Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa
File:                     22DC230C299311F0B32D9F82C4F9AE02.roa (raw, json)
Hash identifier:          j0W+WfY3+sfZxHEwwRc84p74v7AiLOSA7lEphUi5fcI=
Subject key identifier:   A1:9B:E6:62:13:EC:8C:95:9A:E7:97:7E:2F:87:60:96:09:14:3B:8E
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1F3E
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa
Signing time:             Sat 14 Nov 2026 16:26:55 +0000
ROA not before:           Sat 14 Nov 2026 16:26:55 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     24440
IP address blocks:        103.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7998 (0x1f3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Nov 14 16:26:55 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6af88bcf-0428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:a2:1d:b1:27:a9:d1:94:37:57:f7:4f:10:
                    f2:eb:7e:6f:d1:d0:97:10:d9:48:0b:ea:e3:1b:68:
                    48:1a:1b:af:5a:f4:c2:f6:69:e4:37:d3:92:bb:ba:
                    77:de:c0:98:e8:69:8b:a7:2a:25:43:15:07:1a:bc:
                    db:a6:22:b3:bf:67:b4:c2:5c:c1:90:d9:0b:12:a4:
                    5d:1e:0b:9e:33:ad:74:c2:a7:8b:d2:fa:ad:5f:ce:
                    b9:a7:29:36:4b:09:d3:3d:ac:8e:f1:08:52:e8:40:
                    55:cc:31:59:f9:66:4c:fb:4f:e5:41:24:17:7e:91:
                    9e:6a:2a:3c:25:82:8f:d0:61:51:f2:ff:80:f3:71:
                    69:06:0a:fb:98:15:1c:a3:39:e6:1a:c0:3c:6c:6c:
                    04:73:3d:d2:de:15:ed:fe:43:22:30:18:fc:01:32:
                    8a:be:07:85:23:1c:17:a2:cd:66:34:f6:0d:32:28:
                    71:e3:0a:01:69:dc:19:1a:a5:5a:19:5f:db:68:25:
                    f6:d7:2c:d8:b3:91:89:22:72:e3:d1:28:4b:1b:5e:
                    17:89:ec:6b:14:06:72:7e:58:0a:88:68:97:d1:ab:
                    98:dc:e4:95:a6:33:2f:98:a5:03:4d:5f:49:66:17:
                    65:61:e6:8c:d1:8b:71:03:58:f3:75:a0:41:b4:96:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:E6:62:13:EC:8C:95:9A:E7:97:7E:2F:87:60:96:09:14:3B:8E
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:71:f3:52:9e:fa:60:d3:b3:0b:d9:ec:12:32:28:5c:dc:16:
         a3:2d:b1:d6:25:6a:9f:b9:95:64:2a:38:aa:7b:91:f7:a3:c9:
         77:22:e7:69:81:64:eb:f8:27:ae:46:51:ae:be:8b:73:3e:78:
         77:43:5e:20:12:6e:5c:27:aa:91:50:fa:40:75:ac:42:32:d9:
         4e:4e:d4:a7:47:f3:86:05:07:49:e5:6a:3e:92:1e:4b:a9:87:
         81:c9:19:8e:0b:49:25:9a:7d:bb:41:6b:b2:7e:51:21:46:7d:
         44:e4:21:30:74:cb:65:41:ad:ba:d4:25:ab:3d:09:b5:75:ca:
         f4:d5:17:83:d7:51:01:87:49:28:f4:05:a9:23:0b:bc:df:1a:
         98:7e:55:ae:ce:f0:d2:18:cf:5b:03:29:15:25:91:33:f1:fc:
         59:ac:e6:8c:77:37:de:bd:fc:33:c1:ec:26:ad:a5:b9:80:de:
         96:1a:57:83:bf:d2:39:9d:19:1d:b3:ee:e3:37:bc:23:d6:8a:
         be:61:ac:a7:15:f5:a7:6c:19:fd:69:45:66:27:49:6a:cf:28:
         a6:b2:ce:29:1b:16:e5:7d:10:07:b7:00:0f:d9:d4:d4:ae:79:
         f3:ce:2c:95:6d:2d:4b:52:db:da:19:33:55:5b:22:9d:c0:9b:
         e9:6f:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:21:46 2026 by rpki-client