Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa
File:                     73DDDA0206FF11ED8C6B565FC4F9AE02.roa (raw, json)
Hash identifier:          WbN70PvdDWv4jvLtRJ5S9uLwxSwxMKfQ8G7JrhEau+o=
Subject key identifier:   78:AA:50:CE:C7:D4:D9:9E:B5:FB:27:1D:27:79:85:FB:6A:C2:97:77
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       08D2
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa
Signing time:             Fri 09 Oct 2026 01:44:04 +0000
ROA not before:           Fri 09 Oct 2026 01:44:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4739
IP address blocks:        203.10.1.0/24 maxlen: 24
                          203.215.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: Oct  9 01:44:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ac846e3-fe8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:c3:ed:67:b4:50:3f:8c:97:ad:e1:57:8f:
                    8b:a6:96:3b:da:b5:d9:05:79:0a:dc:06:f9:e3:81:
                    d8:ff:30:72:c2:5f:d1:cf:22:43:ef:61:e5:53:1d:
                    ee:df:c2:28:d6:15:58:96:7a:97:e7:9e:f8:68:14:
                    37:ae:0d:c9:e5:3c:16:ec:58:dc:1a:27:62:8d:93:
                    b6:e5:f3:7c:7e:95:c3:16:ef:26:91:b8:3b:fd:46:
                    34:c2:14:81:02:df:ab:e5:6b:d1:23:a8:3c:86:da:
                    06:fe:ad:ad:1f:8c:50:d8:51:53:8b:e3:13:38:c6:
                    df:af:45:0e:c9:74:01:16:82:b3:60:15:21:f3:4c:
                    ab:43:02:d8:ab:d9:72:65:d9:4c:c2:0a:d9:ab:15:
                    ca:23:69:43:06:db:ec:38:f0:ed:ea:ed:a0:86:52:
                    6f:c1:84:8c:09:5c:21:ca:0d:52:4e:e4:ee:2d:cb:
                    4a:a0:4f:97:f1:64:aa:f0:4d:ee:d3:7e:29:2b:11:
                    b2:83:5a:ee:22:bc:79:5d:7d:45:92:1e:05:f4:7c:
                    b1:34:55:87:2f:91:b3:79:2f:af:bc:89:99:10:5d:
                    05:f7:96:c2:77:c7:3d:31:82:c2:6f:18:a3:0c:4e:
                    e2:6e:19:e1:f5:5a:37:81:f6:b3:d4:14:a2:53:3a:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:50:CE:C7:D4:D9:9E:B5:FB:27:1D:27:79:85:FB:6A:C2:97:77
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.1.0/24
                  203.215.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:4d:a0:03:e7:1f:f3:18:08:2f:d7:3a:fd:52:91:c2:1e:
         0a:98:12:59:de:9a:e6:46:8c:cb:3c:8b:f4:3d:14:8f:b1:5d:
         10:7b:39:61:ac:40:c1:9d:c4:49:86:92:54:5d:c7:f1:83:f4:
         2a:07:f9:4d:00:29:b3:dc:b7:b1:c2:67:41:e3:67:f6:63:98:
         9c:d6:e0:bf:25:92:30:95:7d:1b:84:a2:41:db:70:36:6e:80:
         2a:d8:a8:4d:72:5e:79:9f:5e:04:f5:fa:d0:d2:ce:bc:95:85:
         7e:e0:db:e6:1c:cf:17:90:0e:4f:f0:c9:78:3c:20:92:5f:a0:
         dd:37:77:d2:37:56:ca:94:dc:95:72:23:9f:9c:83:98:77:3e:
         bb:dc:64:3d:3d:fb:e5:b0:ed:ef:bd:82:72:b9:f6:59:ad:bf:
         e7:a8:15:7f:e1:eb:57:14:75:40:e2:1c:36:a3:75:89:a4:cf:
         c1:13:ec:be:00:a2:a7:eb:cd:e6:7d:28:30:84:cf:47:77:be:
         90:99:0e:c4:e1:ee:47:f7:5b:91:93:c0:c2:07:ae:c2:06:7c:
         ab:97:0c:46:4f:71:6c:ee:98:b8:8c:a4:9a:a8:0c:98:4d:fe:
         64:25:9a:47:3e:7e:f0:d0:9e:38:82:6d:9f:a2:f7:63:78:91:
         22:54:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:15:59 2026 by rpki-client