Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/2F793F64AC1911F1899FFC913311F970.roa
File:                     2F793F64AC1911F1899FFC913311F970.roa (raw, json)
Hash identifier:          TOGdUCSf1FUktkxbLQfTgHxXSfyAA99mDaspuQGpnTQ=
Subject key identifier:   F9:F8:86:2E:C5:48:97:42:7D:7A:C3:E5:87:5D:FC:27:D6:40:BF:E9
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       055E
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/2F793F64AC1911F1899FFC913311F970.roa
Signing time:             Wed 09 Sep 2026 06:39:20 +0000
ROA not before:           Wed 09 Sep 2026 06:39:20 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     199457
IP address blocks:        103.47.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Sep  9 06:39:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6aa0ff17-592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:1d:dc:07:1d:3f:5d:9b:0c:bd:d2:95:bd:
                    31:01:40:2e:f1:53:72:32:68:79:01:27:ce:88:22:
                    87:c5:5d:c6:e4:ab:22:ef:50:dc:2b:80:82:eb:3c:
                    93:3a:24:c2:fd:da:50:7e:e5:b1:31:49:6d:ec:5c:
                    3b:86:10:74:7c:76:40:90:5d:a6:8f:6b:db:d4:88:
                    c2:b0:b5:a9:8b:52:a4:9d:c3:91:7d:aa:ea:02:08:
                    ef:db:ba:61:20:e5:63:43:11:fe:5a:35:6f:79:6f:
                    b1:fe:99:af:b5:a7:a1:60:67:ca:e4:8e:c8:cc:40:
                    d5:58:81:5e:09:62:d6:02:39:cf:a9:21:20:15:b7:
                    fd:5f:24:42:32:8e:e4:d5:f3:62:0c:3b:8b:d2:71:
                    11:13:be:c0:f8:44:31:2e:68:5a:2e:3f:35:aa:21:
                    a4:a6:52:69:47:74:40:4f:0a:a3:86:e2:c2:8f:6a:
                    74:03:0b:1a:dc:2e:62:b5:ba:13:89:93:88:b8:a6:
                    d1:fe:15:d3:f0:08:67:c6:5b:7a:e8:ac:af:b6:98:
                    84:fc:8e:ce:44:88:d4:30:dd:8a:63:d8:1f:c8:18:
                    c2:2c:ac:4d:f4:e4:cf:4f:94:5c:ae:37:16:0e:f0:
                    96:38:b1:26:b8:4d:69:9a:31:16:6f:de:c2:e3:39:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:86:2E:C5:48:97:42:7D:7A:C3:E5:87:5D:FC:27:D6:40:BF:E9
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/2F793F64AC1911F1899FFC913311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:28:e0:ed:ab:fb:b6:c7:98:0b:21:39:6a:89:e9:45:d8:
         95:9f:44:a6:47:11:bc:63:65:7d:c1:10:8d:dd:da:5a:4e:3a:
         5b:55:4c:63:b6:d6:b4:aa:34:40:49:99:89:f2:e1:a8:5a:fd:
         72:28:b5:a9:a4:34:74:d6:d5:50:8b:52:db:fd:70:2a:9b:e6:
         44:23:59:0e:3b:f8:2c:b2:3b:7f:84:74:5d:50:79:26:b7:13:
         88:38:06:cd:6a:c1:4d:9d:4d:94:f4:9a:41:e2:80:6a:db:57:
         c4:ae:3c:b6:e7:5d:81:44:e8:cd:8c:bc:bb:3f:ec:fc:1a:4d:
         36:f9:46:6a:a5:24:2a:f7:2d:46:f8:7d:fc:1b:89:60:da:da:
         96:90:50:a7:57:9d:cd:f0:d5:a0:ff:75:a6:17:be:b6:50:8f:
         04:4f:a9:de:6e:18:43:58:e5:ad:d6:27:ae:38:9b:b7:44:e5:
         b4:c8:e2:c9:e7:a5:d0:d8:66:03:68:b6:fe:ae:fe:c0:f7:2c:
         c3:2b:7e:65:74:2a:f5:0e:f7:d3:6a:3b:96:ba:a0:58:e9:97:
         bd:f4:93:19:09:7d:be:cc:3d:c0:c6:d8:fd:29:57:0f:8e:84:
         1d:65:25:2d:d9:6c:51:2a:7b:39:fc:0e:71:f5:09:a4:0f:e7:
         b6:1f:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:42 2026 by rpki-client