Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/689F5D92AD0D11F1B7FCF9B63C11F970.roa
File:                     689F5D92AD0D11F1B7FCF9B63C11F970.roa (raw, json)
Hash identifier:          LqFz+QpCHdb+FFI2JwU4umo63b3bsdSNGQqg9a9Guc8=
Subject key identifier:   42:15:63:4E:D8:F6:EE:60:6A:89:22:0D:63:51:87:C6:AE:F8:8C:FE
Certificate issuer:       /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
Certificate serial:       09
Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/689F5D92AD0D11F1B7FCF9B63C11F970.roa
Signing time:             Thu 10 Sep 2026 11:47:33 +0000
ROA not before:           Thu 10 Sep 2026 11:47:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.105.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl
                          rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
        Validity
            Not Before: Sep 10 11:47:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa298d5-3e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:26:91:1b:f2:0f:eb:12:77:2c:91:fa:27:
                    df:3c:6a:bd:d3:a4:1d:89:89:8f:f2:7f:46:bd:aa:
                    b4:43:76:78:0d:00:c3:37:22:56:da:e5:ec:52:a2:
                    a9:ed:9d:2c:25:18:e4:87:a1:11:46:35:46:8c:05:
                    04:a0:7c:cf:84:b7:6a:05:1a:47:eb:15:38:68:6c:
                    9c:5d:3d:03:a1:fd:20:e1:13:a4:05:1d:e0:b6:f6:
                    f5:55:be:8b:18:c2:f2:13:e3:6f:12:01:b4:ec:97:
                    c6:03:c8:01:18:07:18:ab:ad:4e:94:f2:1a:5b:9c:
                    6a:0a:2b:75:a5:5d:e6:e4:9d:77:cf:8d:d4:b2:94:
                    20:09:fe:7d:e3:ed:a6:bb:ea:09:6e:de:75:f6:e2:
                    6f:e5:7d:8c:03:ca:b4:e9:a0:fb:b5:09:67:db:a9:
                    ac:6a:ec:ea:34:c2:51:ab:2d:eb:a3:82:1e:e2:34:
                    4a:36:77:06:3c:da:c0:2c:0d:b5:a7:bd:64:7f:2b:
                    29:8c:9e:6d:c7:82:49:a8:44:ab:5b:78:d0:0f:ce:
                    06:89:b5:b8:22:f0:c4:10:94:bb:e1:08:0b:b6:f8:
                    4b:45:ec:82:91:2c:4d:ec:d9:43:37:7f:50:d0:89:
                    f1:7b:4a:59:a3:f0:47:85:2c:00:1c:7e:5b:88:79:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:63:4E:D8:F6:EE:60:6A:89:22:0D:63:51:87:C6:AE:F8:8C:FE
            X509v3 Authority Key Identifier:
                keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/689F5D92AD0D11F1B7FCF9B63C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:e8:1e:e7:b7:2e:c9:75:95:01:2c:21:54:34:32:de:2e:
         3b:e1:22:e4:77:05:0e:ad:e4:cc:e1:20:fe:02:69:6d:15:ec:
         74:20:66:fa:b7:47:aa:25:f0:d8:83:47:c9:96:a5:97:b3:13:
         f1:58:44:17:e9:c3:a8:47:65:7e:a0:9e:99:5b:4d:d7:fd:ac:
         a9:c8:28:ad:84:0c:98:2d:ee:0d:f5:77:b2:c8:dd:8e:e4:b5:
         6b:0b:bb:4d:ff:72:a1:d6:d4:58:3a:75:bc:18:20:8a:f7:14:
         01:63:c9:06:ed:db:3f:b0:1e:1d:44:a7:eb:ba:51:a1:18:17:
         05:f1:2c:ad:a0:fe:e0:81:6e:44:8f:7e:76:53:55:f8:97:46:
         37:db:75:b5:c9:2c:a2:70:0d:26:98:34:cf:d2:87:e4:b5:e0:
         02:d3:34:5a:e5:a7:6f:50:1d:2b:54:cd:6e:01:fd:7d:b3:f2:
         41:4a:26:f6:fd:f6:0d:c3:85:6b:7f:2f:02:94:b9:d1:98:4e:
         59:f3:1b:4f:10:ab:78:eb:78:cd:0a:a0:d9:57:8f:a7:66:d2:
         7c:77:85:18:ab:06:13:40:ba:75:75:c6:62:10:40:38:0a:ab:
         7b:00:fd:12:d0:de:56:25:8d:b6:84:aa:68:7b:f2:97:41:4a:
         f7:9a:f7:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:02 2026 by rpki-client