Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa
File:                     234A6628299311F0B32D9F82C4F9AE02.roa (raw, json)
Hash identifier:          4ol91FK5FhT76YQiGBIkDLwD1OhBGLevIH7lwfbJqVU=
Subject key identifier:   D0:07:F9:02:C5:07:9D:92:B3:9A:F4:55:F6:5B:E3:33:90:DB:8C:C6
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1F3F
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa
Signing time:             Sat 14 Nov 2026 16:26:57 +0000
ROA not before:           Sat 14 Nov 2026 16:26:57 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9541
IP address blocks:        103.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7999 (0x1f3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Nov 14 16:26:57 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6af88bd1-6863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:ed:a5:9e:df:e1:a2:d9:f8:75:0f:8e:73:
                    a3:b0:99:25:9c:ec:fe:d8:46:81:90:c0:55:99:b7:
                    96:99:e0:4a:5d:61:7b:e7:06:a4:bb:bb:7f:8a:98:
                    f8:5a:a3:17:8a:5f:a9:b5:f4:13:29:0e:b4:e6:3d:
                    51:09:1e:1e:98:7b:5e:1f:09:4e:1a:b8:80:44:d5:
                    9f:a5:c4:e1:5a:8f:28:c2:a6:8d:44:06:10:56:a5:
                    18:43:2f:d1:6c:ec:fe:26:5f:46:18:16:36:58:fc:
                    6b:8c:b9:21:8b:52:39:00:48:15:75:da:0f:b5:b7:
                    a7:8f:e4:72:3e:cb:a0:6a:96:02:5b:bf:fc:a6:82:
                    cc:f5:4f:21:96:8d:76:d8:33:f2:36:c0:d9:88:81:
                    bb:e7:e7:0b:2d:1b:5f:9b:3f:b0:dc:35:0f:43:97:
                    c6:fa:1a:d5:f5:0a:1c:4b:f6:27:71:03:bc:fe:d3:
                    f9:6b:4b:c7:af:05:2a:f6:c7:10:cb:c7:5a:d6:13:
                    91:c6:9f:98:54:ee:9b:45:b6:dd:89:7b:7d:1d:5d:
                    64:b8:f0:c9:d4:aa:f4:f2:8c:24:48:5b:96:92:47:
                    13:d7:a5:e4:47:00:a4:ea:d6:1a:18:c0:23:b3:db:
                    da:56:78:f4:a9:03:e3:e1:7a:80:94:4a:4f:24:ef:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:F9:02:C5:07:9D:92:B3:9A:F4:55:F6:5B:E3:33:90:DB:8C:C6
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/234A6628299311F0B32D9F82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:6c:eb:52:85:24:24:0c:d8:71:3d:5b:90:d6:2f:16:67:
         34:bc:08:52:a8:91:a9:37:fc:8c:43:75:4f:86:9c:28:2d:3f:
         b8:f4:34:85:b8:14:61:f2:ed:d6:43:41:21:d5:23:be:44:44:
         3f:b7:f0:71:31:37:a1:da:9d:82:c3:8a:27:aa:2d:da:3d:a3:
         21:6d:bb:b2:2f:fd:53:a1:bd:2c:09:1c:54:65:09:e0:fd:89:
         94:1c:fd:23:8f:7c:f3:c4:7a:1f:09:24:7a:eb:23:56:0d:ff:
         17:fa:99:4b:b6:49:b0:4a:88:88:53:04:a3:df:bb:95:43:b3:
         70:71:ab:e8:60:90:0d:c4:7f:35:59:8f:65:18:bd:51:7e:49:
         7a:a7:d5:28:70:c1:e1:e1:96:f4:d3:1d:df:63:0e:cb:2f:78:
         ec:b0:3e:7b:11:c3:75:83:4a:9d:0f:4f:e3:c4:b0:a9:7a:73:
         57:e7:c3:d0:bf:8c:b8:0b:03:6d:93:db:7e:c1:d0:af:42:5e:
         05:c7:d1:ae:83:b0:7d:78:97:24:3b:4c:9a:3c:da:21:9d:0f:
         24:62:ef:20:63:3b:0c:4a:83:0a:24:ff:45:00:3b:0a:c7:a4:
         d8:f8:73:ff:59:d6:69:41:c0:c4:db:e5:15:bd:5a:d6:41:e7:
         87:76:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:36:35 2026 by rpki-client