Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
File:                     9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (raw, json)
Hash identifier:          618LqzTl8LQhJtXSV7A+T4nSgtmL+eUdYuuSmJB8P+A=
Subject key identifier:   92:EA:CC:60:E7:C7:9B:CD:A0:7E:ED:BE:31:5D:1A:38:9B:90:A6:01
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0EED
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa
Signing time:             Wed 26 Aug 2026 18:35:02 +0000
ROA not before:           Wed 26 Aug 2026 18:35:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134148
IP address blocks:        103.5.242.0/23 maxlen: 24
                          2401:c7c0:21a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3821 (0xeed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Aug 26 18:35:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f31d6-2974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:d1:18:30:df:1c:40:a0:6f:2d:51:98:82:
                    24:8f:03:49:aa:10:ae:24:56:16:74:81:23:6b:af:
                    90:bf:aa:a5:23:0b:58:7d:3c:9e:4b:62:70:af:9f:
                    7a:68:e1:ac:3b:82:f1:1e:e2:a0:22:14:d7:2f:55:
                    a5:9e:35:e3:14:92:1b:82:20:b8:6f:67:be:15:22:
                    52:2e:a1:90:de:10:4e:3a:39:fa:9b:b6:2a:74:70:
                    b1:0f:4d:dd:e7:08:cb:e1:b8:03:1d:b4:bd:9b:f1:
                    da:a4:f2:c7:8b:ed:7b:db:fa:72:c8:2a:c8:09:fb:
                    8b:1e:e6:3c:fb:c5:59:74:f0:79:b6:79:40:7a:ee:
                    33:d2:3f:9e:b0:11:e3:ad:60:dc:a0:2c:f3:f2:81:
                    9d:40:88:49:d6:c0:ed:71:ce:c2:bc:a7:8c:cc:5f:
                    30:81:de:98:9c:e9:f3:86:85:4d:f2:37:54:c9:06:
                    21:9b:38:0d:35:74:38:a4:cc:54:85:08:1b:75:2a:
                    c5:b0:38:87:c1:74:a9:91:16:a6:e6:78:73:f6:73:
                    49:f2:64:34:0e:65:e3:d7:d3:2b:a8:2e:de:51:08:
                    8c:7c:dd:59:07:74:03:16:e8:7a:c0:9f:cd:b4:26:
                    d3:33:f2:a9:20:23:a7:58:38:f9:b3:ca:f0:28:2c:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EA:CC:60:E7:C7:9B:CD:A0:7E:ED:BE:31:5D:1A:38:9B:90:A6:01
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.242.0/23
                IPv6:
                  2401:c7c0:21a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:e1:f2:e2:d6:12:e1:0e:e1:f8:88:f3:21:55:36:a8:09:
         8b:ef:6a:f1:48:0a:de:19:aa:5b:5d:fb:6d:ac:ea:c0:27:10:
         37:97:18:f1:33:dd:b2:e5:0e:fa:e8:28:f8:66:ba:12:65:1b:
         a6:17:bc:10:dd:e6:47:7e:d1:7f:5f:b9:0b:fd:5c:fc:60:7a:
         c1:22:cb:16:f3:d6:ff:e9:58:59:0f:12:98:97:2a:74:28:0b:
         a6:a2:b5:82:2f:f4:32:86:82:30:8d:a5:4b:44:d6:cb:59:05:
         c4:38:ab:06:08:42:9e:a5:3f:80:93:5b:2d:76:fe:0d:7b:5a:
         fa:ff:d2:52:a5:c1:8a:d7:81:e2:94:11:ee:c5:6b:1a:1d:ba:
         38:36:08:b4:a8:a5:47:9f:cc:30:30:05:e6:7c:ca:02:6c:7f:
         c6:26:b8:1e:c5:be:f9:77:8c:ff:ed:19:1a:1d:67:0f:f4:28:
         f4:ac:63:26:d6:f4:7d:ae:ec:a6:e6:40:c6:3a:17:09:f7:6f:
         b0:0a:18:df:d9:69:88:f9:3a:e0:2e:54:5c:0f:ff:c1:7d:20:
         99:f8:5c:a4:2b:c8:0d:d5:ad:51:ba:9a:ad:14:71:9d:c6:a2:
         cb:bd:57:6b:f8:f9:ed:28:4b:bd:0b:89:f6:1c:29:d8:38:a2:
         22:d7:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:35:50 2026 by rpki-client