Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa
File:                     898E9EA83C0E11F093CFD060C4F9AE02.roa (raw, json)
Hash identifier:          gSnqYtTQlWmZ5BtYJ+vwOLT60AdaZuims1PFTuQlo8A=
Subject key identifier:   FE:E9:32:98:1E:E3:47:91:95:48:5F:39:A9:F4:F7:FA:6D:46:89:07
Certificate issuer:       /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial:       E6
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 08:55:57 +0000
ROA not before:           Wed 05 Aug 2026 08:55:57 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     9650
IP address blocks:        103.118.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
                          rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
        Validity
            Not Before: Aug  5 08:55:57 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72fa9d-c114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:ab:11:56:df:b4:ab:ee:25:79:16:b8:c6:
                    5f:29:39:c3:55:e3:2a:c7:59:15:be:00:41:72:97:
                    7a:c4:77:33:a8:01:56:d9:bd:f9:3a:14:4d:5d:bb:
                    72:85:f2:3a:10:d2:8c:6d:ce:cb:cd:4c:c0:7b:fc:
                    a1:0a:a2:65:83:20:9d:55:17:e4:b7:eb:14:b7:74:
                    50:e8:85:47:fb:e2:f4:d1:44:28:11:c6:47:8e:27:
                    b0:69:22:3c:95:28:2d:82:a2:f2:66:cb:2d:77:af:
                    4d:0d:eb:fd:a2:24:32:d7:df:e3:ac:34:02:2f:30:
                    ee:63:d1:1c:2c:48:3f:de:45:31:50:4d:4a:f0:6c:
                    eb:03:d7:27:76:39:cb:07:e0:a6:bc:ea:f8:20:63:
                    22:da:e2:2b:9c:e3:09:b8:53:82:d6:1c:b4:50:8e:
                    a6:8b:80:b6:38:24:2a:e9:17:ae:1e:3e:3a:3c:b6:
                    19:4a:9b:4a:ba:9a:8c:b8:0a:f3:3d:ed:7b:1b:0e:
                    d6:d9:24:83:d8:15:a8:99:7c:9f:26:32:1d:ae:81:
                    6d:8e:de:6d:96:3c:3e:0e:30:8f:87:8b:4e:05:5a:
                    6c:e2:ab:a2:ff:9b:5f:e3:76:81:31:4f:f1:be:04:
                    0a:d6:8a:98:6f:3f:6d:51:ce:ee:ca:56:bc:d5:d7:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:32:98:1E:E3:47:91:95:48:5F:39:A9:F4:F7:FA:6D:46:89:07
            X509v3 Authority Key Identifier:
                keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:72:cf:f0:bc:a8:4b:3a:86:21:e9:92:eb:43:a0:70:39:
         a6:d7:68:af:b5:40:53:10:2b:47:cf:7b:26:fa:f1:76:34:e0:
         f9:21:ff:27:86:a6:60:17:88:78:b0:7f:d5:7a:17:ab:93:1d:
         23:ed:b5:c3:1f:1f:df:e0:95:ab:b4:7b:9f:e4:12:c5:4e:92:
         9e:b3:bf:98:a5:40:47:30:ca:f6:70:30:fb:3e:4e:31:a0:44:
         73:6d:ea:ed:fa:5c:6a:ce:f4:02:87:b7:ea:5c:ec:f7:3d:d0:
         69:45:dc:4b:59:45:1e:8c:b1:a5:1c:c9:af:85:67:9b:44:84:
         1b:52:d0:cc:c9:12:94:d6:5e:6b:72:d4:7b:0d:ea:ff:fd:47:
         1a:a4:21:9c:d8:15:72:4a:5f:8a:75:01:18:af:8a:ef:15:02:
         58:15:92:63:10:2a:8b:96:ab:e9:be:1a:0c:92:0b:34:12:6c:
         7d:11:cf:d2:75:b5:a9:fd:91:92:75:b5:78:7b:1a:0b:8d:fb:
         c9:67:93:20:33:0d:eb:fc:1d:49:bf:e7:fd:e1:bf:fc:ec:2b:
         02:e5:b9:14:7d:03:cb:f5:db:80:5d:13:1c:c9:33:b6:54:f3:
         f5:f4:14:69:53:59:1a:fb:c3:37:d1:8f:f8:06:b6:35:25:5c:
         db:39:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:59:09 2026 by rpki-client