Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
File:                     AF91ADB42CE211EC8664D47EC4F9AE02.roa (raw, json)
Hash identifier:          iu4wDFeMIY7/bQ9J/tfUOATlPlHEokNa5kKy6FcUF3g=
Subject key identifier:   08:06:F9:72:69:AA:E1:F7:37:95:CD:E8:0A:BF:CE:95:62:23:D1:08
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       05D2
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 23:45:18 +0000
ROA not before:           Thu 10 Sep 2026 23:45:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.70.49.0/24 maxlen: 24
                          103.70.51.0/24 maxlen: 24
                          182.54.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep 10 23:45:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa3410e-dffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:2e:45:4c:99:65:53:c6:f8:64:b8:1a:56:
                    67:34:88:40:42:6e:bd:15:22:ee:c4:bb:36:ff:77:
                    0d:f9:27:d9:1d:23:29:fa:ce:70:49:08:0b:2c:21:
                    3a:cf:46:14:fd:91:c7:6c:14:be:64:5b:86:fa:0d:
                    95:05:4e:b0:7a:4c:84:35:00:e5:5a:75:29:08:3e:
                    c5:c4:40:b2:b6:6b:d7:b0:7a:a7:94:be:8b:87:2f:
                    11:75:96:e5:ba:14:77:68:3e:76:d1:e2:40:eb:55:
                    2c:66:d7:1f:3a:65:f4:55:48:0e:78:db:4f:2b:c1:
                    40:68:dd:dc:de:63:cd:be:4a:fa:13:6a:ee:b1:75:
                    24:b1:40:6a:91:54:39:29:9f:11:17:0c:d9:22:f2:
                    f3:c2:99:bd:53:7f:e8:72:76:1e:c0:b4:b7:f8:2d:
                    15:31:8d:e8:5a:16:57:4c:04:36:47:10:f3:81:5e:
                    b0:f8:31:a3:f5:42:f7:d6:88:40:80:08:89:1e:6d:
                    9e:58:a0:d8:ea:5b:41:59:7c:a5:07:70:19:49:3e:
                    a7:4d:15:04:99:3c:16:d8:f4:0e:f2:23:40:77:df:
                    fa:fb:3e:a6:45:29:c5:58:de:92:36:0d:b3:19:5c:
                    da:f7:7a:70:5b:f2:d9:dd:1c:b5:44:19:ed:33:bb:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:F9:72:69:AA:E1:F7:37:95:CD:E8:0A:BF:CE:95:62:23:D1:08
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.49.0/24
                  103.70.51.0/24
                  182.54.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:18:34:94:09:25:4b:39:db:f8:1c:b8:41:0f:63:0d:1b:22:
         e6:c1:6f:b8:fa:a0:70:9a:f0:ad:c7:5f:2a:00:b7:22:ba:e8:
         5c:e0:e9:71:d5:a3:03:48:a5:3f:c5:cd:43:f1:d5:40:b0:f1:
         17:d2:ea:c1:86:4f:cf:ab:f6:eb:09:74:70:03:42:97:56:23:
         4c:ef:47:24:9f:b8:13:b0:f3:d8:22:63:b3:47:1b:a6:d9:10:
         a5:2c:0f:4d:8a:71:46:c9:75:2f:da:c3:df:54:2d:9e:ba:0c:
         d7:be:7a:d7:e1:82:35:32:fd:bb:52:01:60:db:37:b0:05:e2:
         93:6f:27:16:be:43:be:8b:11:4b:ed:ce:5f:13:c2:bd:4c:77:
         51:f1:fd:4a:6a:97:3a:bf:f2:e1:2d:2f:d4:04:f7:3e:0d:ed:
         39:26:b2:5b:32:ff:af:79:f7:3e:4c:3d:16:01:85:ea:0a:6b:
         39:75:3b:61:b0:31:b8:11:a5:e5:db:80:ce:da:dd:30:fd:de:
         d2:b8:80:65:c6:b9:aa:75:0d:dd:a7:08:ab:f9:ba:31:2f:6b:
         77:f8:9b:85:7e:6f:b9:6f:df:16:41:47:a4:f4:86:91:c7:3f:
         f8:f0:69:31:94:62:a2:9d:9e:80:04:25:ab:0f:6e:c7:24:3d:
         e7:4c:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:11 2026 by rpki-client