Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa
File:                     CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (raw, json)
Hash identifier:          z3pM1U4lhUTZyKqJAWJMGd97NINus9yqw7iybQDFPps=
Subject key identifier:   1A:F2:1F:A4:59:CF:C3:5A:DA:69:98:3F:15:8A:88:CF:BD:F9:F7:48
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       0388
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa
Signing time:             Tue 01 Sep 2026 01:49:36 +0000
ROA not before:           Tue 01 Sep 2026 01:49:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.69.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Sep  1 01:49:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a962f30-5143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:2f:9d:c6:dd:29:49:2c:84:49:bc:0c:02:
                    bb:d7:a3:89:8a:72:9d:8c:30:4b:0b:0d:1a:4f:e8:
                    6a:1d:65:58:bd:44:32:6d:25:6f:36:ba:d4:df:70:
                    5e:1c:dc:6a:c5:cc:93:e4:b8:7e:6d:34:09:e4:0f:
                    17:4a:9f:8d:dd:98:ed:bd:3b:db:b7:27:94:9f:cb:
                    0e:56:f6:67:4f:d4:0e:23:07:00:dd:6d:82:e8:83:
                    d9:af:a8:22:a6:50:09:4d:51:7d:d2:9b:d3:8e:ba:
                    03:a2:6a:72:66:57:85:d4:14:ee:de:b3:2b:75:3c:
                    6a:e6:48:01:bf:40:8c:b0:e0:e3:6e:f1:11:80:b7:
                    aa:89:af:01:2a:33:b9:e0:5d:67:99:1c:a1:4f:ab:
                    57:a2:45:c7:dd:3e:4d:46:e6:80:4a:45:a8:af:f2:
                    6a:55:2a:7c:07:af:9e:7d:83:1e:be:a3:3c:79:b1:
                    81:13:4f:1d:57:5e:02:77:2d:5f:a1:99:4c:35:35:
                    bb:9a:45:63:bc:b5:37:ab:ae:cd:0a:c4:40:89:bd:
                    ac:8f:c2:6b:35:dc:78:19:0d:82:2a:8d:6c:52:2c:
                    b5:a0:2c:fd:b1:43:8e:63:87:47:2e:d0:6c:70:41:
                    71:a4:15:08:49:7d:02:c9:3a:27:ba:e2:2a:41:ce:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:1F:A4:59:CF:C3:5A:DA:69:98:3F:15:8A:88:CF:BD:F9:F7:48
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:c7:fb:d6:2f:21:f0:a1:25:cf:c9:7d:f6:1e:c5:2b:b0:
         89:8b:23:87:7d:9c:6d:04:a6:a8:54:8c:2f:b4:72:be:72:65:
         de:16:a3:80:81:e3:7b:37:52:b7:29:be:0b:1b:a1:23:cb:d0:
         9d:9b:ed:78:d6:37:d9:11:d8:14:a7:ba:a5:53:f6:91:e3:63:
         67:d1:8c:a8:d7:f2:12:4b:2a:ec:79:9c:5d:e8:3e:31:56:66:
         09:51:45:1f:70:7b:7b:2f:f9:51:d4:45:44:0a:4a:65:eb:4b:
         ed:2e:26:98:6b:e2:2f:25:b1:fe:68:cf:60:97:ff:f1:98:f8:
         05:5c:b8:7f:8d:c0:0b:7f:e6:c6:cc:aa:c5:39:c2:d9:83:d9:
         c1:f9:bf:5b:6d:7f:e8:e5:4a:8e:da:1b:f9:6a:b8:51:0e:87:
         e4:82:32:9e:df:65:d0:62:fc:0f:05:90:6b:d3:57:e0:9f:32:
         fa:1f:fc:f4:c7:80:a0:7b:9a:8a:72:48:c9:a7:cc:5f:5e:62:
         a9:55:c6:15:3a:c1:b7:65:14:09:f7:02:6a:d1:63:14:13:33:
         9e:8c:92:30:b9:73:c5:9c:fd:bc:0a:03:5f:19:e6:ae:74:25:
         28:a6:0c:e8:96:62:ee:65:e4:73:5c:4d:b2:65:c5:8b:b7:81:
         7c:70:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:49:21 2026 by rpki-client