Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/3CEA8114429511F1AFCCDC75B2833773.roa
File:                     3CEA8114429511F1AFCCDC75B2833773.roa (raw, json)
Hash identifier:          kX4lwSq0b8cISkWx2ijvpu5VCo8Hlo55HVdaxhHk2dU=
Subject key identifier:   97:A0:E1:45:6B:3F:CD:EA:AB:B9:17:8E:A3:5B:2F:4B:70:47:C0:20
Certificate issuer:       /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial:       07CD
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/3CEA8114429511F1AFCCDC75B2833773.roa
Signing time:             Wed 30 Sep 2026 22:42:50 +0000
ROA not before:           Wed 30 Sep 2026 22:42:50 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137879
IP address blocks:        131.203.83.216/30 maxlen: 30
                          131.203.83.220/30 maxlen: 30
                          131.203.83.224/30 maxlen: 30
                          131.203.83.228/30 maxlen: 30
                          131.203.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Validity
            Not Before: Sep 30 22:42:50 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd906a-f6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:ad:86:c5:bb:58:63:21:a0:35:48:6d:43:
                    6a:9e:ba:18:1e:83:ac:f8:96:48:fb:f0:cb:8a:83:
                    29:f3:26:55:af:b9:0c:8f:1c:b7:01:89:cd:c5:0c:
                    9b:b9:44:23:60:36:0c:b2:6f:d9:d9:3a:cc:41:ab:
                    68:25:41:4f:2a:6c:0d:01:5c:e2:59:ad:d1:6c:6a:
                    e4:f0:7e:04:58:4a:65:14:d1:4b:ff:f2:13:60:b4:
                    f3:60:80:52:92:38:77:7c:73:c7:58:d9:6e:c3:c6:
                    61:ca:18:26:02:29:3a:44:81:6c:e9:51:23:20:19:
                    63:29:37:b1:0f:1c:61:5f:49:1d:b6:9d:33:cd:e0:
                    56:42:01:12:2d:9f:9c:13:2d:b1:33:ef:54:1d:bb:
                    e3:28:78:de:8f:b5:e5:27:90:fb:66:93:a5:b8:92:
                    97:1f:49:52:5d:61:d4:b9:96:aa:41:ee:a7:0c:2f:
                    8f:51:c9:3b:2d:94:bc:0f:21:2c:88:38:25:3b:6d:
                    9e:8f:8a:73:32:68:34:c3:b7:05:c1:8f:a3:a0:33:
                    05:e3:44:94:52:51:8b:d7:ad:53:fd:7b:ea:9e:00:
                    06:c2:1a:f5:83:a1:73:98:82:98:ff:28:f4:04:64:
                    09:d4:a7:ee:68:1e:bd:85:46:aa:00:59:11:86:24:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:E1:45:6B:3F:CD:EA:AB:B9:17:8E:A3:5B:2F:4B:70:47:C0:20
            X509v3 Authority Key Identifier:
                keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/3CEA8114429511F1AFCCDC75B2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.203.83.216-131.203.83.231
                  131.203.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:4c:43:68:fd:5d:79:90:97:1a:d6:e0:6a:c2:5b:4d:be:
         c5:bb:f6:51:61:b0:4b:df:ad:ff:1c:10:71:4d:42:e7:b9:20:
         91:5d:09:88:25:fb:e7:4b:24:56:a8:25:1d:02:24:29:3a:55:
         dc:09:45:31:9e:56:8a:09:5b:22:6e:9e:b5:46:c5:86:1c:d7:
         04:21:ef:a9:0b:09:51:c7:52:f6:83:cb:c0:22:4d:78:54:1d:
         00:0d:35:17:89:ad:df:93:c9:e6:2b:a9:fb:a1:0a:87:cd:72:
         fa:0d:a8:ec:c8:4d:99:35:71:07:8c:76:74:ed:76:9a:0e:54:
         f0:1b:02:12:ae:3e:3d:a2:ac:dc:65:69:13:86:61:3c:86:c8:
         9a:f2:30:8f:36:6a:68:39:38:1c:e3:1d:3c:cc:71:5c:40:aa:
         aa:a9:d7:3e:14:48:c6:eb:e0:4a:7c:4f:ed:f5:58:5c:d9:05:
         a9:0f:19:cc:d3:6e:e6:dc:16:1b:4f:57:e2:8f:2c:ea:29:8a:
         01:10:79:23:53:f6:71:d5:fd:6f:a0:6a:d8:33:40:d5:7c:f7:
         b7:7a:40:db:7f:60:64:34:13:c9:ad:09:82:52:b6:f6:2d:65:
         07:57:f1:b6:de:19:9e:b0:71:4f:e0:b6:9d:6d:37:6d:dd:39:
         94:d8:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:55:16 2026 by rpki-client