Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
File:                     BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (raw, json)
Hash identifier:          h+trzDuVn/VxJ7NUrcdT4bIR95bu+vkwOYNceyRvSr4=
Subject key identifier:   DD:5D:54:03:CA:AD:34:74:C3:3F:EE:44:38:40:57:D5:8A:4D:BF:EC
Certificate issuer:       /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial:       0253
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
Signing time:             Tue 01 Sep 2026 02:51:55 +0000
ROA not before:           Tue 01 Sep 2026 02:51:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140958
IP address blocks:        103.153.200.0/23 maxlen: 23
                          2406:4ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
                          rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
        Validity
            Not Before: Sep  1 02:51:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a963dca-1353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:54:cd:45:7c:79:92:79:50:d7:c7:0a:4b:
                    7c:3f:63:0e:ea:10:8b:21:b9:6f:5d:88:2c:d2:8c:
                    bc:8c:c0:0d:64:1f:34:e1:3a:66:56:ce:91:06:01:
                    ff:21:de:d9:04:e8:aa:53:ae:b3:68:d2:39:d4:de:
                    6e:3c:88:7f:6b:98:8b:8b:10:3d:d2:b9:c8:8c:52:
                    d9:62:2e:0a:1a:7e:7e:5f:70:ab:8a:72:57:a8:61:
                    6d:93:94:53:f0:3d:f7:0d:c1:6a:bb:76:39:2f:c9:
                    64:c9:3b:a3:81:d8:02:96:6a:e3:ba:84:0e:88:6d:
                    6d:44:3e:df:1f:9d:d7:9b:0e:c1:19:40:db:64:ce:
                    a4:1f:34:64:4e:1b:38:34:2e:38:32:e4:40:23:f6:
                    b8:25:04:a6:01:14:1c:93:96:83:f9:6e:67:ca:db:
                    1a:67:f9:cc:a2:79:57:af:63:44:2b:0d:d6:23:d6:
                    a5:57:a6:90:1d:08:8b:9e:a2:78:4b:93:a3:42:af:
                    09:8e:53:6e:0d:f5:a9:ad:90:0d:99:6a:e3:5f:8d:
                    82:72:82:a8:0a:23:45:ee:88:04:1c:cc:4a:3d:44:
                    43:01:0b:bf:3b:cb:c2:81:99:50:d0:3e:2d:0c:d1:
                    49:d3:e5:57:d6:a8:90:44:c9:f9:99:dd:bc:cf:2b:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:54:03:CA:AD:34:74:C3:3F:EE:44:38:40:57:D5:8A:4D:BF:EC
            X509v3 Authority Key Identifier:
                keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.200.0/23
                IPv6:
                  2406:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:cf:e4:fa:c9:0e:21:4f:66:91:8e:ca:d4:78:cc:55:1b:
         be:8b:67:52:7f:36:4f:eb:26:42:d4:7e:c7:cf:b3:96:cb:e0:
         16:55:ea:6c:05:27:47:ca:43:1b:6f:4b:db:63:02:d4:a0:c8:
         85:4a:af:54:a5:e9:70:bc:28:e0:ef:0b:64:16:40:4a:8d:1e:
         0f:a0:cd:bc:a9:3a:3a:c1:f9:f0:d9:3a:a0:41:2e:53:79:a3:
         6f:00:7b:8e:2f:7f:c3:7a:be:14:84:5b:3d:d6:98:e7:14:83:
         4b:65:b8:03:3d:a2:c6:8a:33:9e:a1:63:bd:30:e1:61:00:40:
         44:8d:5e:07:d9:f6:3d:47:70:94:7d:07:bf:0e:db:15:2c:88:
         55:cc:60:93:ad:83:6e:46:6a:8b:09:93:de:85:6c:86:70:ac:
         70:25:32:f2:44:fd:d5:c3:8c:97:1c:df:74:40:5d:1c:aa:14:
         18:05:d3:07:71:ea:02:eb:cb:e9:37:ae:47:e8:b1:0d:79:5f:
         13:93:c6:92:fc:b7:c7:c6:df:fa:83:a3:10:df:0a:68:58:1e:
         3b:7c:38:0a:71:e9:35:52:13:87:f6:ca:04:27:39:b2:10:f7:
         b5:5f:71:11:be:8d:b6:b7:c1:9d:92:a8:65:c4:ff:8b:67:c1:
         72:aa:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:44:10 2026 by rpki-client