Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
File:                     E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (raw, json)
Hash identifier:          eeLCdmHI4DVoBIKt5fe2w5/hqqdnpeD4LytUQmmILxA=
Subject key identifier:   F8:EC:3A:A2:87:6F:0F:02:FD:E1:FA:B7:ED:0F:AA:DB:D0:25:1F:DC
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       02CB
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa
Signing time:             Sat 19 Sep 2026 19:40:31 +0000
ROA not before:           Sat 19 Sep 2026 19:40:31 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149870
IP address blocks:        103.189.232.0/24 maxlen: 24
                          103.189.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Sep 19 19:40:31 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aaee52f-2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:25:bb:97:85:7c:e7:88:5e:29:56:d7:49:
                    43:e9:66:68:41:90:3d:d1:1f:08:77:3f:e6:81:f2:
                    24:32:87:b5:7a:c2:51:8c:04:f5:68:92:ed:1d:be:
                    2d:88:ed:29:04:c3:35:d4:a5:54:23:2a:4d:f0:5a:
                    e5:50:a8:02:d2:40:31:67:12:21:62:df:f4:c8:80:
                    d5:42:d4:d4:72:32:33:58:34:0f:15:20:60:a6:d8:
                    66:fd:36:d5:a5:2b:2d:0d:e8:41:bb:6d:d3:6a:0e:
                    b9:a3:03:9b:71:45:5e:14:87:ec:46:f9:5f:cc:81:
                    5b:a4:36:e2:4e:ac:ae:8d:05:5b:9d:13:c8:2c:bc:
                    e5:99:c7:ec:dc:5e:6d:2e:a3:d9:94:9e:9c:13:e1:
                    0b:8f:4d:a6:20:f2:ae:1a:17:b8:71:33:df:db:d0:
                    4b:ab:55:d7:16:96:7d:75:17:24:7a:47:4e:c9:e2:
                    65:6d:87:f5:86:d5:a1:95:e2:db:e2:a8:2a:c1:61:
                    97:43:f2:21:75:58:15:d1:9c:e2:78:a9:f6:5d:3f:
                    ac:dd:06:5a:32:9c:75:c8:52:8c:7c:c5:4c:ff:92:
                    01:6a:37:92:f2:03:c5:3c:b7:a9:5a:fb:6f:ac:71:
                    79:96:53:92:48:dd:eb:6d:48:68:ce:39:41:ea:72:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:3A:A2:87:6F:0F:02:FD:E1:FA:B7:ED:0F:AA:DB:D0:25:1F:DC
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:f7:a9:0c:14:89:c7:97:94:70:80:ce:38:0e:c0:ea:c3:
         85:c8:8f:8d:ca:e6:2c:f0:28:1f:05:2d:01:35:f9:3c:74:54:
         88:7e:fd:a4:52:fe:33:9d:be:e1:41:41:9f:fd:0e:aa:69:96:
         a6:f4:7c:fc:29:37:88:2b:46:d3:bd:18:a7:51:b6:c2:a5:fe:
         d2:c2:fc:6b:7c:50:99:f7:c5:9c:5f:9f:d8:bc:67:f0:0c:57:
         40:8f:db:03:46:ac:dc:5f:7d:6a:75:99:00:57:49:aa:9e:9a:
         2c:ea:0b:e2:b6:38:f8:4e:ad:36:cf:d9:83:b7:59:37:35:0b:
         00:d7:b8:83:db:ee:6c:43:33:50:57:76:55:c8:21:53:e7:b5:
         a6:5a:ca:ac:d6:29:c3:5d:04:9d:cd:02:98:97:34:ff:9d:b5:
         37:30:9b:87:b1:00:4c:da:83:7e:fc:b6:f6:55:4a:10:16:88:
         1e:d5:69:9a:49:0d:73:d5:a3:54:9f:5e:9f:6b:22:d8:43:56:
         03:a6:99:d7:6a:54:9d:a1:74:68:0f:0a:f2:b8:55:d5:58:6d:
         35:84:77:eb:c6:3d:56:f0:c3:03:04:25:41:f2:ac:0a:36:53:
         ce:e2:69:ee:d8:66:57:64:24:8a:e1:88:d7:7e:2b:17:fc:ab:
         76:cd:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:14 2026 by rpki-client