Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/81F3BDC2B71911F18A35C1CA6C11F970.roa
File:                     81F3BDC2B71911F18A35C1CA6C11F970.roa (raw, json)
Hash identifier:          7CMUjNcN2vZ5HiaJ5aDEnSDfrFEzwgxh0aCrN4y9pH0=
Subject key identifier:   F3:77:5E:DF:F7:CC:4C:D7:98:68:52:2A:53:7D:10:27:9A:91:F8:AB
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       0154
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/81F3BDC2B71911F18A35C1CA6C11F970.roa
Signing time:             Wed 23 Sep 2026 06:39:21 +0000
ROA not before:           Wed 23 Sep 2026 06:39:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        43.231.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Sep 23 06:39:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ab37419-4a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:7b:c8:4b:31:8d:3a:2f:26:56:1e:62:a6:
                    cc:70:43:2e:6a:d9:c8:a1:e7:4e:71:44:2c:1e:55:
                    61:35:ad:e5:b1:ab:3e:21:7d:63:63:8f:50:5f:11:
                    69:6d:8c:28:15:ca:b1:f7:e0:09:e5:80:05:89:ce:
                    00:14:0d:d0:36:04:52:35:a6:40:63:67:8a:87:d4:
                    b2:07:2a:be:05:0e:96:04:16:7d:87:58:51:9b:42:
                    4c:24:fe:29:56:cb:97:54:aa:59:af:c2:9d:4c:32:
                    a5:42:e9:40:09:14:21:11:16:42:b1:d2:64:7f:e8:
                    82:6f:6a:f6:9c:ed:de:e0:1f:77:a9:36:ae:52:81:
                    8d:92:a5:fa:33:20:41:a5:3e:00:a6:7e:62:8e:d5:
                    68:f0:fc:ec:69:43:3f:83:bb:4f:d4:cb:f2:4c:d0:
                    a1:97:95:b4:7b:75:2a:d7:a8:66:82:7c:e3:d6:43:
                    3b:8d:e1:6a:e6:17:d6:fc:34:ce:20:ce:3c:f7:4b:
                    c0:90:22:a7:36:b2:10:46:5c:c0:c1:ba:b2:46:6b:
                    9e:8a:b6:53:98:91:46:77:27:c3:19:e7:a9:25:08:
                    91:b4:d2:cd:a5:54:77:3d:4a:20:77:92:0e:0e:f6:
                    69:54:f2:26:85:9b:0b:7b:06:e9:dc:48:a9:ab:b7:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:5E:DF:F7:CC:4C:D7:98:68:52:2A:53:7D:10:27:9A:91:F8:AB
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/81F3BDC2B71911F18A35C1CA6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:55:97:ba:9a:70:0c:49:e8:a1:97:1d:b7:b4:89:c7:76:39:
         1f:24:2e:8a:18:de:d0:1c:7b:24:7a:cb:d8:af:b6:a1:fc:a9:
         94:42:fb:5d:e5:4b:b8:cd:d9:3e:c1:f4:81:34:19:e3:36:30:
         f6:81:80:f2:cf:6d:07:d4:96:97:c3:a1:7d:d0:85:a6:eb:c0:
         9f:33:1f:51:91:f2:17:71:6a:5c:1c:03:e5:f8:a2:18:6f:ff:
         24:6b:34:9c:2e:2b:26:29:52:6c:5d:a0:47:da:f8:1a:67:2d:
         de:2f:5b:9d:5d:1a:89:b0:7f:77:dd:f0:a8:d4:d0:a9:90:10:
         a0:00:93:5e:5e:e2:47:e8:87:e7:af:12:aa:2c:dc:3e:63:26:
         51:0f:9c:9c:a8:a4:0f:a1:91:37:e8:08:0b:86:2b:bd:5b:d5:
         8e:e3:fe:ef:4c:4d:ab:1f:f1:e2:45:76:61:6c:13:0f:1d:99:
         88:bf:2a:79:bc:bc:17:04:03:17:20:79:8a:03:57:6f:bd:fc:
         85:a1:13:13:10:f9:bf:9b:6b:5a:93:ee:26:31:70:a9:1b:f8:
         a0:9a:d0:89:7f:8b:2b:98:55:2d:ba:88:34:0b:36:dc:e0:1b:
         8f:c5:bc:23:ef:5d:9c:d9:50:6e:2e:87:69:92:96:8b:8d:76:
         90:74:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:03:57 2026 by rpki-client