Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E6EAAE16B2AA11F19707923F4511F970.roa
File:                     E6EAAE16B2AA11F19707923F4511F970.roa (raw, json)
Hash identifier:          r3/bwxU7byB0w512/a7Tfom1ex3aKIMHYstlvnQ4z3s=
Subject key identifier:   8E:3C:57:5E:AE:C4:D9:88:1A:F2:24:BA:C0:8E:37:BB:FF:DB:DE:F7
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       05E8
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E6EAAE16B2AA11F19707923F4511F970.roa
Signing time:             Thu 17 Sep 2026 15:17:31 +0000
ROA not before:           Thu 17 Sep 2026 15:17:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140594
IP address blocks:        103.134.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Sep 17 15:17:31 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6aac048b-1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:64:85:52:4e:12:54:c1:b4:de:1b:a6:1d:
                    a0:1c:b3:31:77:f6:77:49:d8:8e:ec:f2:b1:e5:8b:
                    71:f2:83:5f:b6:d8:27:ca:c9:58:32:8e:ff:84:c5:
                    3a:02:8d:09:c9:54:11:25:3a:d3:62:09:d9:03:05:
                    3b:fa:0e:81:f0:7c:0d:13:6b:7b:d8:7c:81:1d:f8:
                    45:4d:54:d9:29:48:e3:64:ec:b4:ef:bb:13:8a:7f:
                    ba:22:1e:b8:51:08:82:a9:29:9e:9b:ed:30:ca:e5:
                    63:8a:2d:99:0a:96:df:d0:3b:b3:f4:09:13:02:55:
                    89:ec:a2:0f:64:38:97:4e:38:50:2b:b5:0b:f3:c9:
                    8b:9b:f0:9b:cb:4f:81:11:0e:c4:fc:c0:72:35:d1:
                    4c:33:6c:63:1f:53:9c:62:7f:16:64:71:36:37:82:
                    f2:66:12:82:6b:34:5a:c0:f9:4b:f2:36:3a:4d:13:
                    20:4f:cb:81:c6:c1:7f:d3:30:c5:24:85:95:b4:aa:
                    fd:f7:b0:f0:09:9c:6e:6f:ab:8d:11:83:88:2a:6d:
                    c9:e8:9c:13:bf:43:a6:41:84:9a:86:29:ec:a4:d7:
                    62:b4:c7:d7:8c:d0:58:6a:96:fb:b5:22:37:73:39:
                    3a:a0:86:80:e5:5f:82:93:88:c9:5f:ec:55:4b:a8:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3C:57:5E:AE:C4:D9:88:1A:F2:24:BA:C0:8E:37:BB:FF:DB:DE:F7
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/E6EAAE16B2AA11F19707923F4511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:89:0e:a6:f0:fe:65:ba:cc:19:f0:a8:e1:05:90:a0:7c:01:
         02:5f:36:28:0b:bb:88:01:c3:a5:5c:e4:49:a7:45:26:0c:f2:
         18:9e:02:19:73:22:ad:77:7c:d4:fe:73:1d:6d:6a:6e:06:5d:
         43:76:f2:77:1e:71:7b:20:a2:9f:18:89:09:07:b1:4c:fa:f0:
         e0:d5:b6:a1:69:85:a3:91:aa:58:ec:05:f5:7e:c2:dd:e6:42:
         25:2c:a4:d9:81:96:80:4f:ca:33:48:87:35:de:d1:ce:03:fd:
         3e:ee:1c:34:5b:d1:79:92:41:e8:d3:0f:d3:c7:31:2e:b3:76:
         17:8f:e7:27:d7:27:0f:e0:4e:37:93:6e:a6:c5:54:0f:45:d8:
         bf:79:25:1e:98:bb:60:16:8c:3f:44:2a:12:b7:ab:b3:02:fa:
         9f:aa:fb:5d:4c:bd:30:0c:43:95:2e:eb:06:ea:10:c6:d4:53:
         25:de:24:e0:df:cd:d9:e3:75:4d:3f:1a:b7:02:75:86:4e:4d:
         ca:84:0d:88:0a:9e:97:8e:91:99:ec:5d:97:39:fc:3a:58:20:
         45:0b:d6:61:9c:d6:fc:1f:d6:12:4b:87:fe:5d:17:2b:87:5f:
         a3:8a:a8:90:58:97:ca:19:d6:69:a9:63:77:33:f7:c8:13:e8:
         8d:d0:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:05 2026 by rpki-client