Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/6CDC639EA04411EC8A7E5E2CC4F9AE02.roa
File:                     6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (raw, json)
Hash identifier:          ZgTDAqJuWTqg5a+cwxQv+P4kHAUdq+ZFgMxWzkPMWYc=
Subject key identifier:   D0:83:F0:1F:D2:DB:90:0E:55:41:3A:26:BE:EB:07:70:FD:8B:3B:D5
Certificate issuer:       /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial:       0498
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/6CDC639EA04411EC8A7E5E2CC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:51:57 +0000
ROA not before:           Thu 03 Sep 2026 00:51:57 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     132104
IP address blocks:        103.161.236.0/24 maxlen: 24
                          103.161.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
        Validity
            Not Before: Sep  3 00:51:57 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a98c4ad-3865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:15:a4:ff:a4:48:2a:7f:a9:58:49:77:46:
                    69:62:4d:98:ed:03:13:5c:f4:6e:62:05:7c:41:a4:
                    23:40:d0:bf:5c:c1:9c:84:d1:49:12:e6:96:d8:c3:
                    50:9d:8e:16:35:dd:ec:f6:2e:a9:5e:ae:23:ab:0a:
                    91:63:b8:06:66:0c:e9:57:7b:89:4e:74:65:29:a3:
                    c3:1f:88:b3:8e:59:70:5e:ec:d4:0b:97:84:7a:5a:
                    08:16:6f:ad:b9:65:0e:b0:01:fa:65:66:ba:8a:93:
                    48:9a:fc:42:9a:d5:da:7f:34:2f:37:99:b9:28:c9:
                    8a:f6:b3:ce:6f:7b:cf:54:e3:74:5e:a3:ee:f4:e8:
                    ea:84:32:16:e8:4c:eb:46:cf:94:b8:3c:4b:e8:d3:
                    83:c6:54:4b:9b:02:f1:38:f6:f8:2e:80:b6:15:38:
                    e7:fa:0e:52:d4:c8:67:5d:a0:ea:3a:13:08:5d:c2:
                    ee:c4:ae:38:79:7e:dd:f1:28:ab:9b:d5:1a:6e:0b:
                    8c:fb:3e:89:bd:2c:2d:ed:e6:a0:bd:e6:5f:9d:ed:
                    17:41:da:d0:8e:e9:ca:09:d0:d2:90:48:4d:79:64:
                    ff:eb:78:a5:f0:e7:cd:c7:e3:58:ea:c1:b4:f7:d6:
                    c7:ca:96:75:43:54:8e:54:64:bc:e5:f1:54:f0:98:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:83:F0:1F:D2:DB:90:0E:55:41:3A:26:BE:EB:07:70:FD:8B:3B:D5
            X509v3 Authority Key Identifier:
                keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/6CDC639EA04411EC8A7E5E2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:b2:64:fe:34:11:ed:a9:ab:79:3d:a0:85:86:84:6a:67:
         a6:04:26:2a:85:c4:a2:54:7f:0c:bc:9c:d4:3c:45:27:0f:a8:
         32:0d:d8:53:77:24:14:fb:4d:13:d1:1a:89:ea:a6:4f:f5:44:
         9b:f3:97:4f:1a:c2:1e:bf:13:4a:24:e9:8d:b0:ac:8f:87:ba:
         f5:c8:fd:9f:fd:92:d9:b3:3a:c4:57:07:a0:7e:51:01:96:e7:
         b6:04:8a:67:c0:d6:ee:b1:c2:c1:f3:ad:c3:69:24:8e:b0:7e:
         fe:34:e8:cf:f0:87:b8:08:42:a2:70:fb:6a:c6:2d:8b:f5:fc:
         35:36:d1:af:9f:61:d0:51:cb:62:da:f6:0e:8f:a4:ba:40:21:
         19:ef:67:40:b2:d1:d9:ba:50:6e:62:4e:df:87:a6:db:2a:f0:
         18:0b:c6:bf:bf:94:a1:cb:2c:06:09:89:c3:a3:e5:b3:41:c2:
         15:24:d1:f0:a6:73:5a:8b:2d:85:46:df:9a:6e:f2:5c:d6:bb:
         98:44:16:b0:d1:b0:6c:2b:b1:83:4d:e0:8d:84:f8:f4:4c:2f:
         a7:bd:4b:53:2a:dc:6c:58:fb:4b:37:2b:94:b2:41:11:51:5f:
         dd:76:06:05:57:7d:0e:0a:ac:08:21:21:0c:88:b3:f8:2e:3d:
         c2:73:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:39:54 2026 by rpki-client