Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/5921FE0053AE11F1AB017971B5833773.roa
File:                     5921FE0053AE11F1AB017971B5833773.roa (raw, json)
Hash identifier:          KF23fDRCgWgmJDJBYBerLrer78FCqqmrwB47c4FCNrA=
Subject key identifier:   CB:1A:13:45:1F:D9:F2:00:AC:AB:81:1C:E9:35:FF:EB:7F:1E:54:20
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       04C0
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/5921FE0053AE11F1AB017971B5833773.roa
Signing time:             Fri 11 Sep 2026 00:50:00 +0000
ROA not before:           Fri 11 Sep 2026 00:50:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150732
IP address blocks:        103.170.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
                          rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266, serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Sep 11 00:50:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa35038-977e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:b4:c3:e6:7f:19:46:9c:c5:2d:e3:cc:43:
                    f1:3e:d8:eb:b4:10:46:2b:63:a1:38:88:4c:58:80:
                    22:36:69:9f:3e:1c:50:7a:b8:4e:3a:82:83:cc:ba:
                    37:94:3a:04:8b:b0:fc:ef:80:82:95:14:9b:7f:d0:
                    aa:36:3d:fd:58:1a:a0:e1:8f:61:4b:a7:f9:8a:c8:
                    2c:0c:19:41:f2:4a:4e:79:07:97:a9:88:a9:b7:99:
                    5c:d7:b6:8e:15:4e:a8:17:ba:24:bb:a7:ec:21:69:
                    f8:11:36:15:b4:0a:92:20:14:9c:39:f9:31:b9:52:
                    76:cb:ac:d2:ca:b4:bd:fc:1f:51:55:5b:f7:d8:c2:
                    ca:28:b0:21:84:0c:57:61:2a:73:bc:6e:64:f2:9b:
                    e8:43:3c:e6:b5:34:69:8b:0f:60:1b:41:ef:79:b3:
                    81:bb:25:9c:46:1f:c2:a9:88:cb:8e:6a:5b:39:9a:
                    7f:c4:d7:40:48:ec:f6:ec:cc:b1:30:13:8c:4d:b1:
                    2d:82:ef:e3:b8:59:d4:4b:a7:c3:35:d1:85:67:63:
                    86:df:51:3d:66:0b:bf:51:3b:70:3b:76:13:b7:3d:
                    cf:90:ec:de:1d:d6:98:98:c2:5b:09:e1:cf:e3:d7:
                    bd:c4:de:63:c6:45:6c:d8:f2:fa:b1:5d:8d:92:6b:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:13:45:1F:D9:F2:00:AC:AB:81:1C:E9:35:FF:EB:7F:1E:54:20
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/5921FE0053AE11F1AB017971B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:be:15:0c:00:e2:5e:78:5f:44:ee:78:af:c6:b6:e6:52:ab:
         7b:fa:e6:fd:c3:86:73:49:ca:4c:ba:3f:70:84:a6:ec:cd:f4:
         e2:73:0a:01:6a:9b:b8:75:fa:00:09:ce:f4:b6:b4:65:48:c3:
         91:4f:85:06:75:94:8a:3a:eb:59:63:50:30:33:f6:87:2e:ff:
         5e:58:4b:b7:0f:17:05:c8:1e:6d:e4:73:06:cf:96:16:1a:59:
         a2:84:aa:89:0a:11:03:2a:12:ca:21:25:73:40:84:ef:10:42:
         35:f6:7c:58:c4:32:2f:b3:d2:73:cb:c0:e6:fe:8a:3d:46:41:
         32:b1:ff:66:cb:f5:9c:9c:9c:d3:db:45:57:c4:1b:01:b5:2e:
         bd:03:c0:49:19:c4:05:ba:2f:ea:67:57:77:11:0d:3c:cf:c8:
         33:14:db:00:91:4c:41:f6:2f:ed:0e:e8:e1:bd:fb:4e:6a:c4:
         cd:b5:63:1d:11:50:a2:fd:a1:f5:b0:5d:0d:48:bf:6e:d5:2b:
         4a:06:c9:27:b8:73:b6:f3:9b:4d:0f:e4:dc:c6:13:b3:ac:a6:
         14:6a:60:8c:dd:9f:d4:76:83:b3:fb:ec:3f:4a:c8:3f:8c:5f:
         96:fc:c8:29:82:2e:65:9c:ac:fe:be:3d:6a:57:ed:01:30:1a:
         d7:00:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:41 2026 by rpki-client