Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/9AAB8A10AABD11F18324D71C4011F970.roa
File:                     9AAB8A10AABD11F18324D71C4011F970.roa (raw, json)
Hash identifier:          621XDjRjlNVr3wTxt/hPLQYaWUf2fqtMIKqD0yG6id0=
Subject key identifier:   2C:89:95:18:30:A3:1F:85:4B:DD:33:92:FD:E1:33:8C:7D:E2:4E:91
Certificate issuer:       /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial:       08CD
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/9AAB8A10AABD11F18324D71C4011F970.roa
Signing time:             Mon 07 Sep 2026 13:11:15 +0000
ROA not before:           Mon 07 Sep 2026 13:11:15 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133770
IP address blocks:        103.156.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
                          rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
        Validity
            Not Before: Sep  7 13:11:15 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a9eb7f2-29bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7f:2e:b9:b8:1a:3d:f8:05:a3:8a:a4:7f:64:
                    a4:9c:72:1a:56:e1:bc:47:aa:dc:7b:a7:a8:ba:58:
                    f2:df:8e:42:07:b9:96:cc:95:89:19:a9:b4:4b:0f:
                    22:d1:6c:26:3a:ff:56:be:c4:51:b6:56:50:59:17:
                    cf:6a:00:18:fd:12:29:33:29:8c:d7:55:36:0b:73:
                    71:4b:c0:8e:f1:78:50:f8:a8:a4:c1:77:c4:44:fe:
                    02:3a:e7:9e:ad:60:1f:3e:1b:50:30:0d:ea:38:e7:
                    11:4a:05:92:12:7a:ad:58:3a:12:72:5e:ab:53:22:
                    36:25:e4:eb:70:93:0d:95:a6:7d:fc:ad:be:fc:4c:
                    61:7d:b9:37:20:97:2a:2a:1c:f0:39:c1:96:b1:2e:
                    f0:84:09:19:2f:dd:51:9c:18:e1:3a:93:14:dc:04:
                    f1:9e:d5:ee:e7:64:24:c3:91:b7:85:1b:00:af:d6:
                    e7:d1:f2:c2:30:16:3d:95:b5:c9:77:85:d9:9a:07:
                    3e:a9:5d:29:ee:52:b4:d7:86:b6:63:b2:45:65:37:
                    b5:d6:e1:a7:56:e6:51:10:21:66:0b:ce:35:6e:ab:
                    7d:b2:6a:f3:55:47:b5:16:e4:cf:f6:c2:a0:58:97:
                    f0:70:d5:99:aa:24:d3:e9:25:34:a7:44:3b:fd:05:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:89:95:18:30:A3:1F:85:4B:DD:33:92:FD:E1:33:8C:7D:E2:4E:91
            X509v3 Authority Key Identifier:
                keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/9AAB8A10AABD11F18324D71C4011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:1b:13:cb:e3:7f:e2:3b:ef:ad:71:3f:3c:80:29:dd:12:
         f5:b5:70:a7:43:66:0c:4b:1c:dc:1a:47:da:e3:66:5f:d8:4f:
         a5:b5:22:b0:41:9f:e2:73:1b:b0:7a:91:e6:b3:ab:20:52:a6:
         f1:16:ff:b0:82:34:77:19:1c:41:ad:f2:7c:8e:9f:6f:64:53:
         3d:3d:72:ff:83:a4:60:ca:3e:57:fb:7d:98:5a:0a:b5:2b:12:
         f9:63:a3:c4:5d:11:49:ca:50:be:57:8c:38:33:a9:a3:3d:7f:
         86:db:e4:78:74:dc:af:ed:14:86:2e:0b:57:ac:18:ef:be:2d:
         d7:93:bb:0e:97:34:9f:05:0a:b7:18:31:22:6d:34:57:ac:7c:
         a9:1f:85:37:80:79:02:98:d0:06:86:7d:dd:33:48:f8:d0:0b:
         cd:a5:ae:df:f2:2a:a7:27:5f:b0:09:73:bd:8b:6c:78:54:81:
         f0:fd:4e:37:a0:47:a8:0f:57:8e:83:0c:9d:c6:a1:50:8e:8e:
         47:03:0e:6c:59:47:05:39:70:90:6a:c2:a5:46:07:e0:f8:da:
         d1:a8:cb:82:a4:8c:29:dc:f8:14:f5:c5:d6:f3:8f:ee:a0:fd:
         b6:21:f4:d1:57:8e:d4:83:b7:7e:4c:d1:1e:b7:34:e0:ac:88:
         34:fa:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:05 2026 by rpki-client