Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/95693F483EFC11F19C051D00C6833773.roa
File:                     95693F483EFC11F19C051D00C6833773.roa (raw, json)
Hash identifier:          FvcTIUqCk8IaKULOCCc+8nkYabbY0kOvHe1B0EDMOSI=
Subject key identifier:   B4:BE:AF:6E:F4:AB:D7:74:25:0C:D7:D0:C8:C5:E7:86:F5:56:DB:4A
Certificate issuer:       /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Certificate serial:       0D91
Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/95693F483EFC11F19C051D00C6833773.roa
Signing time:             Tue 08 Sep 2026 18:36:24 +0000
ROA not before:           Tue 08 Sep 2026 18:36:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135377
IP address blocks:        103.98.16.0/24 maxlen: 24
                          103.98.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
                          rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
        Validity
            Not Before: Sep  8 18:36:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa055a8-b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:de:16:b2:e2:86:28:2a:9c:1f:a1:6f:a1:
                    a2:12:e6:84:66:14:55:4d:36:52:7d:b9:9b:e5:50:
                    c4:87:27:66:3a:18:86:ae:55:6f:bf:96:62:e6:98:
                    63:d6:df:23:93:03:ce:68:17:01:45:c1:68:75:5c:
                    fd:29:07:fb:03:d2:a9:73:75:55:93:bd:f2:d2:c6:
                    24:22:72:89:8e:92:fe:a9:bf:b6:0d:08:62:54:33:
                    50:2f:72:98:5f:4d:83:74:99:ef:33:bd:3a:cb:a5:
                    5e:ea:a7:8f:d9:e2:cc:ff:5e:a0:94:d3:26:29:b7:
                    34:e0:59:af:d3:4d:7a:c6:92:a5:53:ec:ee:44:44:
                    3e:21:0c:75:d6:c9:f4:45:d0:a3:30:8e:b8:b8:e9:
                    b7:8c:93:d8:fd:e2:d3:71:01:a4:a8:ac:29:c5:83:
                    07:93:cd:82:d9:3c:bf:0d:89:be:ca:32:87:d1:82:
                    6c:e1:e3:57:b0:c1:d9:25:27:86:14:0b:ac:db:a8:
                    3d:d8:bc:53:b1:c3:62:0c:d5:eb:36:bc:1f:15:f7:
                    62:31:04:bf:81:ed:ac:94:7a:b0:32:02:65:34:cb:
                    6a:10:10:9d:8f:a4:ee:2b:d0:17:21:f8:4c:dc:65:
                    0d:73:7d:da:aa:16:27:c5:0b:00:b2:a2:94:c5:04:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:AF:6E:F4:AB:D7:74:25:0C:D7:D0:C8:C5:E7:86:F5:56:DB:4A
            X509v3 Authority Key Identifier:
                keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/95693F483EFC11F19C051D00C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:1e:76:70:38:4c:81:e9:fb:d6:a5:1a:aa:6f:0a:67:98:
         90:27:b2:b9:88:24:77:08:46:6d:2b:1b:2f:ac:b0:46:ad:5e:
         ee:0f:3b:af:bd:cb:ca:11:e0:6f:89:45:5c:f2:dd:fa:8f:4a:
         5b:ee:90:aa:54:51:f5:9c:34:02:7d:da:4a:be:7f:27:7b:cb:
         8e:b6:24:8a:2d:ed:a5:e5:f7:11:b2:31:8e:55:2b:1e:be:32:
         ed:f6:ee:eb:a9:6e:94:f1:ce:8e:7d:cf:f9:75:d7:06:56:90:
         c1:18:6e:ba:1b:e3:fc:6c:4d:64:10:4d:cd:42:12:01:fd:66:
         1d:2c:33:87:48:17:95:3c:00:c8:11:5b:dc:3f:3f:d6:fb:6d:
         12:77:e0:53:64:a6:0b:90:a2:de:59:47:83:d5:51:e6:d0:1d:
         83:34:90:63:be:33:24:b8:59:57:ef:69:43:3c:6f:3b:13:0f:
         9a:80:e9:7f:ec:d1:62:5d:37:c7:ba:0e:3a:21:c4:e6:63:3c:
         37:4b:0e:f3:46:cc:6b:1b:fe:1d:c6:b8:3f:9c:75:6a:e3:cb:
         94:e4:97:ba:cd:3e:91:67:b1:46:87:f0:dc:2c:dc:4e:fe:01:
         fe:8a:7f:2a:30:81:9d:0e:7e:c1:08:40:d2:51:35:24:f0:fc:
         99:1f:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:59 2026 by rpki-client