Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/8883622021D011F1BEFE994A223D8C67.roa
File:                     8883622021D011F1BEFE994A223D8C67.roa (raw, json)
Hash identifier:          RwIbr58lkWtABgFapaDRyBgASTJf0FkUClsZO7FVgas=
Subject key identifier:   99:AA:5D:E3:22:7D:F8:1F:13:B7:89:12:5B:37:D6:7C:E9:FE:17:0B
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       0AE0
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/8883622021D011F1BEFE994A223D8C67.roa
Signing time:             Tue 17 Mar 2026 07:11:35 +0000
ROA not before:           Tue 17 Mar 2026 07:11:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     200130
IP address blocks:        103.95.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2784 (0xae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Mar 17 07:11:35 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69b8fea7-4b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:af:4f:81:83:2d:a9:8f:4b:63:ce:53:cf:
                    37:ba:16:12:f7:3c:16:e7:38:9b:d5:c1:49:0b:5c:
                    e6:59:58:97:3b:e1:b1:59:f8:d3:38:04:68:40:66:
                    76:8e:a8:39:dd:9a:05:8f:b3:a1:60:b8:05:a1:4e:
                    ed:f5:ea:6e:c7:86:61:35:c7:4f:01:c5:98:47:d4:
                    d1:35:22:36:9c:8b:39:c1:fc:7e:62:96:0e:e4:4b:
                    5e:11:dc:57:51:7d:bd:a1:bb:af:e2:ee:e7:e2:ab:
                    2b:14:0d:fb:10:c6:04:8b:55:9c:3f:fb:a6:6d:4a:
                    c5:3b:90:03:33:ff:cf:72:41:c1:c9:88:55:8a:2e:
                    13:45:cc:5c:70:f3:b9:d2:5e:76:ca:3c:33:ad:3f:
                    74:5e:ef:95:e0:0f:26:23:07:06:8a:25:4c:55:19:
                    37:e7:c3:22:78:a1:9c:fd:46:af:4a:d8:9b:f2:c6:
                    46:5c:2e:1c:da:37:86:dd:85:ef:e8:38:5a:32:c5:
                    e3:59:96:8e:c4:be:02:e5:ff:04:8a:a2:02:f7:01:
                    8e:69:4d:ab:2c:d9:3f:72:2a:27:0b:a7:cf:4d:5d:
                    57:ad:44:3a:27:ce:e8:d3:e4:2d:fe:d1:bb:1b:28:
                    65:c6:55:c7:58:49:cf:6b:70:ea:64:6f:69:92:49:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AA:5D:E3:22:7D:F8:1F:13:B7:89:12:5B:37:D6:7C:E9:FE:17:0B
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/8883622021D011F1BEFE994A223D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:65:f5:f8:ff:0c:ea:54:3e:91:2b:8c:56:be:9b:fb:64:cb:
         85:32:b0:c8:15:38:b8:11:86:e5:59:2e:0a:a4:35:4b:cd:c5:
         4c:2f:58:3d:78:57:0f:dc:fb:bd:5e:97:66:03:88:aa:18:b2:
         0b:86:7c:58:e3:4e:a2:e2:6c:75:2b:44:12:a0:16:7e:75:22:
         13:7a:3f:8f:bb:7b:e5:4b:49:96:72:8d:f0:91:a2:33:0a:0b:
         86:fe:1e:12:f9:d3:5c:e9:05:8d:aa:88:ee:72:42:46:f2:82:
         0b:3b:dc:b8:d7:23:b0:d2:fa:39:44:e7:3a:b2:88:e4:94:5f:
         f5:d3:4c:3e:62:4a:07:a9:da:75:12:38:1b:99:00:cd:00:35:
         bf:d8:63:04:70:38:9b:fc:13:b1:28:5a:04:fe:44:7d:1b:d3:
         57:8b:b5:46:57:02:92:70:c0:34:29:59:f5:0e:c2:08:a2:58:
         69:61:9f:f1:da:82:43:ae:c5:2f:dd:07:df:e6:f1:d0:22:eb:
         47:fe:d5:f3:3a:6f:df:9e:fe:f6:ea:86:c8:57:f3:33:b4:49:
         1a:fe:33:96:dc:ae:14:68:a7:d5:ef:83:16:16:91:e4:3d:ac:
         8d:3a:6f:e9:c9:86:16:cc:e3:5c:bd:0c:5c:8c:ec:78:68:e5:
         89:ee:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:29:18 2026 by rpki-client