Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8A6CA68AB27311F19B014BB93311F970.roa
File:                     8A6CA68AB27311F19B014BB93311F970.roa (raw, json)
Hash identifier:          S8t67WL5XbNm+rbVgM+Zav6QBcgZSo0aXCisbWf8F/I=
Subject key identifier:   82:12:28:B9:06:AE:CE:B1:A8:55:24:B6:81:C8:15:9D:E0:07:FF:9A
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       0823
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8A6CA68AB27311F19B014BB93311F970.roa
Signing time:             Thu 17 Sep 2026 08:41:14 +0000
ROA not before:           Thu 17 Sep 2026 08:41:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     59117
IP address blocks:        103.42.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Sep 17 08:41:14 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6aaba7aa-ed4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:50:d1:39:00:cf:70:bc:40:57:de:1a:84:
                    e0:bf:6d:26:45:d8:90:f8:0e:65:36:d0:1f:dc:2e:
                    d7:2b:85:88:90:44:4d:f1:41:85:d0:26:84:fd:d4:
                    de:9a:36:a3:51:77:d3:72:18:38:4e:6d:52:2e:9a:
                    f5:8c:27:1e:75:de:18:37:2a:e2:55:a4:98:38:ab:
                    e5:49:e2:15:df:98:49:32:bf:f0:06:bb:cf:d2:27:
                    bc:aa:c7:a1:04:e8:9a:43:48:de:0c:ac:14:05:e5:
                    2a:f8:32:a6:a0:a6:b4:c4:d8:c0:b4:68:e2:b9:06:
                    ab:9b:2f:05:80:67:f7:bd:a1:e2:c2:7b:e8:7c:84:
                    3c:83:54:15:f4:3e:f0:95:95:63:7c:d8:77:6e:ae:
                    51:0f:fa:4a:4e:ca:8c:57:b8:2e:c2:e2:c6:39:f5:
                    26:67:dd:90:4c:d8:a0:59:df:07:af:f6:9b:dc:77:
                    08:b2:a8:c3:ab:aa:34:79:fd:a4:25:66:a0:c9:aa:
                    a2:d8:cf:6b:31:0c:6a:a6:73:11:46:67:6a:9d:b5:
                    b3:1f:20:3c:df:90:df:cf:8e:9b:51:90:d5:33:25:
                    91:cb:6e:58:7c:63:4c:4f:11:2c:60:99:41:08:cf:
                    f2:ff:df:fb:4b:ad:30:b0:11:5c:45:fe:68:e9:95:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:28:B9:06:AE:CE:B1:A8:55:24:B6:81:C8:15:9D:E0:07:FF:9A
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8A6CA68AB27311F19B014BB93311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:02:ad:4d:44:f6:8b:3a:29:89:f7:79:9d:71:48:97:a0:
         c3:f4:32:45:39:3a:be:2e:15:bc:60:d9:b5:8a:a1:4f:25:64:
         b9:c4:82:fe:4c:ae:4f:a5:ca:08:7f:5e:a0:7b:c6:77:37:46:
         89:7d:1b:b0:a0:00:3e:be:ce:55:bc:d1:f0:1d:c5:13:72:17:
         7f:64:ee:d1:1f:c6:1e:08:ef:55:5f:4e:b9:79:11:96:18:89:
         6b:29:71:0b:c1:c3:47:c7:67:6c:63:0b:b2:7b:7a:43:ed:f7:
         2d:67:9f:37:3a:30:85:71:36:94:8e:10:c9:71:ef:44:6d:2f:
         20:d0:4f:1c:92:07:44:88:b9:a5:bb:0c:53:36:0e:06:e6:23:
         0a:92:aa:00:82:f7:21:d7:d6:9f:b3:db:d7:50:36:0c:dc:11:
         5b:a9:32:b8:9e:91:8c:4b:4f:48:61:74:a9:c1:02:25:dd:58:
         1f:b7:e6:4a:b9:5f:4f:07:c0:e3:b5:02:45:1a:20:64:f3:f5:
         e5:b2:a5:1b:4b:da:c7:6f:e3:b0:bf:68:87:bf:60:94:18:d2:
         90:fa:56:ef:1c:b4:a5:38:23:c1:78:dc:05:37:d2:85:4e:c5:
         f4:2d:3e:7f:3c:83:47:6c:55:41:75:bc:f7:bf:8e:4e:01:da:
         1f:69:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:28 2026 by rpki-client