Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/1A9CEACCC40711F18E5B05076C11F970.roa
File:                     1A9CEACCC40711F18E5B05076C11F970.roa (raw, json)
Hash identifier:          4uDaUTTEXhl1GY6lMwXxljTb39LJMw1DCc7bjNf5YGA=
Subject key identifier:   80:CD:D3:B7:33:7B:37:AC:0A:90:CA:1D:8B:53:59:9F:64:71:AD:A2
Certificate issuer:       /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial:       0714
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/1A9CEACCC40711F18E5B05076C11F970.roa
Signing time:             Fri 09 Oct 2026 18:45:08 +0000
ROA not before:           Fri 09 Oct 2026 18:45:08 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     43969
IP address blocks:        103.73.66.0/24 maxlen: 24
                          103.73.67.0/24 maxlen: 24
                          216.250.96.0/24 maxlen: 24
                          216.250.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
        Validity
            Not Before: Oct  9 18:45:08 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac93634-40ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:63:ef:ee:bc:c5:d2:89:ef:8e:2c:2c:f3:
                    cb:db:7d:07:54:ad:ee:27:17:9b:af:ba:80:28:6e:
                    b2:ee:8a:0f:f4:28:79:97:33:6b:c7:61:2c:dc:ab:
                    62:6a:b8:81:9b:a3:46:6a:94:c5:d1:57:d5:f4:24:
                    25:e5:ee:90:d7:d1:4c:9a:d5:dc:cf:b3:32:ad:93:
                    ac:e8:f2:e3:20:7d:7e:ec:dd:15:d7:98:06:c8:35:
                    1b:37:1b:9e:0c:41:39:fe:15:01:47:47:0d:8d:4d:
                    70:3d:f3:62:b8:fe:85:09:38:c5:ad:02:4b:5f:11:
                    5d:7a:b2:70:44:91:7a:25:c8:df:2f:21:42:58:88:
                    48:03:cb:e7:4e:7a:4c:3f:e3:de:3f:0f:aa:2c:ca:
                    c3:d5:42:0e:8a:1c:68:73:87:75:22:d6:e6:0c:09:
                    68:6b:8d:09:7d:74:a3:b7:60:db:9c:0d:e3:ae:ba:
                    7f:fc:eb:08:bf:21:b9:35:78:77:e0:41:7a:e7:1c:
                    60:48:3d:27:6c:d6:b4:a8:b5:15:75:b2:b8:91:b7:
                    df:4e:f5:c8:69:b6:16:3c:26:e1:f4:2c:a3:5d:31:
                    57:6f:78:b5:24:09:04:8d:a4:7e:22:bd:79:e4:62:
                    69:dc:e1:c0:21:58:00:31:a2:fa:76:35:08:0f:ec:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:D3:B7:33:7B:37:AC:0A:90:CA:1D:8B:53:59:9F:64:71:AD:A2
            X509v3 Authority Key Identifier:
                keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/1A9CEACCC40711F18E5B05076C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.66.0/23
                  216.250.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:22:b9:54:69:3e:00:f0:99:26:b6:88:9d:b5:f6:c9:87:79:
         22:5f:be:78:79:9c:0a:19:8c:43:1c:51:34:4a:94:18:18:72:
         2d:9b:dd:fd:fa:9a:08:ce:09:1c:89:71:43:fe:1a:f2:da:6d:
         a7:dd:83:37:cc:d3:24:c7:b7:93:fe:52:19:12:d7:35:c1:d9:
         50:ee:37:a8:2c:a5:4e:63:97:ea:70:8e:83:52:1b:74:05:5f:
         8f:73:20:d5:fb:20:36:79:00:85:16:8c:d3:b8:78:f3:36:54:
         b2:05:2e:61:e8:dd:2f:04:d6:96:0f:e6:5b:b3:c8:ac:8f:66:
         e1:fb:a6:25:c0:1f:b0:35:71:74:9e:3a:0f:b4:83:da:74:8a:
         af:8c:d0:42:45:73:1a:94:62:25:64:85:cf:6b:c7:ed:f1:8b:
         72:c6:ef:85:c3:1c:7e:47:48:8f:29:a2:d0:06:67:fd:3f:35:
         61:33:65:9d:6d:72:4f:ee:59:d6:d8:67:64:aa:07:84:83:36:
         cc:c8:21:38:69:52:cf:01:a9:6c:b2:2f:fa:a9:d4:28:36:00:
         ff:88:94:a2:be:e4:a2:bf:9f:46:0a:9a:3a:e4:2e:86:cd:33:
         34:5a:c7:35:9d:06:ec:3e:42:e9:ee:a5:5c:c1:31:a7:e9:dd:
         14:a0:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:37 2026 by rpki-client