Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
File:                     C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (raw, json)
Hash identifier:          4OkyBwmRIM7XSlHuA0mZ17uCQ8kxzwQYFaT6wsYTPlw=
Subject key identifier:   7F:F5:0B:C1:D6:06:5B:28:E6:A5:00:B2:C0:D6:BE:C6:CB:B0:83:2A
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       277F
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:34:31 +0000
ROA not before:           Fri 02 Oct 2026 18:34:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139038
IP address blocks:        103.138.210.0/24 maxlen: 24
                          103.138.210.254/32 maxlen: 32
                          2001:df0:5580::/48 maxlen: 48
                          2001:df0:5580::/54 maxlen: 54
                          2001:df0:5580:800::/54 maxlen: 54
                          2001:df0:5580:1000::/52 maxlen: 52
                          2001:df0:5580:1000::/54 maxlen: 54
                          2001:df0:5580:2000::/52 maxlen: 52
                          2001:df0:5580:3000::/52 maxlen: 52
                          2001:df0:5580:7000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10111 (0x277f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct  2 18:34:31 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abff937-7e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:55:82:8b:1a:2b:a5:f3:be:12:ac:84:9d:
                    e8:a7:81:d9:a5:be:c4:64:91:1e:1b:69:7f:f8:55:
                    0b:41:b0:77:ae:5f:37:7e:99:fc:24:1b:67:a7:e3:
                    06:2d:d2:d0:40:af:ba:20:27:cf:ca:58:a0:22:0f:
                    e1:04:30:35:c5:5f:98:82:9d:33:24:68:3f:7c:2e:
                    62:2e:92:bc:3d:69:86:f7:65:43:54:b8:a8:fb:6f:
                    ce:7d:2c:78:af:a2:e2:71:f6:ac:9e:d2:20:24:cc:
                    c6:7d:fc:0d:c8:3b:55:43:74:ee:fe:07:84:bc:ad:
                    91:d7:e8:5e:0a:44:4b:a6:60:3a:8c:b8:a7:65:d4:
                    d9:37:60:d0:31:36:1d:da:ef:11:14:64:29:7f:67:
                    b4:6b:31:2f:9d:f2:0e:98:fa:59:d9:71:46:f8:99:
                    3f:d4:6e:a8:6d:04:0e:18:71:62:e5:1d:ad:c4:23:
                    7a:9a:c3:8c:33:6b:59:a5:08:ea:af:25:7a:a8:05:
                    27:0b:4e:18:ce:5e:10:1c:e6:23:fa:45:e1:93:70:
                    02:fc:28:1d:d8:46:9d:ec:39:48:cb:59:31:00:f3:
                    25:9c:8d:ad:66:c3:0c:99:af:2e:ef:26:98:48:46:
                    90:85:6d:30:8a:54:e7:b9:ad:00:77:ff:44:81:3e:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:0B:C1:D6:06:5B:28:E6:A5:00:B2:C0:D6:BE:C6:CB:B0:83:2A
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24
                IPv6:
                  2001:df0:5580::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:63:f6:41:2b:51:3b:7c:b1:89:9b:cd:5a:a7:60:ea:8f:
         70:c2:24:9c:93:c7:4a:ff:00:20:ae:d1:0c:98:c1:b4:5b:e4:
         08:58:d4:8e:49:69:b4:d1:54:a4:80:7c:87:c3:ba:09:38:2e:
         2f:15:ec:fa:b6:04:bd:6e:d5:ea:9f:d0:be:56:2a:dd:3f:ef:
         14:60:20:ae:7f:53:dc:54:4c:a5:93:6b:9b:88:93:36:da:83:
         64:32:5c:82:48:fe:8c:6e:31:b3:49:96:4d:7e:d3:6d:a4:ab:
         04:e7:dd:5a:50:77:3c:1d:8e:3a:33:ac:dd:f5:39:70:28:35:
         f9:56:22:4e:11:51:ec:9f:66:14:75:f1:ac:5e:0b:c3:50:bb:
         bf:8d:99:66:93:f3:00:26:1d:59:7d:cd:b0:4e:0b:82:0c:78:
         dd:b6:98:74:bd:2c:eb:a9:3e:ae:b4:4e:5d:d0:7e:98:3b:a7:
         16:fb:cd:5d:16:7f:aa:5a:d2:e5:cd:35:68:01:6d:a7:d2:55:
         65:60:50:97:34:66:5b:ab:0d:1f:ca:52:82:1e:65:36:5a:9b:
         dc:c2:ef:41:9c:c4:b7:f0:a5:6c:94:91:7e:18:8a:76:36:82:
         9c:45:0f:71:b0:71:78:9d:fe:9f:d3:77:b1:9b:4f:0c:86:a2:
         a4:2b:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:43:14 2026 by rpki-client