Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B5EC27DC80F411F1A8E5D2AB65A30FBC.roa
File:                     B5EC27DC80F411F1A8E5D2AB65A30FBC.roa (raw, json)
Hash identifier:          HDAMBq9cGBoodO1E3jLw/cK2FtT7+fINXvRzCe1mDLw=
Subject key identifier:   C6:75:85:DF:30:C5:B1:43:47:FE:6D:49:78:7D:3E:30:F3:19:3E:47
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       01E9
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B5EC27DC80F411F1A8E5D2AB65A30FBC.roa
Signing time:             Thu 03 Sep 2026 04:54:14 +0000
ROA not before:           Thu 03 Sep 2026 04:54:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133199
IP address blocks:        103.143.26.0/24 maxlen: 24
                          103.143.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Sep  3 04:54:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98fd76-91ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:c6:ce:43:2f:79:ed:d7:c2:c1:f4:86:5f:
                    7b:c7:e6:3a:71:91:77:ab:39:52:25:d7:c4:4a:32:
                    a9:50:47:fd:35:1b:e3:1e:cd:21:ee:1b:b6:88:3d:
                    7f:be:9c:26:d1:a3:ea:ed:fb:d1:42:73:f1:8d:19:
                    35:b9:86:de:c3:f2:5c:04:56:ee:a1:32:be:99:ff:
                    26:a2:b4:b4:6d:a8:ae:9f:2f:f5:d2:37:a7:b3:8f:
                    20:a9:5e:12:e7:48:fd:20:bd:56:6f:59:9d:dd:bb:
                    dd:70:87:a6:9b:7c:08:19:08:a0:c8:c2:eb:98:e8:
                    8f:8f:35:e8:d8:e6:9f:48:3a:e8:d7:8d:75:22:ae:
                    12:00:d3:8f:d4:e1:36:0f:4e:76:ae:65:85:8f:32:
                    7d:d0:3b:70:15:05:ab:9e:42:43:27:3f:6f:77:09:
                    b4:b3:46:46:24:12:de:3f:6c:f6:b8:24:b6:09:1a:
                    0e:7a:6e:cc:51:9d:09:42:a1:fc:86:82:59:8b:f2:
                    4b:7c:81:76:bb:25:3e:cd:57:26:95:5e:73:df:a5:
                    a2:c0:2e:33:41:68:a1:71:67:79:b2:c0:c9:45:6e:
                    41:d4:78:60:76:56:b5:5c:63:40:4d:b1:66:a8:0c:
                    14:76:c6:09:65:4a:d7:88:91:00:82:7e:76:3b:52:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:85:DF:30:C5:B1:43:47:FE:6D:49:78:7D:3E:30:F3:19:3E:47
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B5EC27DC80F411F1A8E5D2AB65A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:70:6c:9e:7e:8d:df:fc:dc:69:ee:e3:fd:56:f6:72:93:
         5c:cf:80:50:33:8b:8f:9e:0a:b0:10:8b:d6:63:52:e5:33:85:
         11:b5:af:49:0f:6c:c2:7a:99:bd:22:6f:40:e4:8b:31:82:01:
         32:23:bf:d4:0b:a4:36:8f:2b:e2:9b:4f:82:70:74:7c:ac:61:
         86:6e:01:97:cf:be:8b:c6:2a:26:b6:d7:07:ff:15:ec:f1:60:
         20:02:7c:7e:2a:11:fb:b5:ed:72:f5:aa:48:f9:fd:62:e6:00:
         85:f2:c7:9f:be:1a:70:4b:4e:5f:1b:3a:c5:b7:14:b3:2b:d5:
         d6:09:f5:57:03:b8:3e:69:21:18:3b:8f:eb:f7:17:99:56:24:
         4b:eb:d9:97:de:1d:40:14:7f:5d:be:44:6d:0e:2c:40:4c:6f:
         e7:9d:a8:4e:d3:2f:d0:25:ce:31:78:6b:da:55:e1:46:3e:49:
         39:91:8c:d0:a2:e4:20:41:b3:d1:24:76:46:bb:a8:06:db:12:
         6f:ee:df:ff:0d:e9:bf:e9:3f:56:9e:b8:ba:a5:66:1e:f1:0c:
         65:54:a7:30:41:55:b1:d9:f2:90:94:3b:96:b4:a3:5a:1f:a0:
         d5:0a:41:07:73:74:13:c6:00:14:ce:67:8c:f1:94:47:e4:9f:
         0a:4a:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:29 2026 by rpki-client