Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
File:                     674009AE09D811EA9BCFCE1EC4F9AE02.roa (raw, json)
Hash identifier:          DqO78dcrLcTqky8MHqNvDeEZVWA5cZxIE2/PsLNtSF4=
Subject key identifier:   E3:FA:0A:BE:B6:3F:FE:06:5F:6F:AE:CD:3C:4A:4D:89:4E:A3:E4:AC
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0D24
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
Signing time:             Tue 08 Sep 2026 18:36:56 +0000
ROA not before:           Tue 08 Sep 2026 18:36:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58665
IP address blocks:        103.12.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Sep  8 18:36:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa055c8-2842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:7c:9d:29:42:d8:04:ad:99:c0:a8:d5:11:
                    62:3e:77:14:6f:a9:cd:58:df:a4:d0:84:2c:40:0e:
                    02:ac:5d:0e:9e:06:da:17:75:04:d9:19:df:2d:1a:
                    cf:30:d1:af:23:87:98:84:c1:83:2a:a6:bd:5d:dd:
                    1b:35:98:0c:37:b7:74:51:67:ee:81:52:76:30:e7:
                    8e:68:19:d6:df:14:b2:2d:d9:be:26:6b:d7:6c:0c:
                    22:65:63:ef:04:3b:f7:6f:cf:f3:c9:6b:1c:26:c6:
                    99:16:1e:56:53:5c:97:71:29:f9:e0:8c:fd:77:dd:
                    a4:c3:c7:4f:64:d5:3f:b6:d1:98:25:05:7d:1b:e8:
                    b9:81:00:f8:08:2c:61:f5:7b:f2:8c:1a:19:cb:5b:
                    43:b9:bb:92:e4:b2:70:3f:30:a3:75:10:58:1b:30:
                    14:07:00:ca:19:4c:59:4f:1e:6b:e3:28:81:ed:e5:
                    8c:5b:77:25:3b:e7:5a:b3:4a:27:ae:3b:6b:92:4f:
                    56:6e:6a:01:58:68:ae:bb:11:9c:6f:95:48:f3:fc:
                    bf:21:2d:c3:9e:5b:6a:ad:7d:50:7e:62:5c:95:c8:
                    a7:bf:ed:8f:b7:c4:73:eb:7c:bb:55:06:f3:99:d6:
                    42:d7:e2:ca:2d:61:ff:0d:3f:f5:37:90:26:86:1f:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FA:0A:BE:B6:3F:FE:06:5F:6F:AE:CD:3C:4A:4D:89:4E:A3:E4:AC
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:92:94:f8:7b:cd:2f:e7:64:48:b6:19:6b:63:3c:31:cc:
         b6:6f:16:88:da:59:57:d6:c9:0c:f2:95:50:65:e7:5d:09:1f:
         b0:4e:dd:8c:98:0b:1f:1a:32:6b:90:3d:34:ac:cb:b6:0a:19:
         34:47:9c:f9:63:e4:f3:2d:70:bb:97:be:33:72:bc:0c:47:af:
         67:9c:80:8a:39:c7:80:1c:29:a4:47:6d:1e:39:e5:30:c9:51:
         b5:15:0d:73:b7:2d:d2:ba:c4:65:57:be:bc:0c:aa:c7:e1:c8:
         f8:51:b7:b3:de:5c:4c:68:cd:93:d6:aa:db:19:0d:d0:83:c4:
         2a:d6:39:06:ae:2d:9a:16:1e:e7:95:42:dd:f4:11:d4:b2:8c:
         d4:9a:cd:38:ed:78:3c:93:9a:b8:aa:81:de:69:26:af:1a:d3:
         98:92:02:ef:83:c0:89:d9:a2:85:bf:3c:78:a2:1f:cf:ef:54:
         1f:44:46:53:ce:8a:0e:8d:5e:74:84:1d:a2:e9:95:e6:1b:e1:
         bf:62:1a:75:9a:a5:b4:11:9c:4f:e7:a4:8c:10:a4:13:90:b5:
         54:f7:16:e1:55:99:5b:47:3e:d4:2d:eb:18:f1:5a:08:39:3b:
         89:6c:ed:27:6b:43:0d:3d:b0:44:57:f9:89:4d:85:e8:c6:a5:
         4a:7f:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:25:01 2026 by rpki-client