Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa
File:                     E86E188A795F11EFBF3B491CC4F9AE02.roa (raw, json)
Hash identifier:          XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=
Subject key identifier:   B9:ED:D3:58:B0:38:CB:35:25:C7:C7:41:83:3E:F6:A4:B3:2B:6C:93
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2ACB
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:27:47 +0000
ROA not before:           Wed 16 Jul 2025 15:52:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58601
IP address blocks:        103.9.112.0/22 maxlen: 22
                          103.9.112.0/24 maxlen: 24
                          103.9.113.0/24 maxlen: 24
                          103.9.114.0/24 maxlen: 24
                          103.9.115.0/24 maxlen: 24
                          2403:e100::/32 maxlen: 32
                          2403:e100:1000::/48 maxlen: 48
                          2403:e100:1000:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10955 (0x2acb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Jul 16 15:52:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45af3-b744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:6e:d3:cf:b7:cf:0c:1a:03:54:5e:4b:3f:
                    0a:0e:40:14:99:d3:26:9e:ef:57:91:78:0e:57:e7:
                    ff:71:37:3d:d3:11:88:f5:20:78:32:4d:bf:5c:c5:
                    6d:50:17:f9:bd:a3:4f:38:86:03:42:4b:27:f1:24:
                    6d:2c:f5:3f:56:4f:71:ec:f5:ca:82:be:5c:3b:94:
                    a7:4e:e5:e3:e5:3a:6b:80:a3:ce:da:28:02:bc:2e:
                    d9:5d:45:89:87:77:69:70:7e:2c:65:7d:3c:ef:9b:
                    48:57:0a:22:6a:89:f3:ca:b0:91:12:17:f0:6d:74:
                    c6:eb:08:75:10:36:43:d6:ae:85:96:8c:a3:66:5e:
                    70:32:9a:93:e9:db:42:1c:86:08:1e:dd:ac:85:0f:
                    b5:17:48:b9:0c:e8:41:69:f9:ff:bf:41:a6:3c:e2:
                    69:ed:44:7e:39:be:4a:26:08:81:11:54:1b:90:e4:
                    db:98:c5:8c:f8:4e:f4:0f:9c:a2:6a:df:f0:b4:f6:
                    a9:02:be:59:99:30:c7:39:7b:af:26:6a:c1:eb:24:
                    7c:10:1c:c0:f1:50:3a:f4:2b:17:14:c8:36:d5:c7:
                    58:1d:60:97:2c:71:39:61:10:01:9a:aa:48:e4:99:
                    ca:2c:42:f5:40:23:ab:99:2f:0e:58:92:f9:39:86:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:D3:58:B0:38:CB:35:25:C7:C7:41:83:3E:F6:A4:B3:2B:6C:93
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.112.0/22
                IPv6:
                  2403:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:fb:30:10:ef:60:01:74:a8:6f:a5:5b:72:32:57:df:98:
         3c:b0:9b:9f:fe:70:67:99:36:de:e5:fd:ea:f2:a8:8b:2f:dd:
         40:ad:83:33:6c:4a:1e:c0:ce:c7:0c:97:15:42:ff:84:37:c4:
         a4:14:6a:d0:90:74:81:fe:26:40:f3:e5:65:91:94:32:e1:9c:
         0a:5b:fc:67:b2:10:bc:a2:02:98:a6:a3:4b:0f:cb:10:bb:46:
         17:fe:89:cb:4d:bd:a8:36:d8:1b:cf:79:0a:eb:9b:5d:4f:11:
         05:1f:26:11:18:5d:f3:15:0a:d1:a0:af:a1:61:ae:70:3e:f5:
         73:24:f4:70:76:91:0e:56:09:75:92:3d:46:b8:d4:86:c1:72:
         e4:3a:0e:00:5b:de:c1:32:0b:a9:49:0e:ff:d6:d3:3a:be:69:
         34:d9:3e:a0:d3:33:92:c1:91:5c:02:e9:14:92:42:45:25:2b:
         d2:7f:ea:b4:9a:bf:19:f6:93:6f:13:44:87:15:9c:02:71:cc:
         3c:16:be:56:58:4e:50:22:40:e1:06:5e:ad:14:c0:7b:fb:9f:
         e9:2c:fc:ef:a3:12:cb:d2:a0:dd:44:35:b8:cd:ba:13:b4:a8:
         a9:a2:47:75:98:0f:be:b1:79:62:36:04:a3:e8:62:47:48:21:
         ad:9c:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:57 2026 by rpki-client