Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
File:                     083499C00F7711EBBCB67820C4F9AE02.roa (raw, json)
Hash identifier:          G0urlqYAMCegJFm0ZcL9pjGI0OqEaVlLXaKe1FLlw4I=
Subject key identifier:   92:54:78:42:5B:15:FB:62:32:27:9D:99:AB:46:B2:D6:22:45:4C:11
Certificate issuer:       /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial:       0882
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 21:40:40 +0000
ROA not before:           Wed 02 Sep 2026 21:40:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139315
IP address blocks:        103.141.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
        Validity
            Not Before: Sep  2 21:40:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9897d8-af5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:87:34:e9:eb:38:1d:6c:3c:67:7b:a7:a0:
                    9b:48:b0:2d:8e:69:ea:8a:0b:e1:82:6b:c9:37:84:
                    e4:26:38:00:91:9a:1f:73:d5:b0:74:01:42:61:f5:
                    fb:01:79:1e:43:f7:e7:00:71:12:72:88:8f:3a:44:
                    ae:02:ab:25:1b:7a:ca:fa:ab:ae:cc:01:7b:b7:32:
                    69:59:be:1a:23:43:b1:a1:92:a2:77:e9:5a:4b:3c:
                    24:00:a9:22:aa:a8:44:23:d5:57:8d:7f:4c:10:7e:
                    21:d9:c8:57:7f:6d:91:bf:bf:f1:11:fc:bb:7f:14:
                    b5:4e:f3:dd:75:d7:c1:c7:a9:f5:e3:51:45:b7:6d:
                    14:8b:a7:ed:a5:12:3c:0e:a2:e0:19:74:27:f2:67:
                    5b:6d:ce:dd:df:4c:38:02:54:28:23:38:e3:e8:d1:
                    cb:80:c0:cd:5f:82:16:c2:71:2d:ce:bb:1f:95:43:
                    01:03:05:ef:49:d4:b8:c0:8e:5b:5d:f0:38:2b:bf:
                    60:bb:67:12:cc:fb:67:64:fa:70:73:34:d6:4c:9f:
                    e3:38:f0:6f:2f:c2:c3:7b:19:0a:32:a7:4e:31:22:
                    93:48:44:82:dd:65:6c:78:4e:9a:f9:1c:3d:2a:93:
                    ea:b9:37:15:19:56:55:ea:76:05:5e:2b:65:97:84:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:78:42:5B:15:FB:62:32:27:9D:99:AB:46:B2:D6:22:45:4C:11
            X509v3 Authority Key Identifier:
                keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:8c:03:b1:96:cc:c8:6d:5a:11:ec:89:16:02:40:78:1e:
         96:28:af:2b:9a:3a:91:4f:ec:83:b6:34:16:c6:8a:a7:e3:c5:
         5c:25:cf:7b:50:09:33:3c:32:2f:1e:d0:5e:ac:84:05:e1:9e:
         5d:2a:19:91:6f:89:61:b5:4b:bd:8c:f9:4e:c0:1b:82:09:54:
         81:62:3b:d1:22:8d:f3:31:4d:85:f9:8c:51:1d:52:7d:fc:25:
         0d:34:15:5d:c4:33:72:70:de:ef:58:f8:63:69:25:7e:19:94:
         cb:53:98:a7:4f:73:29:4a:e9:73:34:f5:5a:40:20:72:ff:88:
         4f:4b:c5:8b:02:cb:a7:5e:86:b5:29:ad:ee:6b:a1:38:8a:19:
         b0:5c:8e:1c:a1:ca:9b:b1:c7:9c:57:09:4b:f5:e4:27:b0:bb:
         4b:1c:25:4a:03:f4:8e:30:54:cd:2e:f4:4d:8e:91:3c:c0:57:
         03:73:ee:03:4b:6a:08:54:bc:e6:1d:89:99:b0:d1:75:06:e3:
         c1:af:10:11:55:04:ab:54:4d:83:06:1e:78:90:43:74:5b:11:
         79:95:e7:9f:ff:69:db:50:66:77:54:a0:cb:17:e3:55:bb:a2:
         37:50:52:4f:c8:ff:dc:f1:fe:c5:2a:7c:78:4a:39:7d:16:c8:
         db:25:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:24:43 2026 by rpki-client