Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/83DC30E0D0DB11EA9336962FC4F9AE02.roa
File:                     83DC30E0D0DB11EA9336962FC4F9AE02.roa (raw, json)
Hash identifier:          V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=
Subject key identifier:   DE:E4:15:B9:5B:01:85:0E:23:A5:8E:B2:8E:1F:92:45:34:63:21:69
Certificate issuer:       /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial:       0A28
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/83DC30E0D0DB11EA9336962FC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 20:25:41 +0000
ROA not before:           Tue 31 Mar 2026 20:25:41 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9260
IP address blocks:        103.86.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
                          rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
        Validity
            Not Before: Mar 31 20:25:41 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cc2dc5-de46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:17:ec:d7:cf:19:74:47:43:3c:1e:ef:44:
                    b3:d9:ab:d9:8b:42:16:c9:5e:00:5d:9e:9b:0f:2b:
                    7e:25:78:e3:a3:a4:f3:0b:f7:a2:94:55:d8:4b:fd:
                    92:03:a7:47:de:8e:d2:9d:ea:e1:49:27:35:46:0e:
                    d2:0e:da:5c:cb:f4:5d:3d:1f:f5:e9:13:c5:ff:5a:
                    c4:b2:e9:ab:d7:7b:59:11:66:9c:30:1b:ee:a2:33:
                    34:c6:01:8d:d7:25:51:0b:f3:e9:32:2c:a4:d0:92:
                    07:9e:e2:88:5b:e2:17:e8:82:8f:dd:2e:29:18:f8:
                    d3:d4:13:58:8f:da:7c:f2:17:c5:96:ba:68:4d:0e:
                    94:07:e4:cc:81:3b:b6:f2:c2:17:0b:b2:b1:e7:ed:
                    6f:a0:79:9c:03:75:6a:cc:f1:64:eb:ce:39:c9:51:
                    5e:00:fe:a5:a5:6e:37:cb:9d:c3:14:a7:0a:fe:1e:
                    84:21:c2:c1:e7:1d:4f:60:9b:23:47:e8:ce:f6:6a:
                    ab:6f:e9:5c:51:c6:20:01:76:29:55:e2:fe:dd:76:
                    5f:fc:50:8b:dd:e3:8e:98:dd:2d:62:6a:bc:4e:c2:
                    28:59:c9:b3:66:2a:6f:85:5b:79:42:54:cb:29:31:
                    2a:30:20:8c:78:b7:5a:b9:81:6b:51:5b:e5:67:78:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:15:B9:5B:01:85:0E:23:A5:8E:B2:8E:1F:92:45:34:63:21:69
            X509v3 Authority Key Identifier:
                keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/83DC30E0D0DB11EA9336962FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:35:69:eb:50:c3:9c:1d:fb:ca:dc:84:bd:5b:26:9e:5f:f3:
         6a:35:72:1b:7c:9d:f3:7b:fe:0b:70:2c:6d:99:af:ee:dc:d9:
         e8:45:22:e7:c1:d6:e4:cf:a6:e0:35:b9:a1:03:c0:90:e2:db:
         44:65:84:e9:c7:ba:6e:43:39:37:3e:81:ac:27:18:39:d8:7a:
         16:07:3d:ca:52:63:b9:32:7b:18:bf:c7:06:f6:59:3c:51:69:
         3d:fb:bf:da:dd:5e:52:df:bf:a0:77:c2:a4:ad:75:c5:35:8b:
         fe:dc:f4:05:73:44:39:65:1e:c6:0a:bd:d4:12:49:ca:ae:56:
         52:a3:8a:cc:cc:34:d8:e9:5f:29:01:31:6d:61:8a:1d:66:37:
         50:ab:92:18:4b:ff:ca:71:ee:4d:f4:ed:8c:cf:ce:21:bd:76:
         46:33:bb:dd:1a:4c:84:50:fe:5f:c4:6d:cc:ed:f4:9f:55:ca:
         6d:a2:e2:cb:b8:f8:c6:bf:19:5c:e8:64:c2:08:f1:25:b4:de:
         b6:9f:80:50:47:d0:7e:67:a8:99:db:93:b0:58:f3:03:56:3f:
         33:34:2d:ff:c4:3d:54:69:67:d3:79:92:36:17:3f:bb:80:ad:
         27:99:fe:3b:ff:37:18:22:51:fd:6f:67:a1:96:de:cf:d7:9b:
         22:ae:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:16 2026 by rpki-client