Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/1B05A0DEA0FE11F1825E2D663411F970.roa
File:                     1B05A0DEA0FE11F1825E2D663411F970.roa (raw, json)
Hash identifier:          P6W/Hfpr93LemGxKRbVxgccWf1AF65o2VgS/fdnStBo=
Subject key identifier:   8A:34:E8:C7:F3:78:70:95:E0:DB:A2:49:72:01:7E:6C:64:47:B9:F5
Certificate issuer:       /CN=A91E4236/serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78
Certificate serial:       09
Authority key identifier: F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/1B05A0DEA0FE11F1825E2D663411F970.roa
Signing time:             Thu 27 Aug 2026 08:59:35 +0000
ROA not before:           Thu 27 Aug 2026 08:59:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133501
IP address blocks:        103.234.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl
                          rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4236, serialNumber=F0D9BDA801CA2710D76878C9DFF3586495716B78
        Validity
            Not Before: Aug 27 08:59:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8ffc77-1415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:b7:1d:10:8b:40:07:8a:12:a7:08:8d:b1:
                    21:bd:96:9d:98:08:84:5a:cc:12:1a:8f:cc:6b:be:
                    5b:87:6b:f6:42:62:2a:50:e8:90:6f:77:4c:e6:21:
                    b6:f8:dd:ae:0e:3a:16:2e:6d:1e:83:24:9a:8b:62:
                    3a:7a:0a:dc:83:60:ba:13:31:dc:35:55:2b:89:c0:
                    08:d3:3c:56:6a:c8:e1:40:a8:ea:c9:79:11:3c:4e:
                    94:5e:34:6d:2a:6d:d7:7b:40:ba:bf:6e:ae:ce:06:
                    13:29:27:51:5f:c6:c4:6c:6c:49:6f:1e:53:c3:91:
                    b2:b3:3c:e0:24:66:9f:73:01:04:12:aa:1f:54:43:
                    70:56:8f:bf:ec:3a:8e:64:e5:73:78:15:0c:a9:07:
                    94:28:77:05:a6:5b:ed:58:cb:31:75:04:ea:c8:e0:
                    47:4f:a7:c4:60:85:c2:90:60:eb:0d:02:66:81:0f:
                    5f:56:bd:6c:28:4b:ee:ee:54:b1:84:6e:dd:30:c1:
                    8b:f4:f4:21:61:63:d2:73:79:21:79:70:d4:ce:f3:
                    74:3f:65:ec:1a:49:15:dd:2b:16:f9:bd:03:5b:01:
                    d5:cd:4e:ba:62:e8:c1:4b:7b:2e:37:bc:b9:d3:dd:
                    ad:5e:58:ea:51:2e:dc:27:a0:6e:4c:7f:f2:37:f8:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:34:E8:C7:F3:78:70:95:E0:DB:A2:49:72:01:7E:6C:64:47:B9:F5
            X509v3 Authority Key Identifier:
                keyid:F0:D9:BD:A8:01:CA:27:10:D7:68:78:C9:DF:F3:58:64:95:71:6B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Nm9qAHKJxDXaHjJ3_NYZJVxa3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4236/9A1A007EA0FC11F19DE45E923311F970/1B05A0DEA0FE11F1825E2D663411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:84:aa:0c:f6:a4:df:c4:0d:10:66:a8:b5:1f:b4:6b:2d:
         6e:f1:77:39:26:a4:67:66:7c:4d:04:89:32:b0:23:67:29:dc:
         13:d0:33:51:c8:f7:a1:be:f4:c0:b7:e6:7e:3b:e7:52:04:e9:
         6c:4b:72:a1:86:51:4b:32:7c:49:85:90:c6:3b:90:62:c1:1f:
         6d:d1:ee:47:79:6d:f2:4d:cf:20:c5:35:2a:e1:36:09:28:28:
         58:90:d3:2b:e6:ff:7e:1e:1f:2e:e1:a7:f6:6b:3d:98:60:0f:
         74:67:29:08:e5:a0:03:fd:4e:3f:7c:c6:0e:11:36:95:ac:70:
         0a:42:e8:82:55:3e:bc:21:ec:b2:4f:9d:64:41:21:fa:b7:a6:
         93:66:db:66:2c:80:39:a8:e8:ff:a9:6c:af:16:71:04:27:65:
         f8:fb:3b:ae:47:12:3b:6e:2e:34:74:a6:0c:cb:ce:3e:30:b2:
         15:93:bc:94:67:3c:81:f3:b8:96:bf:21:d0:38:c1:ad:ac:3e:
         da:12:ca:32:02:6d:29:49:00:13:e8:e8:8b:1b:9d:32:b3:fc:
         ec:28:13:fe:5d:6c:b7:4d:e3:65:63:4b:4b:7d:8a:a0:a9:dd:
         7c:23:b8:56:6e:98:c3:3d:35:55:75:e2:0d:bc:4a:1d:d6:6d:
         e5:94:1d:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:48:24 2026 by rpki-client