Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/C762BA72A69111F19896220A7111F970.roa
File:                     C762BA72A69111F19896220A7111F970.roa (raw, json)
Hash identifier:          jAFER+09ZO9+0eFOglysIeuzJxzcYqoIfF5SHmhknQs=
Subject key identifier:   68:A7:57:1B:F6:6C:05:52:4A:A2:7B:B7:C3:46:E7:25:C6:FF:A5:9A
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       F5
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/C762BA72A69111F19896220A7111F970.roa
Signing time:             Wed 02 Sep 2026 05:47:47 +0000
ROA not before:           Wed 02 Sep 2026 05:47:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148976
IP address blocks:        103.175.34.0/24 maxlen: 24
                          2400:9de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: Sep  2 05:47:47 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a97b883-a0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:98:5e:34:29:95:c8:21:94:22:74:36:c6:
                    a3:37:ad:b1:e6:8e:45:5e:4b:cb:f6:e8:25:e0:16:
                    93:68:87:da:3c:13:da:d5:39:86:a5:45:56:46:18:
                    f3:9b:72:3f:f1:e7:12:47:b0:36:d8:f4:ad:28:5e:
                    6d:54:08:b5:02:24:a4:e7:65:34:b2:32:38:ed:d7:
                    ff:60:84:18:d6:2b:b1:85:63:49:f1:63:c6:a7:87:
                    99:26:b3:6e:38:cf:25:13:ec:78:8f:ab:d7:c7:ab:
                    c1:b5:40:6b:22:6b:ea:7d:78:46:6f:77:32:ee:a1:
                    cc:4f:6a:7a:2a:2a:bd:c2:82:6e:17:6c:c5:22:ed:
                    24:95:51:58:c6:73:55:e8:9c:25:1b:97:a3:bc:87:
                    ec:cf:a6:b6:76:6e:19:7a:53:f8:e4:36:09:78:40:
                    2e:65:54:29:5e:91:e6:d8:71:8d:cd:f4:99:7f:26:
                    fb:09:12:d9:7d:be:27:bd:17:32:75:79:ac:a0:c7:
                    b9:fc:80:83:5d:9b:22:7f:6e:e7:c2:5a:85:1a:73:
                    31:60:de:42:92:4d:0a:49:17:a8:18:77:04:6c:ab:
                    63:b1:f4:ad:7a:53:c5:6a:8a:3e:59:6a:a8:6b:34:
                    85:77:69:e6:94:c0:66:d4:f6:ac:17:94:66:7b:f0:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:57:1B:F6:6C:05:52:4A:A2:7B:B7:C3:46:E7:25:C6:FF:A5:9A
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/C762BA72A69111F19896220A7111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.34.0/24
                IPv6:
                  2400:9de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:51:a2:c1:83:d0:f4:41:ac:48:9c:71:cd:06:4e:fd:ca:cf:
         2e:68:69:25:f3:dd:e6:ea:98:8b:18:c7:84:b6:c2:07:03:ee:
         d0:d8:8a:45:45:4b:07:80:da:94:6b:1c:f7:00:8e:f3:2e:9e:
         70:7e:82:b4:17:9a:7f:83:9e:d7:bc:8c:47:86:5f:d2:b9:52:
         77:0c:4a:95:48:ee:fc:de:98:1d:22:61:ef:e2:35:0e:ee:8f:
         e8:f5:cc:86:7a:79:5f:65:e9:4b:be:e4:cf:91:2a:86:e7:ed:
         a2:2f:0c:c3:8a:74:b9:bd:14:1b:e5:d3:30:16:33:d8:70:ef:
         54:03:9a:f2:80:50:5c:0d:cc:cb:5c:ca:36:b6:6d:8a:a1:82:
         1e:ae:c9:7e:65:b4:b7:61:f8:95:18:e6:bf:34:75:fb:2d:41:
         75:bd:fc:a3:79:ee:c7:53:1a:c3:24:d0:f5:0f:e1:2b:9a:48:
         e1:5b:fb:86:1c:c4:6d:ef:90:39:93:33:8d:3b:7b:c5:4b:e7:
         49:35:5d:1f:27:56:44:db:a8:db:3d:7a:24:7c:f6:6d:b4:31:
         65:e1:54:b3:71:fc:29:7c:86:4f:fc:b6:15:bc:1b:30:ca:33:
         00:8c:a4:48:d7:bf:d2:45:89:ad:26:47:69:5d:d1:42:70:36:
         71:97:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:42 2026 by rpki-client