Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/DAAECE38C77711EDA89BE25DC4F9AE02.roa
File:                     DAAECE38C77711EDA89BE25DC4F9AE02.roa (raw, json)
Hash identifier:          xy551TqDvP4Sja79NJK7KFCpa7cxsJ8CReMTGNIRxDM=
Subject key identifier:   21:3B:E5:C9:45:4F:1C:4D:5D:13:A3:45:BD:53:6B:15:8D:FC:DA:5D
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       047D
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/DAAECE38C77711EDA89BE25DC4F9AE02.roa
Signing time:             Mon 21 Sep 2026 00:50:56 +0000
ROA not before:           Mon 21 Sep 2026 00:50:56 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150795
IP address blocks:        103.173.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Sep 21 00:50:56 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab07f70-0547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:ef:50:71:dd:24:47:46:18:ea:8b:02:f8:
                    99:3b:bd:28:6b:67:da:06:37:a2:32:9d:ee:d0:64:
                    4a:13:ad:f4:4f:6e:d2:aa:fa:f8:95:43:53:ad:89:
                    72:a2:17:f0:e9:6a:ce:97:ae:9a:03:ca:d7:2e:65:
                    63:73:7a:50:ca:59:c1:b9:b0:ca:28:67:67:85:a0:
                    0f:71:8d:9f:21:14:e4:23:ed:3f:a8:07:d7:56:6d:
                    f9:d1:a5:1f:fe:ee:ae:b6:af:39:38:30:d0:d2:57:
                    af:53:32:df:9e:01:a9:5d:1e:2a:9d:a0:55:80:6f:
                    16:92:de:91:98:47:c7:1c:d7:15:1d:15:d1:32:0c:
                    31:02:f1:24:b6:a5:5b:a0:73:13:41:e5:6d:98:9c:
                    ba:7b:bd:ad:5c:ec:e8:e6:d3:e8:60:e8:f5:38:07:
                    43:c1:6b:3c:b7:43:38:ac:3b:b9:bf:89:d2:5c:01:
                    35:df:c8:51:e4:4b:86:45:00:bd:cf:b3:8d:44:41:
                    c6:0c:ea:ea:60:c8:67:b1:81:f6:fe:75:e3:a4:9f:
                    98:79:6c:b7:fb:00:ad:b6:e8:86:40:c3:9f:42:04:
                    ff:02:06:7c:20:3b:51:2c:66:68:a2:31:79:62:1d:
                    db:14:4a:9c:76:e9:30:55:8a:09:b1:ae:3d:0c:4f:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:E5:C9:45:4F:1C:4D:5D:13:A3:45:BD:53:6B:15:8D:FC:DA:5D
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/DAAECE38C77711EDA89BE25DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:f6:d9:d0:f5:a6:fe:ba:6b:77:ea:e2:8e:b6:82:a4:9d:3c:
         ad:c1:d0:4c:45:29:65:d1:a8:db:1e:90:61:b2:e5:a4:a5:e7:
         70:0b:77:a2:7d:fb:ab:82:40:88:eb:c0:a0:08:3c:cf:ee:7e:
         7a:7e:a3:8e:c6:a4:53:ce:8f:a1:fd:d3:f1:08:0f:0a:89:68:
         db:bc:40:90:87:31:03:b5:6b:c0:a3:0b:1c:ce:15:7a:32:a5:
         46:b8:79:a3:6b:0f:69:fa:fc:d7:72:91:b2:13:09:e6:de:39:
         92:48:71:71:79:b3:6f:fd:8c:e1:5f:3a:f6:08:d2:d2:d1:e4:
         5b:06:67:34:5a:0b:ae:44:90:5f:50:77:ae:43:e7:70:4b:e2:
         0d:b7:6b:44:19:73:1d:6a:04:99:a4:83:c3:93:af:d0:bb:00:
         37:c7:4a:29:6c:d5:26:d5:4a:01:f8:97:37:c4:48:61:17:c7:
         8a:54:43:ea:f3:54:a5:4a:85:67:9f:eb:95:25:d3:a5:04:29:
         72:f0:c6:6f:4d:b2:bc:57:f3:60:05:e3:ce:43:b2:31:57:cc:
         29:3d:d6:15:0e:e7:15:97:65:3d:dd:bd:dd:35:b8:a1:8c:7e:
         be:ea:75:e3:d6:32:da:5f:84:d1:a7:ab:30:0b:73:63:e1:6d:
         26:0b:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:38:54 2026 by rpki-client