Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/79395C821C4B11EC9D9F684FC4F9AE02.roa
File:                     79395C821C4B11EC9D9F684FC4F9AE02.roa (raw, json)
Hash identifier:          ac6UQsRx+1lQgjvLpZB9EkylG5HY+NC3vOMqyV6wO+I=
Subject key identifier:   EE:2C:8E:EC:32:88:7E:0F:49:FE:C7:AD:70:F9:3C:EB:36:5E:D1:0C
Certificate issuer:       /CN=A9191202/serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
Certificate serial:       075D
Authority key identifier: 5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/79395C821C4B11EC9D9F684FC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 22:43:07 +0000
ROA not before:           Wed 02 Sep 2026 22:43:07 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140984
IP address blocks:        103.154.60.0/23 maxlen: 23
                          103.154.60.0/24 maxlen: 24
                          103.154.61.0/24 maxlen: 24
                          2407:8bc0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl
                          rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191202, serialNumber=5A6FB2A3A33832E2166574BD90CDE030BE1FCECF
        Validity
            Not Before: Sep  2 22:43:07 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98a67b-1633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:2c:46:4d:2b:62:a4:bf:7c:48:3d:8c:54:
                    b9:c8:7b:28:70:d1:06:ab:53:d6:78:48:bb:c4:06:
                    45:e4:b4:09:87:73:15:fd:3f:95:46:56:9e:88:72:
                    d7:4a:3f:d1:88:70:4a:7f:dc:8e:88:03:c0:ba:97:
                    13:5f:8b:be:76:ca:ad:3d:61:59:e7:cc:1c:f8:24:
                    80:a1:4a:63:1b:05:6c:7b:ac:b0:a7:1d:a9:b9:6e:
                    4d:3d:0c:90:26:9e:17:47:03:32:e2:ec:4b:bd:67:
                    0e:b6:f9:47:7c:22:a0:36:ad:c8:97:10:cb:f6:e4:
                    b1:cd:98:5c:b4:a0:8e:14:60:f9:f4:56:64:57:07:
                    5d:e3:a6:62:35:67:63:e4:17:9b:b1:85:5d:2e:a5:
                    af:da:c1:98:ec:d4:22:68:05:7c:4e:e7:3f:91:58:
                    b8:7d:be:a0:4b:18:1d:00:4b:7b:2f:cd:7d:c0:4d:
                    55:b7:2b:63:6e:91:eb:fe:9d:f7:16:55:e8:f0:99:
                    ba:a7:e4:a4:57:c7:0d:67:58:6e:24:a7:c4:92:c7:
                    cb:18:af:da:bc:3e:2e:59:71:b2:8a:97:ec:2f:78:
                    cf:e4:11:f3:25:7a:7f:85:fb:89:61:76:12:ef:d8:
                    a6:80:18:0e:84:3b:34:6b:88:e4:84:8f:e3:cb:a4:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2C:8E:EC:32:88:7E:0F:49:FE:C7:AD:70:F9:3C:EB:36:5E:D1:0C
            X509v3 Authority Key Identifier:
                keyid:5A:6F:B2:A3:A3:38:32:E2:16:65:74:BD:90:CD:E0:30:BE:1F:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/Wm-yo6M4MuIWZXS9kM3gML4fzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wm-yo6M4MuIWZXS9kM3gML4fzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191202/DBAF2DEE8D4711EBBA1A902DC4F9AE02/79395C821C4B11EC9D9F684FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.60.0/23
                IPv6:
                  2407:8bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:42:2f:4c:d8:df:2f:56:55:e1:99:e4:1d:5e:41:cb:fa:d2:
         77:dc:0f:d2:99:1f:cf:b7:80:bf:15:cf:b6:fe:fe:f4:bf:f1:
         47:a9:23:62:48:e6:fa:a2:a0:06:bb:e5:f1:35:28:73:d9:a2:
         a0:fc:e3:c9:1b:bf:00:d8:88:5e:cf:f7:b5:a6:83:73:49:80:
         27:16:0d:64:f1:0e:3a:3d:2c:e2:2d:91:4b:2f:73:b4:be:1c:
         85:3f:e2:a3:22:f3:73:53:c6:9a:34:e9:2f:50:ca:d1:e8:4a:
         5a:0d:24:06:1a:17:95:c5:8c:a3:67:ff:d5:b7:71:95:e6:3e:
         be:86:a9:8f:be:98:fc:49:55:bb:26:9c:68:1b:e2:b4:e0:b4:
         82:43:22:36:2c:5a:eb:e8:99:6d:d5:b8:62:5c:98:1c:33:d8:
         28:92:b9:fb:7e:94:66:3a:8e:a4:8e:68:c8:a9:b6:ca:f4:81:
         4f:d6:70:00:f6:32:26:1e:d7:c0:f0:cf:c5:04:5b:3b:9e:df:
         d8:48:76:ff:bf:05:9d:bd:ce:87:6d:cd:c1:d2:fd:c8:c3:12:
         72:0b:f2:da:e0:65:a7:ed:ef:be:80:f5:b6:28:0d:d2:dd:4f:
         95:05:34:e1:60:f4:f5:79:f4:d0:9b:43:d9:40:e8:b0:7f:9f:
         83:59:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:07 2026 by rpki-client