Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/36945EC2232711EBA0F14F17C4F9AE02.roa
File:                     36945EC2232711EBA0F14F17C4F9AE02.roa (raw, json)
Hash identifier:          nZ518Nz9fUSUGAttUGH5/qKoCq89W4AtGeuzfS/iSCc=
Subject key identifier:   A0:38:C6:99:CB:49:7B:6D:0F:F8:53:01:E9:87:02:9C:D8:6F:F2:80
Certificate issuer:       /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial:       09B8
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/36945EC2232711EBA0F14F17C4F9AE02.roa
Signing time:             Mon 10 Aug 2026 20:40:16 +0000
ROA not before:           Mon 10 Aug 2026 20:40:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.152.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488 (0x9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
        Validity
            Not Before: Aug 10 20:40:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7a372f-a9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:1b:e0:0d:98:08:8d:73:e1:45:fd:7f:05:
                    a2:59:a9:8a:97:02:be:98:be:44:7f:c5:85:1e:83:
                    4f:7e:eb:84:7a:0d:0c:1a:d2:c0:ec:69:ec:1e:2e:
                    9a:ad:12:99:b5:dc:fc:df:70:3f:3c:6d:03:0b:ee:
                    5e:8e:ae:93:de:92:c4:84:0a:c2:c7:3e:fd:cf:18:
                    0a:62:99:df:02:a9:e6:a4:fb:9a:aa:34:88:20:57:
                    d5:73:81:ee:28:c1:b8:fe:a9:49:5e:43:f6:1c:1e:
                    5f:7d:70:6a:59:0b:0a:74:60:fe:fa:d9:b0:08:bd:
                    3c:bc:66:b7:02:53:00:b6:5f:73:d0:c9:be:5c:1a:
                    60:ad:d8:1c:fd:79:6f:bf:fb:17:c6:72:89:f1:dd:
                    69:24:bb:6c:e6:da:2d:89:8d:94:93:ad:c8:4b:6b:
                    f6:c9:92:39:6a:17:9d:ca:3f:e4:03:8c:39:97:1b:
                    f0:42:c4:2a:25:28:73:58:ad:eb:b8:f8:80:c1:56:
                    92:f5:4d:db:a9:98:f3:df:a0:ed:b6:fc:c0:7d:8d:
                    d7:6c:b7:3a:2d:b7:93:bc:9d:9b:be:5a:d4:9a:1c:
                    2b:42:e9:a1:91:d7:ba:db:53:40:be:a0:33:12:8b:
                    7c:43:83:4f:44:71:61:6a:ff:db:c1:d8:04:9a:b2:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:38:C6:99:CB:49:7B:6D:0F:F8:53:01:E9:87:02:9C:D8:6F:F2:80
            X509v3 Authority Key Identifier:
                keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/36945EC2232711EBA0F14F17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:4e:b7:e4:46:8f:98:de:56:ec:3c:db:7a:1e:21:87:3f:
         9f:2e:4a:0b:09:ad:f8:7f:e9:4c:cf:30:42:50:e4:ac:6d:31:
         89:ed:31:60:bc:b0:f8:c3:6f:c4:aa:93:b0:d0:c3:9b:3f:96:
         22:c9:16:8d:9d:e5:83:d6:70:7f:05:02:46:8f:7d:4d:63:be:
         a7:58:db:d9:c3:3d:b3:7f:01:f1:22:96:34:7b:fe:ff:67:79:
         c4:75:0c:6a:90:fb:07:49:3f:de:26:5f:57:30:80:4c:d8:f4:
         2c:ea:db:e6:16:59:34:bf:0a:d5:27:b2:ee:6b:77:32:7c:06:
         34:76:9a:01:e2:fe:9c:ab:0b:db:28:2a:f7:17:4b:12:2d:a7:
         06:29:24:46:ac:0b:f4:fd:d6:96:ae:06:d9:8e:4d:a0:35:39:
         9f:77:81:a4:99:79:d4:94:a9:4c:7a:2b:97:a8:cb:8b:f3:df:
         5e:fa:f8:9e:ee:97:ab:a9:fa:d0:b8:23:83:6a:c3:1a:e1:1f:
         8e:0c:78:2f:8c:b3:f1:0d:87:14:ba:03:72:b3:37:23:20:38:
         51:37:1f:1a:75:0f:c3:46:87:47:19:bf:70:70:c7:14:cb:0c:
         d5:d2:80:47:88:e4:3f:e0:ec:50:97:97:06:63:95:9c:e3:db:
         b7:31:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:21:55 2026 by rpki-client