Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/C4CBEB0CDB8511F1AF46868D2D66CEF9.roa
File:                     C4CBEB0CDB8511F1AF46868D2D66CEF9.roa (raw, json)
Hash identifier:          /wpgaIGj4Cei8b/23k0Z42BvClHpfurKEpV7Puq9lvE=
Subject key identifier:   29:3E:E8:48:3B:28:1A:9B:AE:E1:3C:DD:B9:2A:B0:64:36:35:14:F4
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       1515
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/C4CBEB0CDB8511F1AF46868D2D66CEF9.roa
Signing time:             Sun 08 Nov 2026 15:05:00 +0000
ROA not before:           Sun 08 Nov 2026 15:05:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136038
IP address blocks:        103.64.12.0/23 maxlen: 23
                          103.78.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5397 (0x1515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Nov  8 15:05:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6af08f9c-6001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:85:f3:e3:4f:9b:90:ce:2c:9f:dc:fa:be:
                    f9:a8:81:eb:bb:0c:ea:92:ab:77:e7:4e:8b:70:94:
                    0c:31:b2:82:99:0a:9c:83:81:26:46:4d:c8:3b:84:
                    6d:c2:ff:24:90:5a:3f:3d:0b:87:75:a0:48:a9:a6:
                    99:f5:4f:a1:a3:45:88:fd:d4:04:7a:d0:c2:d2:a4:
                    12:69:27:59:61:60:2b:6b:a9:4f:c1:5c:ed:d1:f0:
                    bd:e3:36:3d:1d:0c:00:cd:b2:dd:9a:cd:7d:65:ae:
                    3b:25:fe:8e:31:2e:3e:73:c7:a7:b3:0a:14:31:47:
                    fe:65:30:c0:0b:27:3c:35:97:d4:b1:75:a6:50:9e:
                    ec:52:c5:f9:87:2c:33:84:40:48:5e:86:d3:19:27:
                    58:c3:b5:ba:37:84:67:ad:5c:b1:7f:af:30:10:76:
                    97:64:68:e4:1d:89:a7:05:10:92:e9:5f:f2:b6:dc:
                    36:a5:3e:20:28:8c:b8:e9:f3:5b:3b:e4:37:32:63:
                    b6:dc:3d:f1:6b:15:3e:3f:15:c5:5a:88:32:93:92:
                    65:29:3a:07:a6:68:e9:3d:cf:ef:67:9b:2c:84:7a:
                    cc:c9:7e:00:09:5d:86:a9:fa:65:c0:6f:e2:36:12:
                    ab:a9:66:62:b8:cd:49:f4:14:c9:47:b6:8e:f9:0c:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:E8:48:3B:28:1A:9B:AE:E1:3C:DD:B9:2A:B0:64:36:35:14:F4
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/C4CBEB0CDB8511F1AF46868D2D66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.12.0/23
                  103.78.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:43:65:e7:b8:ae:fd:02:18:79:3b:1d:bb:c9:f6:64:49:18:
         8d:9e:86:53:32:59:aa:86:df:58:d3:fc:d1:33:7c:7e:cd:c7:
         09:5e:4c:fd:43:75:88:d9:57:4e:57:29:65:d3:75:55:35:b7:
         6e:3a:18:25:81:e8:c0:32:a4:e4:e8:48:03:e4:8c:8d:62:2d:
         7e:d3:65:9a:9c:a1:10:2c:ed:75:bd:a1:41:a3:e0:1e:d5:ca:
         4d:31:0e:59:17:b8:2e:2c:5e:3d:49:17:54:4c:66:60:66:e8:
         95:da:9e:c5:1f:77:f1:82:45:a1:65:a8:2e:a2:97:e6:c1:ac:
         91:e7:9d:33:1d:78:d5:1f:82:74:0c:d2:7c:90:07:fa:3a:28:
         ef:3c:64:cd:6f:49:34:d4:3a:2f:41:98:fd:b9:55:73:fd:d1:
         e4:6a:fe:00:e0:55:e0:81:f9:eb:7f:4f:ee:cf:57:35:64:fc:
         df:77:e0:b0:93:cc:a4:6c:da:ca:99:9a:16:7a:14:16:8a:fc:
         8c:1f:67:f9:62:36:78:60:8f:74:af:13:41:4e:68:bd:6f:9d:
         d3:ac:66:e8:5c:f2:21:8e:c3:88:f0:df:b0:06:57:ac:f6:d0:
         0c:bb:f2:f4:b8:be:06:25:aa:b4:67:0c:41:a1:ad:b5:c6:59:
         d6:6f:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:07 2026 by rpki-client