:79:aa:57:e4:03:1c:53:59:d8:fd:4b:56:
                    2b:c3:c3:e7:78:e5:05:45:fd:a0:9e:91:c3:85:dd:
                    cc:1a:94:d5:c2:e3:89:ec:1a:f7:33:7b:53:8f:6a:
                    cd:9f:93:c6:11:0c:bd:3b:ae:78:26:af:58:1f:b0:
                    bd:eb:a4:f7:68:81:c2:b4:b8:8c:c1:6c:0a:97:ef:
                    5b:53:7f:3e:53:a8:2d:72:9f:e9:19:69:5d:e1:11:
                    2d:2b:74:18:90:18:75:e2:ee:1f:b3:47:f2:95:8c:
                    29:b3:25:09:df:8d:e0:eb:94:07:90:66:24:4d:f1:
                    f4:08:d2:7e:17:a7:8d:72:14:a5:d3:39:86:78:f0:
                    df:a3:17:b2:e5:98:6e:f4:8c:ed:63:5f:ef:73:f2:
                    23:31:80:75:98:f8:fa:af:22:7b:03:73:05:d1:26:
                    36:b6:a9:87:f7:c6:07:82:ca:45:02:65:4f:85:d5:
                    95:2d:9b:c3:65:94:04:89:a6:0b:c1:ed:ad:f1:6a:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:07:8D:70:12:BB:4D:E2:39:E9:35:2D:36:82:ED:B4:8F:EE:6A
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.92.0/22
                IPv6:
                  2402:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:7b:67:cc:ff:09:ba:fa:3b:41:dc:ff:a1:15:1b:37:4d:
         30:c4:78:b7:37:79:c8:a2:3f:fa:57:d6:97:74:45:1b:a3:7b:
         82:8f:8f:a0:f4:83:64:f0:a5:b1:e1:0a:df:88:bd:2b:19:92:
         34:df:bd:fe:97:e9:9f:c8:32:77:47:a2:74:9f:7e:e7:6d:49:
         3d:7c:79:61:ea:98:fe:bd:42:16:cb:d4:a0:0d:67:0c:73:b7:
         30:75:10:0b:bf:73:e6:86:f4:45:73:ca:62:a8:f8:32:5a:39:
         5e:c1:e8:99:15:15:c7:31:9d:c9:d9:6b:46:8e:ff:34:ae:03:
         7f:6b:b2:d5:8d:fb:c1:7c:0c:11:c9:bf:ba:c3:10:2e:4c:19:
         33:04:eb:4b:c9:95:e7:65:ba:7b:1d:27:01:17:6e:58:09:06:
         00:ac:e7:ee:c2:0a:85:c0:49:49:c6:27:74:93:39:23:78:af:
         ac:e9:37:ee:24:b7:65:55:f7:d5:22:fd:0b:d0:ad:c4:5c:aa:
         96:58:6b:a3:a0:cd:34:15:3a:c1:28:0c:77:b1:5d:b1:38:59:
         de:36:89:b3:7f:3d:2e:50:cc:c7:be:20:59:a9:a4:dd:21:03:
         41:1c:8f:d0:df:01:0d:58:69:1d:85:4f:14:69:22:dc:fa:c6:
         22:0f:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:43:10 2026 by rpki-client