Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa
File:                     4707F6CCB10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier:          UQDttalCUYq3AyfTqyjYMyUyA3NfkM8GwwrJ36xb3vI=
Subject key identifier:   44:26:CD:84:24:EE:CA:76:99:D9:A8:52:42:60:F8:4A:09:FE:F3:19
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       247E
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa
Signing time:             Sun 16 Aug 2026 16:28:18 +0000
ROA not before:           Sun 16 Aug 2026 16:28:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55532
IP address blocks:        103.15.168.0/24 maxlen: 24
                          103.15.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9342 (0x247e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 16 16:28:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a81e522-b789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:71:d0:2e:f4:eb:97:45:93:4d:ed:ea:50:
                    bc:b5:cb:80:75:f9:fd:1c:a2:8b:a4:66:65:dd:b9:
                    84:02:02:b0:c9:4f:34:77:9c:7a:dd:02:32:db:6d:
                    56:e5:63:e1:d9:b8:1d:6e:1c:3e:b5:8a:3d:93:9b:
                    6d:1e:ec:da:b7:2a:a2:04:92:33:58:20:c3:2a:0b:
                    2a:b6:5e:9c:4d:62:c6:40:a9:54:d5:85:24:57:63:
                    e2:12:be:70:6c:a5:7f:0d:cd:aa:50:9d:2d:1c:1c:
                    72:54:70:23:03:61:b5:cd:cd:8d:8d:27:b5:84:48:
                    c8:c2:f1:b8:f2:38:f0:a2:b1:54:dc:49:20:a0:7c:
                    f1:8d:64:bd:a2:5f:27:e8:2b:13:e0:a1:87:1f:c7:
                    e9:2b:a3:4d:36:92:2f:69:87:13:69:ac:00:68:0e:
                    33:29:ba:81:c5:20:84:c5:85:b5:f6:ba:e1:5e:10:
                    c2:30:5a:12:41:f3:f5:3d:d5:ab:5a:37:e8:04:1d:
                    73:cc:85:95:42:41:71:c8:4e:cc:88:c3:b1:49:05:
                    2b:da:4a:75:f3:2a:52:21:a7:a0:1d:f1:40:8b:69:
                    44:89:26:b1:5d:9e:f0:d3:9f:cd:fd:2c:dc:9f:5f:
                    16:93:83:27:21:c0:bd:99:93:ba:b1:82:14:39:bb:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:26:CD:84:24:EE:CA:76:99:D9:A8:52:42:60:F8:4A:09:FE:F3:19
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/4707F6CCB10F11E5A010921EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:07:f5:47:db:9e:c3:49:2b:d9:06:7b:10:a1:c7:70:81:
         62:d9:e6:85:33:6a:8b:f7:fd:ed:d1:19:7f:95:22:e7:0c:66:
         be:24:0c:c1:51:98:fe:98:31:82:0d:c4:80:6b:a8:c4:c1:1a:
         20:24:8f:44:ef:05:b4:10:eb:23:4b:c3:2b:84:41:97:ae:2b:
         47:15:1e:3d:00:97:1a:38:62:bf:e0:57:08:f2:10:a5:24:cb:
         0f:61:0c:b9:2d:65:af:7f:a7:38:ea:cf:c5:79:47:33:7b:16:
         7b:5a:71:c4:a9:9d:f5:38:be:fb:d0:99:ac:6f:c3:25:76:ec:
         f4:b4:80:66:f3:29:bc:e7:f6:3e:20:56:07:37:70:9a:c8:9e:
         23:00:f3:3f:d4:03:4a:80:0d:7c:7d:e6:a9:64:22:70:9b:67:
         9d:97:ba:e9:59:c1:6b:9d:94:2e:80:ac:8a:f2:ee:7b:20:4b:
         53:37:31:68:35:60:fc:7b:d3:bd:26:04:bd:db:e3:63:7e:04:
         29:1e:88:08:b1:2d:65:69:89:60:30:74:ed:50:8e:7a:df:44:
         6c:61:68:d5:c5:46:8a:e9:04:a2:62:92:00:65:fc:ec:6b:8e:
         64:7e:ff:75:4a:05:50:f4:ae:a5:06:83:9f:48:a8:75:bb:18:
         b3:0a:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:19:18 2026 by rpki-client