Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa
File:                     52B98FDA46AF11ECB113AA4BC4F9AE02.roa (raw, json)
Hash identifier:          KD9hfqOsHpMQcz4Ocv/ZU2VsOJ4y9reBcPWQuq7fk2E=
Subject key identifier:   87:B6:DD:BE:DA:FE:9C:F1:16:75:4E:78:72:A3:FC:CD:A9:F1:95:8F
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       05A5
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 23:45:54 +0000
ROA not before:           Thu 10 Sep 2026 23:45:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        103.73.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Sep 10 23:45:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa34131-562a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:49:8f:8a:93:df:e1:e4:2c:f9:92:30:88:
                    3d:88:bd:0c:06:a8:0e:46:bb:69:61:c7:3d:38:0e:
                    73:ac:a2:fc:01:df:9a:ef:68:57:39:e4:1d:e0:00:
                    d6:88:2a:ca:fb:9e:ee:f9:6b:66:bc:67:58:2a:28:
                    46:08:f0:7a:55:4f:15:88:88:b8:4a:57:ac:61:4c:
                    8f:77:54:69:fb:48:25:fd:b8:d0:02:96:30:6f:46:
                    fc:89:a7:47:72:59:5a:d0:3d:c9:a7:21:8f:65:2b:
                    10:9e:9b:26:34:56:ed:e0:9c:14:bc:67:9b:2b:b0:
                    18:5d:7f:26:bd:4a:9b:d7:10:86:12:23:59:c4:aa:
                    b6:f1:6f:9f:e6:6b:33:6a:4a:40:af:cb:cb:6c:dc:
                    ad:e2:ee:5c:63:16:e4:25:50:05:ec:66:ff:bf:30:
                    ed:75:ef:d4:9a:1d:b2:48:02:ed:74:22:8f:dd:ab:
                    36:dd:88:f6:b9:1d:1e:f2:f2:0e:4b:3d:16:f7:85:
                    a3:95:ac:1f:aa:c7:4d:19:e2:e9:fa:0c:58:f6:ea:
                    a8:a1:8f:3f:d9:bd:3e:dd:be:2d:30:78:29:35:2f:
                    63:8d:69:f2:8d:97:e0:7d:fe:59:cc:0f:a5:2f:29:
                    39:c5:43:d4:e3:02:28:db:b9:65:21:e1:b6:bf:9f:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B6:DD:BE:DA:FE:9C:F1:16:75:4E:78:72:A3:FC:CD:A9:F1:95:8F
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:c4:87:23:05:de:77:b1:c9:b4:40:95:32:b0:d5:41:c9:69:
         eb:aa:86:19:8d:b5:df:99:c8:15:c4:33:80:d0:f7:27:9a:e9:
         00:25:29:47:7f:03:99:1a:ee:23:4d:b2:5d:e6:db:37:1d:7e:
         22:36:e9:18:ec:e8:ca:7c:27:6b:db:25:49:c6:84:c2:36:c9:
         34:6b:d6:ff:5b:f5:2a:9d:14:43:d1:e8:96:1a:ad:b0:be:d0:
         ba:89:01:fb:c5:d6:a5:13:d6:2d:0f:dd:8d:0a:70:12:40:91:
         57:95:ca:04:ab:2b:fd:8e:d5:d1:0c:7d:14:23:2f:2b:22:88:
         fb:c6:df:75:0e:63:26:b7:8c:20:85:b5:0e:fc:06:6c:6d:c4:
         2e:40:d8:a4:ef:ca:d8:30:02:c4:6a:bb:cb:32:d8:8c:f9:be:
         ff:4d:16:aa:c2:7b:41:2c:61:c5:61:75:68:ad:cc:c5:7f:9f:
         cc:9d:ba:95:b6:34:86:d0:99:40:d4:0a:f5:0b:46:4c:fa:3c:
         46:68:0d:b4:4a:34:1b:d9:e7:b2:f3:11:28:ab:be:e3:a0:d1:
         0b:a5:1f:85:28:84:06:6e:42:35:7e:1d:59:f0:1b:9e:6f:35:
         c1:d2:3b:57:58:ab:84:a3:45:a2:f4:de:f6:b3:ed:c7:d2:a0:
         99:cd:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:56 2026 by rpki-client