Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
File:                     78AFDDB84A8211EB8760D667C4F9AE02.roa (raw, json)
Hash identifier:          4/IcjjLj330SqD/Q7AAdU1kh1KBOFfWc4SaKg7w4SQI=
Subject key identifier:   9C:CF:58:B5:DC:03:2F:8C:BD:06:68:D3:68:CB:62:D4:7E:81:9A:27
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0886
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 21:41:33 +0000
ROA not before:           Wed 16 Sep 2026 21:41:33 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 16 21:41:33 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aab0d0d-cff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:32:08:c8:59:e9:85:11:40:3f:2f:ec:e2:
                    20:a6:15:64:f2:92:7d:55:83:f2:ee:33:04:b0:07:
                    17:89:95:86:a0:ba:e0:f3:65:05:7c:e5:a9:d8:14:
                    d2:ea:ac:1b:2d:e0:ff:a6:0b:fd:59:b9:bc:49:02:
                    8e:0f:68:94:da:d0:f2:89:33:3b:7f:e2:34:f8:25:
                    f1:eb:3f:38:51:64:84:17:40:b8:a3:7d:fe:39:c4:
                    bf:55:bd:d5:1c:b9:e1:66:3c:0d:9e:6c:ab:ed:0d:
                    be:c9:ad:dd:86:3c:60:23:b9:f9:3e:f9:da:42:b6:
                    70:09:be:0c:a8:e3:11:c9:5e:ba:bd:b2:a1:75:88:
                    6a:b6:77:c8:72:44:13:10:61:1f:af:45:87:7b:16:
                    4d:5e:2d:c7:52:58:50:32:8c:d6:e1:90:e8:aa:2b:
                    11:78:c5:3a:d2:ce:ff:f1:6a:2b:48:d2:4f:59:bd:
                    79:57:c5:3d:57:f5:84:26:e0:09:58:2c:41:e9:34:
                    06:8c:35:ee:2c:37:d2:d3:37:19:ff:64:13:e1:5d:
                    4f:a1:2d:e4:1e:61:df:c5:ce:b3:dd:67:cf:78:87:
                    11:38:9c:c4:c6:81:c1:8c:b3:50:82:33:6c:c8:44:
                    65:e7:3e:39:53:0f:96:5d:04:52:98:e4:19:39:c1:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:58:B5:DC:03:2F:8C:BD:06:68:D3:68:CB:62:D4:7E:81:9A:27
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:20:5e:94:f8:60:41:2b:c8:62:68:dd:7e:3f:a7:63:a7:
         60:a1:e3:16:fd:a6:d4:c3:63:ee:67:5a:75:4e:2d:8f:56:5b:
         f9:8c:56:a9:59:c5:6e:35:2f:d1:02:40:ce:0c:97:98:a1:ca:
         6f:7d:ac:53:42:77:a9:91:01:8b:db:f4:47:4e:3f:d7:9a:32:
         cb:81:68:a3:d3:42:73:d3:7b:f0:49:76:1e:dc:2c:43:7b:51:
         83:96:72:eb:60:ed:6d:21:66:8e:d7:05:2a:af:ab:c6:0e:9b:
         1b:13:ea:22:1f:e1:05:27:2e:64:a1:48:e0:82:d6:b0:44:c5:
         7d:14:59:d0:71:cf:62:0c:c6:ac:f5:e9:9c:b8:5f:fc:7c:e3:
         a0:e0:97:46:e7:f5:db:6a:e4:84:cf:a2:f4:36:43:08:20:12:
         4e:5d:e9:0e:1e:bb:b3:cc:80:0f:3a:ff:9f:b0:92:50:ba:38:
         e8:0e:2b:3b:65:e9:28:2a:59:e8:54:fc:eb:10:b9:99:7f:14:
         b4:7f:96:4c:2f:64:20:91:63:10:fc:ef:ef:41:18:bf:9c:b5:
         c4:61:f5:0c:24:2f:fa:1c:8a:4d:dd:8d:bd:7b:6d:0c:08:a3:
         f5:06:ce:d5:4b:d9:30:c1:52:b7:cb:be:ed:d7:4b:1f:89:70:
         38:f9:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:49:20 2026 by rpki-client