Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
File:                     D08850D2B71411ED98AFCC20C4F9AE02.roa (raw, json)
Hash identifier:          LMztLhlx+ShiOa1cqUXo7GNk1BCJPOMx5hzXXsCRBFk=
Subject key identifier:   94:1E:86:6B:CB:A5:19:EF:C2:94:F2:48:72:76:47:33:9A:C5:BF:0A
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2781
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:34:35 +0000
ROA not before:           Fri 02 Oct 2026 18:34:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24242424
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10113 (0x2781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct  2 18:34:34 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abff93a-b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:3f:47:4a:69:80:53:2c:6e:b1:a8:51:b2:
                    34:b8:9a:6a:59:e2:6c:e7:cb:e2:29:7e:71:c5:e4:
                    e7:9c:bc:f1:59:82:1f:b2:68:ae:11:97:80:e8:a0:
                    67:b8:90:4a:be:03:57:16:c7:99:b3:5f:d7:dd:e8:
                    e3:90:ce:08:81:8c:9f:a4:45:f9:ed:4e:9e:39:11:
                    50:40:ae:44:c0:d8:7f:2c:8c:5d:33:1b:e9:47:3f:
                    a4:d9:b5:dc:d0:ec:ac:41:9c:1d:d3:79:72:dd:b0:
                    bf:aa:18:d6:6e:dc:8b:dd:4d:90:7d:96:d8:b4:6c:
                    a7:a1:47:ff:f9:28:5e:21:c6:f1:28:36:90:41:b8:
                    e5:35:b0:6e:4f:83:b3:fa:e5:3e:3d:c9:5a:c7:2d:
                    e8:3e:f4:a8:76:02:ae:72:48:52:12:ab:50:a5:22:
                    6d:8c:ac:01:6f:48:47:34:73:6d:b1:2a:82:4c:2d:
                    13:3d:62:55:1c:55:49:b4:8f:b8:d7:56:63:bd:24:
                    04:7e:27:a6:6a:0f:dd:01:94:b9:a0:2b:25:77:76:
                    8b:d9:99:d6:25:5e:6e:db:de:65:87:7c:95:2a:16:
                    7c:a6:e3:8b:31:d4:03:69:2c:5a:0d:5c:12:b5:03:
                    92:89:2c:b2:d9:c7:37:3f:6a:46:f1:4d:00:a4:e3:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1E:86:6B:CB:A5:19:EF:C2:94:F2:48:72:76:47:33:9A:C5:BF:0A
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:fc:e7:05:af:85:78:0e:78:0f:64:15:b4:d5:75:3a:62:
         68:a6:f7:dd:8b:88:c2:f7:05:f8:23:ed:d4:7e:68:e4:69:ac:
         a9:55:75:18:ac:10:8a:96:f8:8f:3b:dc:6c:a6:2c:70:46:46:
         07:39:13:5c:05:85:3a:da:8d:91:4d:89:b8:40:53:99:27:95:
         eb:ab:aa:44:c8:96:c8:79:40:68:fe:bb:35:2c:80:68:4a:f5:
         d8:7c:62:b1:5b:2a:9c:96:b2:67:c8:49:03:a7:9d:d7:18:a2:
         17:d0:0b:f8:25:37:43:a1:ca:24:9b:5a:b7:51:e6:8e:26:84:
         ea:08:ee:26:3d:5a:b5:db:c7:26:4d:27:ed:a6:cd:a2:aa:c7:
         d6:6c:30:c6:eb:66:69:9c:16:ba:28:b9:80:a2:8f:49:96:b2:
         e9:cc:b3:a6:06:67:f6:af:62:1a:fa:f7:23:85:49:e8:28:33:
         4d:42:32:c7:e0:25:94:ec:c2:25:6c:fb:ee:6b:b6:a7:09:2e:
         84:e5:04:b8:a4:cf:21:4a:bc:da:45:ba:3f:38:cb:e2:ab:a6:
         c8:9b:6d:04:9d:e0:2e:f9:61:f8:7a:2b:8d:03:09:36:e8:af:
         e4:19:3b:6e:a8:18:03:c4:c8:5e:dc:8d:fd:63:46:29:eb:cd:
         d3:3a:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:33:10 2026 by rpki-client