Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/85B9F9CC8A7211F193E6E41D4211F970.roa
File:                     85B9F9CC8A7211F193E6E41D4211F970.roa (raw, json)
Hash identifier:          K8/sp/CfflUVzDThJpOZ6EABm99x23tLUM/3USoDOpY=
Subject key identifier:   38:1A:A5:02:C8:36:40:AD:B7:75:E1:E9:DE:D1:2E:D9:D5:5D:45:98
Certificate issuer:       /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial:       038F
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/85B9F9CC8A7211F193E6E41D4211F970.roa
Signing time:             Tue 28 Jul 2026 10:53:10 +0000
ROA not before:           Tue 28 Jul 2026 10:53:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     212895
IP address blocks:        103.190.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
                          rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
        Validity
            Not Before: Jul 28 10:53:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a688a16-9ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:f7:54:52:7e:29:0f:9a:f4:c5:e8:6a:dc:
                    04:8b:68:71:26:aa:18:bd:ba:65:72:c4:39:03:83:
                    57:c8:8e:f7:35:3c:bd:84:38:07:fc:04:1c:13:52:
                    6d:b5:6c:41:fe:5b:5d:d8:4a:f8:92:d7:82:89:b5:
                    6a:7c:a8:33:f8:1a:c0:bf:27:3d:98:e2:91:68:63:
                    ec:b8:e4:1a:c9:71:8c:6e:54:66:91:71:bb:4b:87:
                    e0:d4:f0:32:d1:49:23:e4:0b:ee:db:78:9b:ad:9e:
                    95:e8:e8:fc:e2:24:2f:1c:f0:a0:30:07:2f:8b:5e:
                    31:ad:1a:0e:c1:21:b0:6a:f4:66:04:86:47:b8:f9:
                    05:ad:6e:ac:7a:2b:60:d6:e4:72:1b:fb:99:5e:4a:
                    8b:dc:ef:8a:fc:8e:5e:55:1a:d8:69:80:30:0e:41:
                    71:04:2a:d2:88:d7:e2:e1:6f:8c:0a:ec:d1:39:2e:
                    d4:0e:94:d2:06:4f:66:6a:66:8a:4e:01:08:88:27:
                    18:8f:d4:45:0e:ec:28:fa:c6:1b:43:65:9c:dd:42:
                    cd:23:5e:27:0b:98:0c:38:f4:52:f0:f3:e6:e3:9c:
                    1f:d5:c1:51:79:78:f8:1e:01:84:fd:fd:59:58:77:
                    b6:f5:99:27:ee:0a:8d:08:c8:d4:ce:1f:b0:e2:d1:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:A5:02:C8:36:40:AD:B7:75:E1:E9:DE:D1:2E:D9:D5:5D:45:98
            X509v3 Authority Key Identifier:
                keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/85B9F9CC8A7211F193E6E41D4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:7c:ef:d4:43:09:aa:89:97:3b:2c:eb:b7:2a:aa:26:9a:
         a8:43:9f:89:4f:d8:d0:1f:3b:fc:d2:4c:53:bc:54:54:c0:fd:
         33:38:54:43:34:bd:75:75:b7:7d:27:ee:62:50:90:e1:82:65:
         7f:60:36:e9:7b:cb:60:6f:dc:85:96:88:86:01:9c:82:db:71:
         8a:eb:a9:0b:7f:0f:3e:57:7d:7b:da:7e:39:82:2d:f6:1e:5d:
         88:8d:ec:03:1f:d6:05:88:59:96:7c:15:77:de:d6:4d:cf:99:
         c5:86:47:11:ee:ba:7f:c4:67:bf:47:4f:f2:68:92:14:cb:59:
         47:7a:53:e8:56:28:25:63:51:1a:8c:41:12:44:74:cf:27:08:
         85:4c:96:ec:da:c5:5a:63:42:80:04:12:c6:ec:fe:35:70:c6:
         b0:98:bf:b4:51:49:4f:e8:de:e5:3b:17:3f:5c:b3:81:db:66:
         4d:3f:92:06:25:39:64:c3:14:69:52:38:4d:c7:64:67:c3:cb:
         9e:39:8e:5c:64:93:1e:b8:8a:23:3a:4b:71:48:fa:33:5d:c8:
         e9:e2:89:a7:31:25:52:f8:1f:75:0f:e5:ef:2b:a0:8b:77:e2:
         53:b9:61:5e:5c:ea:47:e4:de:bd:2b:0d:50:c9:fe:06:8c:69:
         3f:f1:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:23 2026 by rpki-client