Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File:                     D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          N/sigpChkInkCWBtH6qzvINHRFfaDbO5x7CHklqwPS8=
Subject key identifier:   E4:6D:A5:B0:79:CA:43:74:0E:5E:B7:E7:A7:89:F9:E4:D8:62:F7:8B
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2782
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:34:37 +0000
ROA not before:           Fri 02 Oct 2026 18:34:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4294955555
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10114 (0x2782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct  2 18:34:36 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abff93c-21b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:4d:dc:32:35:39:3f:f3:a0:ee:62:8d:08:
                    de:03:04:96:e6:3b:e9:7f:d2:0e:ce:a1:64:f6:2d:
                    24:47:43:05:63:03:97:3c:7e:f3:78:ba:f6:e5:8a:
                    73:b3:92:94:9f:3e:e8:62:2f:66:f9:1c:f0:3d:a7:
                    77:c5:f0:61:40:e1:94:73:05:4b:19:90:04:42:50:
                    f1:70:60:20:2b:c1:bb:f6:a5:3d:57:cb:16:1c:78:
                    de:75:51:9c:7c:b5:54:28:eb:43:9c:a8:f0:ae:7a:
                    6c:4f:84:52:b4:8a:3b:b3:4b:5c:00:d2:5c:25:90:
                    de:1a:f3:33:62:ea:2e:eb:13:57:55:85:ba:74:30:
                    cb:dd:26:93:8f:ed:27:c6:8d:5f:ae:7f:6e:1f:dd:
                    e6:8c:7b:70:49:9f:7f:fa:5c:50:b8:90:2a:fa:96:
                    a0:ca:ca:42:a1:a1:56:fb:98:93:e5:d9:b0:88:86:
                    28:a1:04:c8:60:fd:54:04:e3:38:92:25:ff:4b:60:
                    81:ce:c7:17:6c:a2:e1:9a:77:ae:b7:e6:85:11:fd:
                    2c:66:91:aa:d4:63:db:82:98:cb:6b:87:f8:21:d8:
                    e7:57:61:b9:9d:63:ce:22:91:7f:e4:75:9e:ca:14:
                    ba:32:fe:eb:0b:19:e6:ac:75:97:42:1f:e8:39:05:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:A5:B0:79:CA:43:74:0E:5E:B7:E7:A7:89:F9:E4:D8:62:F7:8B
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:7a:47:80:51:15:2e:09:ad:b0:30:7c:9a:ee:10:2e:9c:
         f0:7f:29:ce:41:71:3f:98:77:db:ed:dc:2a:a4:70:50:74:e9:
         10:50:44:0e:d7:54:04:ae:8f:07:b6:6d:71:43:5c:a6:26:7d:
         31:d4:67:37:b7:81:6c:c8:f9:dd:67:db:29:b1:ac:4f:95:df:
         e4:4f:3e:e5:c0:1e:99:77:33:64:58:ca:29:10:23:14:66:25:
         6b:5f:b5:6a:72:50:95:dd:96:a4:f5:77:20:6b:07:5e:4d:f3:
         b4:ff:f1:d9:95:07:6a:6f:3d:6a:b5:c8:7c:59:ec:bf:fa:34:
         8d:47:3a:9f:0c:3b:f0:a5:77:b2:ab:6e:d2:dc:71:73:62:dd:
         1e:c3:17:d4:b8:62:d6:28:ee:5c:7b:27:84:64:21:f2:1d:05:
         52:39:f9:c5:a2:3c:97:24:fc:85:2f:f5:a1:8e:30:9c:63:a6:
         9b:80:1c:89:e4:ef:df:33:ef:0a:fc:5f:91:7b:6a:53:95:c5:
         5c:c6:4b:82:ef:75:23:19:6a:60:f9:1d:e6:44:0b:69:7c:c3:
         99:09:0b:32:4b:58:7d:80:bb:14:d4:35:dc:db:e2:5c:5e:45:
         bd:b4:02:00:83:1a:2b:7b:e1:5e:ae:1c:4f:16:53:70:78:61:
         e2:cc:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:43:32 2026 by rpki-client