Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa
File:                     710DB204831D11ECA37CC12EC4F9AE02.roa (raw, json)
Hash identifier:          i1xpt0w/5wIh0QGm4LAYJubmhGNdrdbLCR1j/+oGhBM=
Subject key identifier:   C3:31:88:1C:D4:87:37:FC:77:2F:2B:BF:39:09:4E:97:E2:4B:C4:05
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       0784
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa
Signing time:             Fri 18 Sep 2026 21:42:53 +0000
ROA not before:           Fri 18 Sep 2026 21:42:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132420
IP address blocks:        103.120.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Sep 18 21:42:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aadb05d-f292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:6b:7c:2d:2a:4d:28:e9:89:3f:38:0e:7e:
                    63:00:55:05:b7:b7:23:ff:de:c3:30:8c:92:50:7d:
                    54:30:1a:4a:70:64:51:b6:6b:4f:7c:86:49:a5:fb:
                    4f:ab:a3:48:dc:11:80:1f:07:b0:2a:90:27:f5:59:
                    fe:11:9f:ac:98:7a:da:1c:f7:d5:66:bc:15:64:39:
                    5d:2b:ef:49:fc:93:d9:9f:d1:28:99:66:09:8d:e2:
                    1a:ce:fd:e9:ed:1b:ed:0c:b7:32:3c:6b:33:a6:6f:
                    c8:8e:68:d1:cc:5a:90:e9:b0:a5:ad:17:f4:5c:f7:
                    2b:fc:58:48:66:5f:06:fe:30:09:6e:6c:e6:84:70:
                    29:38:8a:c0:61:b1:d2:36:90:57:bd:33:7e:22:39:
                    56:db:36:b9:6d:07:64:6f:dc:0d:ef:6a:30:85:db:
                    93:b2:74:60:bc:31:07:88:06:0b:df:1a:f2:23:c4:
                    28:ad:e5:63:80:90:a3:99:a9:9f:fb:3c:4a:a2:bd:
                    f8:da:9a:a1:04:72:f2:d0:9c:20:4a:a7:af:62:8c:
                    91:63:76:cc:f4:27:cd:85:18:0d:3d:54:81:58:f2:
                    d4:f7:64:3a:b7:ef:a1:7a:2d:b4:d9:bf:8e:b3:77:
                    39:0a:bf:08:12:5b:75:f3:c1:9d:a0:7d:65:26:b2:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:88:1C:D4:87:37:FC:77:2F:2B:BF:39:09:4E:97:E2:4B:C4:05
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:9e:ff:b5:42:7f:6d:f7:2f:39:fd:31:9c:4c:5e:ca:5e:
         98:03:92:a5:38:c3:c0:17:94:b9:fe:5d:83:73:0c:3b:4b:51:
         11:24:f0:b8:03:ba:1c:5f:d3:54:e8:c6:ff:0e:24:40:0b:ba:
         cf:62:58:72:13:16:a8:b6:38:03:83:fe:2a:98:e6:ec:9a:0f:
         e5:1d:7a:f4:f7:7a:94:80:be:61:1f:cc:bc:fe:36:ea:0c:5c:
         42:23:59:77:f3:a8:16:ac:6f:9c:96:7d:69:81:44:5d:45:eb:
         b7:8d:b7:45:11:62:7c:26:88:7e:35:d9:c7:0f:70:2a:03:e9:
         aa:aa:2d:6c:5f:06:51:41:54:f1:0c:c2:de:c8:5f:17:e1:e6:
         44:c3:f0:e8:bb:f6:4b:8d:db:5c:9c:d3:77:72:29:36:f0:fd:
         c0:2d:cd:b6:eb:ce:22:8d:fa:6a:79:17:67:66:9f:e9:45:a7:
         a8:b6:f0:f0:0a:34:c3:3e:09:b7:41:77:f9:19:e9:dd:da:ed:
         cb:2e:62:de:9b:b0:19:6c:70:54:e8:15:8c:47:dc:28:25:2c:
         02:cd:75:55:23:a3:01:08:bb:24:17:74:7a:1a:c7:e8:6d:97:
         ac:5f:1b:cf:56:be:a5:37:60:59:b2:25:65:1d:22:e0:45:30:
         d6:51:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:23:15 2026 by rpki-client