Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
File:                     81764BC4235511EC976AC464C4F9AE02.roa (raw, json)
Hash identifier:          lzqx2D8L0GNnJusCz9P/RzFf/dWfHI33/MjgObs7cGM=
Subject key identifier:   8D:2D:B9:18:81:D6:2C:8D:10:B9:F8:99:35:1A:33:33:66:9F:45:A3
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       05B2
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 23:44:41 +0000
ROA not before:           Sun 02 Aug 2026 23:44:41 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136751
IP address blocks:        103.95.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Aug  2 23:44:41 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6fd669-8bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:68:6a:74:9c:c6:c5:44:09:3c:73:07:5a:
                    ef:ff:86:ed:0c:ce:35:75:4a:7d:65:e6:0c:3b:91:
                    7c:1b:a0:3c:11:6f:57:bf:74:65:89:88:f4:e1:c7:
                    70:9a:d7:5b:62:75:3a:19:93:40:68:24:27:7d:ca:
                    5d:bf:71:f5:ba:0a:79:44:8a:16:5e:48:1a:58:bb:
                    7b:e6:23:79:56:d2:12:97:1a:7a:fa:d3:a5:64:df:
                    ff:a7:10:a4:76:af:50:a0:71:41:e7:db:10:1e:9b:
                    8b:6e:9f:4e:54:96:b8:a3:a3:ed:cb:31:98:be:fe:
                    bf:27:a5:20:ce:41:0c:e8:da:ad:e3:65:2a:65:9c:
                    5e:6a:64:0e:99:95:ab:ac:c1:dd:8f:79:1a:89:f4:
                    e8:c8:f4:4b:1f:7f:b7:48:7e:09:3e:0d:97:29:da:
                    88:51:98:44:dc:f6:bb:eb:84:89:b9:04:aa:91:54:
                    3a:42:2a:a9:f1:8f:c7:e9:71:29:bb:8c:4f:ed:93:
                    2f:a9:e5:79:41:c5:a7:55:01:d7:db:db:97:76:78:
                    a0:1a:4c:a3:25:44:2f:4a:e5:2f:90:3b:9d:85:1f:
                    a5:85:7a:73:b4:2e:72:f0:93:79:36:3e:f5:c0:bb:
                    07:b9:fc:80:ad:6f:4f:db:b4:46:bf:34:59:38:f4:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2D:B9:18:81:D6:2C:8D:10:B9:F8:99:35:1A:33:33:66:9F:45:A3
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:97:0e:78:f5:15:55:9f:87:f5:cd:84:fd:74:77:52:52:04:
         dc:be:06:4a:96:e8:bd:d2:98:8b:6d:59:59:79:43:76:16:82:
         20:0f:26:4f:bc:a5:92:ac:ab:00:5e:4d:1f:20:f9:bf:a2:9f:
         46:73:6b:46:f3:6f:a5:b5:31:0f:d4:20:f5:a2:87:9d:4d:fd:
         e7:3d:d4:8e:73:07:59:9b:1a:fd:e3:df:69:2a:91:35:a6:8f:
         92:58:83:74:3e:82:0c:07:cc:4b:a2:66:a6:77:90:29:f2:c9:
         99:b7:f1:e0:65:f8:9d:4e:a9:91:95:63:7c:22:b9:22:c9:a3:
         b7:4e:3a:23:12:85:1c:27:92:82:3d:6b:03:80:69:ab:00:2a:
         d1:d3:71:c5:85:88:be:85:cf:bb:55:ef:8e:be:2f:48:71:c3:
         d2:83:51:46:38:59:85:93:a5:b5:ee:bd:d8:f8:2b:ee:14:cb:
         e9:4e:3d:2e:dc:74:e4:32:f6:7e:35:79:05:e5:cf:13:e0:28:
         95:07:77:c4:89:6c:52:b8:8f:0b:35:7b:be:0e:11:27:68:a0:
         d8:cf:c2:89:ee:24:06:67:3e:b7:d4:b4:e8:5a:4d:3d:a2:0f:
         75:5f:45:0e:e2:c2:87:c2:69:ea:22:8d:3c:47:20:e5:83:e7:
         c8:f8:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:09:25 2026 by rpki-client