Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/68FB34D0A53511F194359E934411F970.roa
File:                     68FB34D0A53511F194359E934411F970.roa (raw, json)
Hash identifier:          g1sw3UXmHEKqKS0qgWrZWBCos6PkQ3MTe8W3hqlBy3g=
Subject key identifier:   B8:F7:B5:14:02:25:01:96:AA:C5:B8:05:00:83:0F:80:4B:0B:42:39
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       EE
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/68FB34D0A53511F194359E934411F970.roa
Signing time:             Mon 31 Aug 2026 12:13:44 +0000
ROA not before:           Mon 31 Aug 2026 12:13:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154866
IP address blocks:        103.175.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: Aug 31 12:13:44 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a956ff8-8603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:59:7a:b9:e0:8e:64:0a:34:3e:45:e7:52:
                    b7:24:c9:27:d6:ab:ae:3a:40:b5:6a:42:52:82:a2:
                    b2:4e:01:94:9c:0e:37:17:7f:07:6e:d8:c0:7e:96:
                    c9:3d:b9:57:78:ae:4b:de:6a:6e:6e:d1:d5:c0:fb:
                    5d:3c:2f:27:b3:ff:5f:53:52:43:c7:e1:82:b1:c5:
                    c1:d5:3f:98:5d:a3:f6:be:47:8b:c8:7c:84:56:a7:
                    16:3c:c4:1a:06:2d:15:18:f9:a3:6c:82:d5:b0:50:
                    00:61:0d:f0:58:fd:12:8c:1d:ad:8d:5c:25:20:9f:
                    af:1e:4d:67:29:5c:5c:25:90:e7:1c:36:e9:27:4f:
                    46:3f:69:bc:85:a9:b3:78:6a:36:7e:69:13:a7:59:
                    be:d2:62:43:14:48:8f:50:57:19:89:13:52:54:cf:
                    a1:dd:a4:44:c3:df:7d:d8:a9:c3:19:28:e7:08:cc:
                    8c:df:55:d2:e5:c0:01:09:0d:ac:b4:95:16:8f:61:
                    fb:95:d3:32:e9:70:e9:26:a8:d1:a0:cb:85:23:c8:
                    cb:83:40:a2:70:d0:ff:70:3d:e7:39:d2:53:73:86:
                    47:f6:eb:e0:37:41:37:10:f2:6c:58:ab:1d:73:a1:
                    6f:f2:a0:0d:62:a1:78:2b:80:f6:1c:44:cd:8e:f5:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:B5:14:02:25:01:96:AA:C5:B8:05:00:83:0F:80:4B:0B:42:39
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/68FB34D0A53511F194359E934411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:82:7c:0f:38:3a:fa:89:c8:6f:60:39:c6:e8:8f:75:cb:30:
         81:ed:7e:9f:47:4f:4a:65:48:49:96:d1:46:84:f9:bc:82:fe:
         97:74:8a:43:18:bd:8d:a9:da:b1:e8:50:3d:77:f4:e3:ba:61:
         ff:27:b0:72:41:2e:43:9f:b7:5a:a3:28:07:54:06:aa:94:bc:
         89:0a:c2:1d:b9:96:57:0b:64:45:af:e5:f8:d2:90:8f:12:aa:
         80:fa:c2:a8:69:a2:a5:91:39:f8:f0:b1:16:d6:e6:e7:cb:1d:
         e8:b5:1e:ef:a8:3d:48:64:76:47:5f:70:e0:c4:33:59:71:94:
         17:7a:6d:ba:02:e5:02:3e:5b:38:ce:16:bc:ff:01:f9:97:a3:
         43:fe:1e:36:4c:ea:96:52:f2:b2:d7:95:44:0c:91:f4:a5:ea:
         fb:e2:6b:7e:60:bb:c6:d3:6e:1c:a2:c6:1e:43:69:16:2b:76:
         45:66:eb:2b:c8:9f:a3:f4:99:85:fe:db:4d:9a:7c:8e:7e:f9:
         24:66:9a:63:f2:c7:a8:e8:31:43:73:de:46:40:cf:58:27:25:
         0a:a0:3b:6a:00:2e:92:e8:1d:91:25:92:61:b0:25:10:5c:7a:
         35:b5:e0:39:00:ce:dc:2a:b8:e0:cf:78:09:a2:0a:74:0c:92:
         c5:81:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:46 2026 by rpki-client