Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa
File:                     F011FBC4CBDF11EAB6162265C4F9AE02.roa (raw, json)
Hash identifier:          8EHV/VMSXrOjjAZpqhkbeICGznRfE8ag9yaU9XrZYcM=
Subject key identifier:   5C:F5:31:14:EE:26:82:9D:2B:D2:B7:99:E6:92:71:6E:8B:47:F0:89
Certificate issuer:       /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
Certificate serial:       093A
Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa
Signing time:             Sat 22 Aug 2026 20:40:34 +0000
ROA not before:           Sat 22 Aug 2026 20:40:34 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134555
IP address blocks:        103.97.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl
                          rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54
        Validity
            Not Before: Aug 22 20:40:34 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8a0942-819f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:8d:83:db:9b:26:4f:ae:29:d2:45:a8:e6:
                    6f:5c:d5:93:95:7a:98:df:53:cf:ca:e7:1d:b3:2d:
                    c8:eb:88:23:31:34:3f:e7:81:dc:45:83:7f:ce:f5:
                    45:f5:a5:08:dd:ab:2c:c3:fb:82:81:2d:e9:13:9f:
                    d6:82:c7:f2:fa:c0:0d:c2:82:1d:08:52:ec:96:6d:
                    3e:b2:8b:50:5a:bc:a8:02:eb:be:ee:cf:57:ae:eb:
                    3a:1d:52:97:df:a1:b8:1f:fc:b8:ff:c8:25:7f:a0:
                    af:a2:cd:cb:73:e3:41:16:99:91:05:1a:88:a5:ff:
                    06:62:ca:db:1a:19:db:36:55:8c:57:a8:5e:44:31:
                    cc:4a:1f:f1:a8:6a:e7:1e:87:34:cc:ed:77:e1:7f:
                    97:ed:04:3f:5f:eb:df:21:62:7d:e7:2f:c9:88:8b:
                    f2:12:64:66:a9:93:3a:20:3c:a5:9a:a8:18:51:fe:
                    68:08:68:1f:36:31:c5:fe:e5:73:3b:0b:b9:52:3b:
                    07:65:ce:2d:b0:02:5f:b8:26:ff:38:69:8e:eb:26:
                    da:76:d4:ef:ef:e6:cc:a7:c2:bc:3c:2c:44:b7:2e:
                    9d:2b:58:cc:cd:e4:84:a0:8f:3d:c8:3e:cb:7f:ef:
                    29:bb:66:5c:96:bd:77:97:bb:bc:e1:aa:7f:36:3a:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:31:14:EE:26:82:9D:2B:D2:B7:99:E6:92:71:6E:8B:47:F0:89
            X509v3 Authority Key Identifier:
                keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/F011FBC4CBDF11EAB6162265C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5e:da:8e:f9:98:bd:f6:66:56:b9:76:41:d7:2f:3e:b7:22:
         0c:13:d2:8a:14:a9:48:a7:98:c0:1d:a7:07:6a:64:93:e1:5a:
         38:3a:e8:3c:93:79:80:0e:8c:3d:53:0d:10:98:55:fe:8e:f5:
         e8:63:56:1e:c4:0c:1c:7a:92:8b:d8:f0:56:86:89:ab:3c:be:
         4c:0b:a1:af:c9:a7:c6:92:e7:04:7f:df:24:08:43:d0:f1:ea:
         23:3c:82:e9:ca:aa:cb:25:bd:c7:33:b3:97:b0:64:13:85:fe:
         fd:03:6e:e3:5b:26:e2:95:a2:d9:00:e5:10:31:bd:bf:80:eb:
         8a:29:77:d9:a0:2a:7b:50:b6:eb:42:68:d5:48:00:31:4d:7a:
         10:0d:85:db:6d:7d:71:ed:92:bf:88:08:07:ab:68:dc:85:fb:
         87:c7:d5:8a:0e:3f:a5:27:eb:63:90:3f:89:b0:36:d4:92:0a:
         c4:2f:07:b8:be:9a:86:e7:54:91:d9:dc:e5:a1:b6:73:71:b8:
         3f:69:9f:96:fa:a8:25:d0:5e:97:e8:b6:aa:1e:fe:6d:7a:6a:
         25:24:c4:08:fc:fa:36:28:03:26:38:fe:c1:fc:a0:74:e1:0c:
         11:da:0a:01:58:9e:f7:fe:c3:6b:c5:85:9a:1f:ec:37:10:22:
         7e:12:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:59 2026 by rpki-client