Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
File:                     1042D952157F11F0BA309342C4F9AE02.roa (raw, json)
Hash identifier:          V3mSD2PmxvztBCh6XpV5mCgqBcH3iqbAbCPx3PCcyPo=
Subject key identifier:   D5:DD:37:5E:15:BB:0E:91:9E:5C:D8:09:AC:99:00:3C:0C:2C:45:07
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       0250
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 02:53:32 +0000
ROA not before:           Wed 09 Sep 2026 02:53:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134222
IP address blocks:        103.255.66.0/24 maxlen: 24
                          103.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Sep  9 02:53:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0ca2c-f40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:dd:40:34:36:ac:a3:c7:92:73:7f:57:23:
                    e3:cf:2e:fd:3b:8f:94:bc:28:bd:19:31:b1:fb:9e:
                    e1:43:bb:49:5f:7f:9b:10:da:20:eb:9d:17:0c:5a:
                    ab:1d:bf:80:90:bb:71:2e:e2:5f:22:d5:40:63:fd:
                    fa:3c:21:a5:f4:dd:15:d6:97:0a:34:18:13:36:05:
                    e8:cf:7c:d7:3c:f0:ae:30:89:72:9a:95:7f:d4:3f:
                    19:d2:a5:49:78:bc:b8:85:bf:13:c9:f5:2c:3a:ea:
                    81:7f:10:fa:ef:3b:98:34:87:30:fe:c5:d7:fb:4f:
                    21:6f:32:6d:1a:15:35:eb:6f:77:3d:3a:e9:0f:de:
                    91:0d:02:07:ce:aa:f1:e8:88:de:37:4f:77:9e:5e:
                    dd:62:40:1f:d8:2d:22:81:df:fc:0b:bf:69:7b:cc:
                    c4:f5:96:e3:df:e0:af:d2:99:e3:d8:19:89:5c:74:
                    59:d9:e6:47:3d:83:f1:43:be:67:0f:61:a1:30:ae:
                    51:e4:d6:6e:f6:da:59:8a:6f:3f:00:3f:66:3b:e0:
                    da:eb:d6:07:02:10:7c:e8:b1:0b:31:3a:81:4b:39:
                    73:ae:7a:fe:6c:8f:ca:eb:a8:0b:11:01:82:ce:26:
                    5e:82:98:e8:6a:62:8c:fe:72:a3:7d:4a:f0:e0:5f:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DD:37:5E:15:BB:0E:91:9E:5C:D8:09:AC:99:00:3C:0C:2C:45:07
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:30:90:fd:6a:0b:06:50:2b:ba:e6:d3:af:fe:54:51:5d:de:
         5c:68:33:c6:22:8d:40:9d:1c:56:9e:20:ac:10:63:ad:bf:78:
         7f:8c:3d:ba:fd:2d:fe:a3:8d:4e:be:da:27:36:88:05:a7:07:
         31:2e:7d:2d:f5:ab:06:51:c7:99:ae:97:03:9f:f4:e4:75:04:
         04:52:74:f8:9c:65:d3:bc:7d:c9:24:70:f0:1d:0b:ec:f7:a8:
         5f:b3:15:2a:b1:78:c7:43:3d:8d:56:14:04:08:68:ff:c1:03:
         3c:f3:0d:f8:48:86:ca:36:fc:cb:e3:c1:49:f4:d0:75:00:fa:
         cc:0a:a5:83:66:e8:d6:77:46:b8:ff:4e:e4:c2:61:4a:10:2d:
         ca:ac:38:f6:92:70:69:09:a7:64:e9:1e:bc:98:fe:7e:21:c0:
         98:45:0e:7e:ad:a5:cd:1b:ea:21:a5:1d:ee:79:74:66:9c:fb:
         58:e8:77:c8:03:79:32:17:4f:f8:81:bb:5f:01:54:7a:90:b1:
         d5:df:b0:e6:f7:cb:69:f2:c7:64:62:20:d9:4a:80:81:05:ce:
         8a:6d:a2:06:3c:c3:7e:64:ec:6c:eb:39:85:e2:b9:f5:92:fb:
         58:32:3d:4b:e3:53:67:f5:01:21:c5:e4:71:20:58:cf:a3:a7:
         85:7b:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:02 2026 by rpki-client