Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/2D6288A4AE0611F1BEA6785E4B11F970.roa
File:                     2D6288A4AE0611F1BEA6785E4B11F970.roa (raw, json)
Hash identifier:          XFW6SnFPAV4WXehvZc70rBV7iQTFvf7ToBkJjvUsDGg=
Subject key identifier:   72:EC:B1:3D:60:0A:92:A1:AA:7B:A0:89:F3:29:24:EE:7B:15:2A:0B
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       0544
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/2D6288A4AE0611F1BEA6785E4B11F970.roa
Signing time:             Fri 11 Sep 2026 17:28:18 +0000
ROA not before:           Fri 11 Sep 2026 17:28:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     218692
IP address blocks:        103.80.132.0/22 maxlen: 24
                          182.161.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Sep 11 17:28:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa43a32-d38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:37:21:be:9c:32:c0:5b:cc:6c:5c:84:10:
                    f3:84:15:c1:64:fc:60:58:df:66:23:db:ca:c6:23:
                    68:3b:40:f3:b3:88:d2:bc:3c:f0:4d:3d:21:4f:ce:
                    3f:22:dd:70:7e:07:84:2b:2f:1f:13:39:36:49:a3:
                    9d:fc:08:ab:02:65:be:18:5e:7a:88:c6:6a:92:36:
                    d2:c3:d1:9b:28:91:7d:d2:46:61:a4:5b:40:d4:5e:
                    a8:42:79:76:19:e0:ad:8a:48:ab:9f:31:07:fb:c1:
                    b6:ea:fe:3e:ef:11:47:ea:d4:f2:64:0d:01:78:cd:
                    7e:a1:6d:34:83:bd:86:02:12:9f:c5:ee:f5:a9:84:
                    92:08:0f:0a:79:38:ae:c1:de:10:0d:ec:4f:48:87:
                    4b:4f:dd:2a:da:11:d3:6f:04:df:a0:ff:63:1f:fd:
                    9f:c1:26:c9:1f:22:0f:33:a3:06:f0:94:13:3c:59:
                    ae:e5:96:1a:69:aa:b3:c9:4b:c2:a4:f5:2e:f9:2b:
                    db:0d:d6:8a:ec:8a:71:53:b2:99:f2:05:dc:e5:8e:
                    52:bd:31:a9:87:f6:a8:59:26:84:31:ae:57:2a:d8:
                    31:ea:0b:31:f5:b9:33:36:b2:8f:cc:dc:7b:58:3f:
                    69:27:12:ff:ca:c6:d9:24:d7:d2:d7:80:70:e5:73:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:B1:3D:60:0A:92:A1:AA:7B:A0:89:F3:29:24:EE:7B:15:2A:0B
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/2D6288A4AE0611F1BEA6785E4B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22
                  182.161.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:69:b8:09:ee:f0:a9:b4:3f:b9:99:e5:d9:f4:8a:3f:d1:af:
         12:91:7b:f4:61:90:fa:a8:d5:2e:c2:ce:3a:7d:3b:6d:e3:31:
         42:92:df:c3:9d:39:a2:a8:81:f5:fa:61:f4:be:56:00:62:6f:
         61:14:5d:a5:45:57:f3:ef:f8:cb:73:2b:52:04:e0:66:c1:e7:
         1f:31:90:b0:32:23:f3:63:65:0a:37:a5:f9:e4:46:dc:35:fd:
         18:6c:d9:c8:dc:5c:3d:e6:d7:f4:55:0a:8c:ff:ba:9a:04:ae:
         a2:79:9c:22:82:a8:26:22:38:83:0b:ec:11:75:f0:65:2f:a5:
         dd:07:0b:cd:e1:bf:5e:d7:de:c6:d6:3d:47:ee:77:f8:69:75:
         8a:c9:18:80:39:95:f6:ec:e1:6d:b4:32:21:12:cd:28:06:74:
         3f:05:7e:31:21:0f:1a:05:9b:bc:a9:bf:b6:50:47:1e:bb:42:
         60:14:34:ea:67:f3:59:2a:d2:c8:53:5d:e1:d1:4c:bb:95:a3:
         4d:c7:31:9f:01:51:f4:40:bd:b1:06:48:d3:63:7e:49:ae:a4:
         35:7e:40:23:9a:43:e8:fa:1a:8f:dd:2b:8a:82:99:0e:ee:9b:
         30:59:98:cc:60:68:e3:7a:10:32:2a:e9:2c:53:6e:01:29:26:
         95:c3:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:18 2026 by rpki-client