Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/C4F853EEB0A211F199DDB5AB5F11F970.roa
File:                     C4F853EEB0A211F199DDB5AB5F11F970.roa (raw, json)
Hash identifier:          cbR/jFkW9sp5wygPP/jHcZAeyT3xFSTE1LVmfYL6Ybo=
Subject key identifier:   70:9D:40:00:E6:AA:6B:13:4C:5C:25:64:AB:E8:AE:DB:EE:BA:AB:81
Certificate issuer:       /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial:       064E
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/C4F853EEB0A211F199DDB5AB5F11F970.roa
Signing time:             Tue 15 Sep 2026 01:14:16 +0000
ROA not before:           Tue 15 Sep 2026 01:14:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     64098
IP address blocks:        103.104.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
                          rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
        Validity
            Not Before: Sep 15 01:14:16 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa89be8-0569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:a2:6e:64:dc:69:f0:94:71:18:f7:15:fb:
                    3d:55:40:a1:5a:97:9f:bc:bb:f6:b3:49:8e:72:38:
                    c2:32:6e:46:f7:ff:bc:2a:c4:0d:4e:95:65:8b:ac:
                    e8:d8:8b:17:a2:ea:02:45:29:79:bd:4a:bb:19:7b:
                    c7:a1:af:d8:88:9e:31:83:8d:de:ad:10:5a:ad:41:
                    37:40:1e:2e:79:68:e4:97:c9:25:3e:03:0a:6a:7c:
                    c2:ed:be:66:5c:b9:22:20:0a:26:6a:8e:e0:e3:83:
                    7d:8f:8a:d0:c9:28:f0:79:b5:0c:b8:f4:e3:e9:2e:
                    f4:21:c7:b8:4f:55:f7:b7:16:a9:3b:e0:0e:30:5e:
                    e0:a8:eb:12:68:84:a1:1c:50:0e:57:9a:98:a0:57:
                    dd:74:1a:30:95:bd:4d:d4:d8:6a:be:7a:87:3e:63:
                    24:cc:44:8b:a1:93:09:51:5f:1f:dc:41:0b:2e:24:
                    96:e7:3f:3c:b9:da:35:6c:a9:0b:22:43:72:30:83:
                    a0:42:ee:5f:fa:33:67:83:4b:d2:4c:28:04:9b:7b:
                    a2:19:2d:bc:99:69:7d:8d:02:6d:0d:2d:9b:52:02:
                    25:8d:52:b2:1b:b1:e2:fe:68:60:ae:a1:b9:07:b9:
                    2b:8a:b7:07:14:e0:cf:2e:e7:4c:6c:ba:f0:45:79:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9D:40:00:E6:AA:6B:13:4C:5C:25:64:AB:E8:AE:DB:EE:BA:AB:81
            X509v3 Authority Key Identifier:
                keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/C4F853EEB0A211F199DDB5AB5F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:0a:4f:d3:d3:d8:ae:60:35:93:2e:ca:dc:02:73:21:d4:
         d1:3b:60:4d:d9:a5:e1:23:78:c9:43:de:a6:23:2d:10:24:4d:
         59:26:06:e2:92:b9:df:95:f5:d2:ef:e2:bd:7f:9b:a7:d1:08:
         c6:3c:7c:0a:c9:7f:5c:3f:b2:db:47:5b:6c:2b:cd:61:df:5f:
         cd:ff:71:31:cd:91:2d:ac:9c:23:8c:65:e1:d5:72:8a:23:e2:
         2a:76:84:80:7a:10:bb:8e:49:54:67:1b:97:8b:d3:b8:9d:4b:
         06:e7:2c:5b:24:9e:75:6e:01:34:6a:ef:a8:62:f4:7b:5f:5d:
         a2:2f:d6:62:6a:a7:ab:50:aa:9a:99:95:7b:9b:12:fd:c5:6d:
         0a:89:b8:e7:7e:07:ca:0b:fe:c0:85:2d:2c:9d:37:b6:b8:20:
         38:a0:73:bd:0e:ee:97:ad:88:70:2d:b2:a6:7c:49:3e:36:0b:
         8b:7e:2b:34:fc:43:e2:7c:3c:1d:c7:82:9a:bd:3b:9f:f8:88:
         e6:1b:5c:63:b4:e5:9e:db:84:23:36:83:38:00:2d:9b:61:ea:
         7d:8b:05:4b:61:a3:e2:09:9a:d9:67:e2:f6:8b:17:90:34:40:
         14:b6:5c:73:f8:69:1d:56:09:ca:b8:ba:b3:ee:47:5e:53:31:
         3e:7b:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:53 2026 by rpki-client