Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/09C6BFEEB01011F1A6F6C7676C11F970.roa
File:                     09C6BFEEB01011F1A6F6C7676C11F970.roa (raw, json)
Hash identifier:          hufxRF71ZRGQm/acHGRYYjENu87o9m9uiwMosR8VESc=
Subject key identifier:   49:FC:46:C1:07:90:9F:08:4F:E4:44:DF:4D:81:8D:36:25:70:34:45
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0380
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/09C6BFEEB01011F1A6F6C7676C11F970.roa
Signing time:             Mon 14 Sep 2026 07:43:56 +0000
ROA not before:           Mon 14 Sep 2026 07:43:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     147314
IP address blocks:        103.66.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Sep 14 07:43:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa7a5bb-8d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:b9:3a:0e:d4:37:5b:1e:1b:cb:f0:c9:d1:
                    2d:77:f8:14:ad:ee:8f:8d:01:7c:25:dc:c1:3f:43:
                    22:43:9b:4c:db:39:47:d4:83:f6:12:e2:e4:49:98:
                    1d:ef:e0:fb:cd:cd:e7:f0:ce:d4:0f:95:01:0e:b7:
                    fd:90:6b:5b:41:3e:c3:91:e6:ae:98:65:03:71:25:
                    69:e9:66:ff:9d:19:f9:23:62:f1:0a:e2:d4:db:22:
                    f0:e3:e7:5b:06:48:32:4e:94:78:3c:14:6a:ab:76:
                    68:7f:01:56:f8:74:9a:69:b0:79:f5:7b:bf:db:ca:
                    20:63:39:60:3a:a1:6e:08:6b:d2:28:53:8d:99:b6:
                    7e:09:30:1b:f2:f0:19:ae:ce:33:6a:ad:81:33:08:
                    ec:32:41:2c:69:c8:6e:50:ba:37:9a:2a:8b:3c:bf:
                    15:47:bd:11:eb:2c:09:03:cd:26:89:a1:80:9f:ec:
                    8b:6e:c3:49:4a:ce:ff:78:3f:65:a8:dd:fa:54:9f:
                    cf:0d:60:da:88:c2:d4:c2:48:b8:6a:5b:70:77:80:
                    81:7c:7e:e3:c3:46:c4:ae:2a:3b:24:5d:c0:f1:7a:
                    76:69:b5:fd:f8:a9:05:b6:9a:b5:21:d8:3e:76:f5:
                    ed:db:65:6a:ac:d7:29:ee:c4:a8:94:78:54:87:3e:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FC:46:C1:07:90:9F:08:4F:E4:44:DF:4D:81:8D:36:25:70:34:45
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/09C6BFEEB01011F1A6F6C7676C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:60:38:72:b3:02:ae:df:9c:c2:9e:3c:a9:23:e3:83:cc:
         f6:49:2a:65:74:e6:0c:9e:ca:98:9f:4a:9f:d7:18:c1:1a:63:
         e8:64:92:24:fa:a7:63:42:1b:dc:90:83:30:78:a7:33:54:4c:
         f8:59:f1:e5:6e:29:4e:89:1e:b2:01:6e:a3:6b:e5:30:c0:06:
         99:fe:d4:ed:b4:b7:55:43:06:a5:e5:3d:0f:0d:ad:6f:36:24:
         51:2e:b9:58:00:47:ae:cc:d4:0c:89:42:24:07:48:99:d5:93:
         f4:71:23:bc:39:26:39:d4:fa:86:aa:a1:69:fc:ce:72:07:cb:
         1d:91:8b:86:75:aa:67:c0:e9:36:a6:7b:f0:50:fb:18:7f:d6:
         a9:d4:50:e8:3e:3c:af:ff:68:d5:c5:22:c0:8e:0c:9c:db:79:
         e8:d7:c9:8c:52:6c:6b:dd:46:42:5d:c6:d7:ce:31:0c:a7:cc:
         27:b6:cf:dc:8e:fd:a7:5d:57:c9:83:72:12:62:87:bd:8a:ee:
         74:60:69:83:50:52:98:91:2d:54:b2:5c:34:0f:82:b2:ca:4c:
         8b:53:2c:3a:36:12:49:ea:5d:bb:10:a6:2b:5c:62:83:79:51:
         26:35:eb:95:1d:2a:bc:b3:3b:d5:e4:50:5a:94:8b:29:44:bb:
         8b:08:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:41 2026 by rpki-client