Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/EF714C70D89F11EFA1D2E672C4F9AE02.roa
File:                     EF714C70D89F11EFA1D2E672C4F9AE02.roa (raw, json)
Hash identifier:          pHsSd6YJ5WZdOeQG4RL3k9j76F3yGPTaGPWIABiWwCw=
Subject key identifier:   57:0E:77:0E:5F:38:77:E8:B3:2D:2D:6B:EC:27:95:F8:DD:50:3D:8B
Certificate issuer:       /CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
Certificate serial:       011A
Authority key identifier: 8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/EF714C70D89F11EFA1D2E672C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 07:33:12 +0000
ROA not before:           Fri 03 Jul 2026 07:33:12 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151485
IP address blocks:        103.230.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl
                          rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B35DF, serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB
        Validity
            Not Before: Jul  3 07:33:12 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4765b8-9c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:0d:57:6f:55:da:76:b2:c7:55:f7:91:33:
                    70:e2:d8:57:00:6b:a0:70:90:9f:7f:58:93:3c:3e:
                    a2:2b:d8:71:41:ef:15:e9:93:3b:8b:f1:b1:2d:47:
                    3a:a3:a9:24:56:36:09:3d:f3:da:d3:72:fd:35:30:
                    3c:04:0e:f0:fc:35:b5:b5:38:dc:84:1d:2d:fa:71:
                    bc:84:f5:2f:1a:fd:9c:db:93:70:75:e0:ca:20:b5:
                    aa:c7:ff:6f:d4:30:37:36:fb:5b:2e:97:a4:ab:57:
                    fc:c4:08:25:54:fb:d2:8b:36:51:a9:21:60:a1:bf:
                    0c:c8:e7:0e:40:3b:0d:53:59:f3:c6:70:9d:ce:19:
                    f0:27:c4:98:b5:f4:6d:20:a8:f9:db:3f:b3:d7:b3:
                    4b:70:02:c0:81:c1:95:57:d4:c3:83:75:01:77:d0:
                    9f:2a:c8:c8:11:e0:93:1d:c9:98:06:8b:c1:90:8e:
                    9f:de:77:41:9e:94:f4:63:72:e1:06:af:44:f1:c6:
                    77:f7:a6:e0:a8:a2:9f:49:13:c4:00:f4:7e:2f:44:
                    6b:aa:83:be:77:7f:5b:8b:ba:d7:ab:ab:a5:9f:83:
                    75:42:ae:25:74:c2:24:ea:b2:ac:29:81:3e:2f:6f:
                    e6:2a:ba:5f:7d:36:4f:0e:b7:45:2c:d1:54:fb:1f:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0E:77:0E:5F:38:77:E8:B3:2D:2D:6B:EC:27:95:F8:DD:50:3D:8B
            X509v3 Authority Key Identifier:
                keyid:8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/EF714C70D89F11EFA1D2E672C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:94:dd:d2:3b:50:4b:02:8c:91:71:e2:59:7c:45:52:2e:
         24:62:e3:5c:1d:39:cb:f4:80:d2:89:a6:d3:0e:bb:90:97:0e:
         f3:8d:94:b2:47:23:9a:3a:32:6c:a6:91:12:d3:4e:03:fb:c1:
         6b:71:1a:ba:9e:b2:b8:5f:a3:53:95:76:0e:5d:a7:7e:3c:4c:
         21:44:3a:49:fe:b9:84:87:7f:d5:af:f9:b2:6e:26:f9:5c:d6:
         2a:30:d1:71:5f:1d:00:d8:0b:ca:0e:8d:62:4a:95:f8:08:6b:
         df:68:cd:da:e0:ae:ce:5c:98:76:61:75:2e:1e:3c:19:09:e1:
         d6:9b:27:b5:69:8d:0c:47:0d:a0:88:4c:d8:24:ef:04:6c:5c:
         14:48:52:2b:f7:f0:63:9f:ae:75:90:f1:10:c6:c9:7a:6f:e0:
         5b:dc:54:84:0d:d3:43:d7:28:38:ed:cf:4d:7e:cb:a1:c5:55:
         6e:13:81:0e:f8:69:4c:53:d2:92:c7:e4:d6:27:36:c5:ad:c5:
         70:97:5a:8b:16:b2:68:a7:bc:78:ea:be:ee:b7:75:16:49:19:
         77:fe:41:c1:34:d4:00:f9:01:50:40:3b:d4:ae:42:3b:81:bc:
         84:fd:03:7a:e4:4b:6f:ff:37:81:1d:72:4d:07:35:a5:07:e1:
         bf:2c:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:45 2026 by rpki-client