Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
File:                     0578A814931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          q1mJL9knt7itak+ETN/Gh4A8jD2udcFk9MPz3NjXeB8=
Subject key identifier:   BD:35:7A:91:CC:E1:8E:C1:26:5E:35:2B:8D:2F:0E:9A:E3:78:4B:15
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2786
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:34:43 +0000
ROA not before:           Fri 02 Oct 2026 18:34:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4294967294
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10118 (0x2786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct  2 18:34:43 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abff943-4d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:ba:35:24:ad:22:26:11:74:de:8b:3a:27:
                    0b:79:7f:c4:de:39:4e:df:57:8a:68:52:1f:e9:03:
                    de:fa:ab:e1:d7:01:d0:67:06:50:62:a3:ca:7b:8c:
                    f0:f0:a6:86:5a:68:c5:9c:2e:4f:70:c4:2d:19:9a:
                    00:c9:22:e7:53:69:56:82:ff:81:6a:49:e3:f2:5a:
                    34:da:19:4f:28:a9:0f:be:51:d0:6b:8c:42:60:b9:
                    01:b9:92:08:46:e1:e9:83:09:12:f6:ab:d6:70:8d:
                    d3:5f:60:b3:f1:1d:e0:b1:69:67:db:09:99:27:88:
                    fd:88:0a:39:69:bc:0b:bb:b2:2d:06:b5:6e:5d:99:
                    4e:79:cb:64:f9:b9:e7:b3:89:fa:e2:25:c5:4c:fb:
                    ed:66:82:b6:97:49:20:18:02:ed:b8:98:02:ec:b2:
                    04:e5:c0:48:bb:3b:d7:31:3b:f2:ba:66:c2:d9:1c:
                    69:5d:0d:bc:26:af:3a:20:da:0e:3b:31:85:87:9e:
                    d1:06:82:0f:05:44:96:a9:3b:cf:87:17:c2:70:a4:
                    74:1e:8c:34:14:31:40:7c:4d:43:a9:78:1a:40:c0:
                    80:54:11:89:fb:e3:2d:62:cb:3e:56:44:b0:22:18:
                    a3:55:4c:08:76:fe:e9:56:23:84:92:42:4e:54:1e:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:35:7A:91:CC:E1:8E:C1:26:5E:35:2B:8D:2F:0E:9A:E3:78:4B:15
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:71:23:fe:af:65:ee:ce:c4:2e:4f:6a:7b:8e:ad:5e:29:
         4f:51:e3:8a:a3:1b:d4:7b:eb:08:2c:07:ce:b6:51:cd:cf:85:
         95:cf:67:30:b9:85:d9:08:42:f7:ff:88:df:27:5c:ef:1d:76:
         7f:45:c4:3f:ea:ed:a5:ea:c4:87:fc:47:04:2e:75:09:7c:27:
         e9:54:34:76:ae:ad:a5:9a:e1:78:75:30:99:94:4c:c3:6c:7d:
         af:b4:84:91:22:27:c5:e1:29:42:4f:73:fd:2d:0c:f7:d6:4b:
         f9:72:23:c6:83:73:7b:3c:f4:ea:f3:b2:41:70:19:fe:3d:95:
         b2:3c:1d:06:2d:83:2e:f9:8c:ea:fd:7e:be:55:06:c0:c8:b4:
         51:5c:4e:5d:38:d9:08:62:df:dd:da:bb:ee:6c:66:29:7a:7b:
         b0:10:7f:ec:8c:59:aa:a7:d1:6c:46:1f:3c:b2:f0:e8:7c:a7:
         7b:f6:fe:c0:42:7e:ad:db:38:62:82:99:92:aa:39:8c:13:9b:
         cf:d2:fd:45:b8:8c:a8:6d:e3:7e:7d:15:6f:d2:dc:60:31:ab:
         d9:ac:2c:df:dc:00:33:a8:5e:aa:fc:0b:34:a4:48:31:2a:5e:
         e9:5b:e1:69:87:19:97:99:a5:cc:78:83:a0:1f:43:23:5a:36:
         fb:24:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:28:54 2026 by rpki-client