Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa
File:                     4EC550229F7911F0892F6680C4F9AE02.roa (raw, json)
Hash identifier:          zru3RyBdM8Q8MMvSol5QL5GVcYZsmIjPYZ1KmwlnL18=
Subject key identifier:   15:1A:B6:BA:85:BC:0C:68:F6:4F:D4:63:48:4F:E9:C0:75:94:B0:00
Certificate issuer:       /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial:       CE
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 07:57:29 +0000
ROA not before:           Thu 03 Sep 2026 07:57:29 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133605
IP address blocks:        103.252.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
        Validity
            Not Before: Sep  3 07:57:29 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a992869-c475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:3e:35:12:ec:51:66:65:6f:98:44:c9:30:
                    a1:3b:15:fc:17:1e:81:15:d9:b9:d5:85:31:c2:12:
                    87:8c:16:b6:93:65:f9:5c:0f:0a:dd:27:3a:9f:c7:
                    3f:e6:2a:b9:9c:5c:74:83:bc:18:e9:8b:e1:f2:b4:
                    b4:ae:3d:29:db:6f:78:e5:ef:45:99:c4:53:65:49:
                    3f:80:b8:37:8d:ea:6a:0f:12:68:bc:11:dd:67:52:
                    0c:6e:44:99:4e:e2:e2:c0:f2:1b:70:80:46:2a:36:
                    8e:ad:46:8a:b0:31:4a:11:90:f9:16:f9:5d:f1:67:
                    b8:3a:bb:56:87:b4:5f:f0:e1:38:1e:ae:3e:2d:e6:
                    aa:88:36:6a:65:d4:6c:7c:40:40:b6:4e:f3:7d:9b:
                    44:ed:1a:1f:7d:61:12:dd:43:95:59:1b:8e:a8:04:
                    5c:05:d9:f1:ce:f9:95:ab:9d:ae:33:f3:4f:26:c7:
                    33:82:98:83:93:60:07:76:04:6b:ca:77:f9:88:d7:
                    a0:b2:32:ec:b3:fb:92:0e:3b:09:1d:f8:a7:c5:33:
                    27:2c:35:b0:7d:fe:4b:7a:29:1f:13:02:77:41:d7:
                    0a:7d:74:59:dc:b5:14:6d:3c:5c:a5:fe:e0:57:0a:
                    91:00:3a:95:f5:14:e2:b7:22:8e:fd:67:a9:b7:fa:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:B6:BA:85:BC:0C:68:F6:4F:D4:63:48:4F:E9:C0:75:94:B0:00
            X509v3 Authority Key Identifier:
                keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:2d:e7:d3:c5:a6:93:28:57:ca:2a:39:01:60:4f:ea:aa:
         90:83:ee:e3:72:43:bb:59:ef:5e:fc:d8:8e:01:dc:6d:b9:5f:
         28:60:0e:1b:bd:61:85:a3:ee:ce:d6:c9:38:34:e5:aa:38:fa:
         7b:29:5b:13:0c:13:cd:0e:72:e7:16:2c:e7:d4:f9:bf:db:a9:
         92:24:fb:84:31:28:1e:96:98:58:a1:f6:24:2e:eb:c3:c4:bf:
         0e:6d:7e:cc:98:ea:f6:2c:56:42:f7:47:ae:6f:23:6a:78:06:
         4a:46:66:33:d1:cf:17:5b:9d:e7:e6:ed:f5:b8:ee:b5:b6:54:
         f9:c1:63:a5:46:04:e1:a6:13:01:0a:de:f8:21:10:ab:00:a5:
         24:e7:ed:f6:c3:6a:3c:cf:3b:e2:3d:11:70:6f:75:8b:5c:94:
         9f:87:d2:78:46:cc:cc:b4:84:5a:ba:da:4b:93:61:c4:b8:2b:
         f8:a0:99:ed:48:65:2b:b9:fc:57:22:00:ae:d7:4a:e5:5e:69:
         a8:c4:97:4c:f1:92:f3:cc:43:5a:37:66:11:43:85:ea:60:fd:
         98:d1:58:d9:cf:65:7e:20:5f:8e:d3:97:bc:71:9c:6a:ad:70:
         2d:b8:4d:c8:09:88:cc:18:97:fa:f7:b2:9e:28:f9:83:b6:4f:
         0d:3e:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:22 2026 by rpki-client