Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
File:                     96BC85E8145711EF8ED9C174C4F9AE02.roa (raw, json)
Hash identifier:          gIvl5lp5Pz64MmUOM/sg6cTJ78dmyAW6/2oARBlO1Os=
Subject key identifier:   3C:25:BD:E7:87:85:88:A0:6E:60:9E:B4:1A:5A:B8:50:4F:9A:CA:93
Certificate issuer:       /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial:       038E
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 01:49:47 +0000
ROA not before:           Wed 05 Aug 2026 01:49:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38203
IP address blocks:        103.190.204.0/23 maxlen: 24
                          2400:9220::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
                          rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
        Validity
            Not Before: Aug  5 01:49:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7296bb-9be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:b6:f9:7c:f5:06:eb:71:8a:68:d9:7f:b5:
                    0e:80:f9:c8:d0:07:89:c0:c7:c8:8f:78:42:18:e1:
                    c8:b5:96:75:2b:81:58:f5:0f:3c:87:fc:94:80:d6:
                    92:11:d1:dc:8b:af:11:48:63:52:7d:32:7b:77:a2:
                    7a:67:02:3b:1f:cc:ef:2b:51:cf:5f:ba:d8:09:b1:
                    25:c5:7d:dc:23:1e:8a:17:66:04:57:34:9d:94:b3:
                    84:c6:98:b7:59:c7:85:5c:6d:56:ed:f4:d8:ec:b5:
                    d1:60:5a:48:9e:50:1c:84:d7:51:0e:24:df:c2:45:
                    c8:47:1d:cb:90:f5:2d:a0:0b:6c:08:dc:78:4e:c4:
                    c8:5c:41:f5:a1:ca:41:c8:7e:1a:4a:d6:30:2c:93:
                    ff:b1:39:89:52:03:45:b1:17:59:68:b2:ee:f7:43:
                    61:d4:10:0f:cf:8f:07:35:82:f4:96:ca:e3:be:f5:
                    76:39:02:6a:9d:7d:91:07:90:cd:31:88:4f:38:e5:
                    db:4a:2d:fd:28:e1:7a:85:07:20:ab:fa:98:36:65:
                    e4:a1:0c:32:41:30:a3:ef:09:71:af:a5:59:34:4a:
                    92:74:cf:39:8a:5d:24:e1:c1:43:1b:84:c0:a7:70:
                    48:af:16:c1:50:e8:89:c7:cf:56:0e:9a:f5:89:e8:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:BD:E7:87:85:88:A0:6E:60:9E:B4:1A:5A:B8:50:4F:9A:CA:93
            X509v3 Authority Key Identifier:
                keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.204.0/23
                IPv6:
                  2400:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:64:b8:c5:f1:30:4c:34:d1:10:19:79:62:0b:a1:60:4e:0d:
         15:59:03:1f:7e:aa:fc:4a:56:1c:65:c4:eb:23:89:25:ae:9c:
         ce:8b:17:cc:19:ec:98:92:98:cb:ad:56:1b:08:39:d9:f4:ab:
         4d:9b:00:96:b0:8d:9b:c2:94:3f:06:5b:05:18:09:21:40:a4:
         a5:ee:7b:04:49:fa:5a:94:d8:35:e5:03:00:5e:9a:83:f9:00:
         26:a3:38:79:3a:45:5a:63:67:06:ac:ef:0a:40:63:c2:e1:e2:
         ba:29:97:42:62:22:c6:f7:2e:a0:01:78:8c:8c:ae:bb:02:26:
         13:51:22:d7:b8:44:83:a8:31:93:56:90:45:b8:08:c9:f4:a3:
         2c:3b:63:67:ae:c8:fb:55:f6:04:92:54:fe:d0:12:47:24:70:
         53:e1:f7:cd:92:01:b0:56:e8:87:a6:b1:c8:94:7f:dd:e3:35:
         db:11:81:c0:8f:1c:19:66:b9:61:f2:bd:b6:d0:e0:f4:a1:19:
         19:19:38:ae:49:68:3b:82:54:a4:44:92:e9:8f:87:ab:5a:04:
         ff:c4:c0:1f:34:0b:ca:46:64:6c:9b:7d:b8:bc:c5:45:a0:8e:
         40:9c:52:b0:54:58:ac:b4:b5:34:7b:d9:9b:92:ba:9a:95:ce:
         5a:2a:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:14 2026 by rpki-client