Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/98E572FC777011E7BF7EED10C4F9AE02.roa
File:                     98E572FC777011E7BF7EED10C4F9AE02.roa (raw, json)
Hash identifier:          QRjVfoXU7A+hTT7ybzUhVCq4jb4pyCNXs4aBxn1xbBI=
Subject key identifier:   09:D4:F2:3F:A8:9B:1D:29:DC:36:EC:0D:63:8C:1C:3B:23:52:8A:B8
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1AB6
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/98E572FC777011E7BF7EED10C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 16:30:21 +0000
ROA not before:           Wed 02 Sep 2026 16:30:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58462
IP address blocks:        103.23.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 16:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6838 (0x1ab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Sep  2 16:30:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a984f1d-6cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:92:03:9d:72:a3:85:49:22:0a:b2:d5:ae:
                    72:82:54:05:0b:3b:1f:03:70:8d:43:1e:79:a5:28:
                    b7:10:5b:04:c2:4a:19:aa:d5:90:37:ba:0c:08:6b:
                    0a:28:96:1b:dc:b2:f6:f5:63:2c:4f:cc:55:35:7f:
                    62:2e:b9:08:44:55:f4:78:0b:c7:04:54:91:f6:2f:
                    17:af:15:9a:9b:12:2a:dd:f3:15:bf:58:77:cb:bb:
                    df:d8:18:bd:24:32:36:45:02:4f:a3:3f:0c:13:57:
                    38:66:90:48:ee:ac:51:25:cd:b8:ed:01:4d:1e:c0:
                    c6:81:e3:43:43:20:17:ed:b3:3c:65:b5:b2:11:89:
                    63:4c:0f:2c:ee:73:b9:b2:68:c3:f2:e6:41:87:1e:
                    ba:92:f3:99:31:ba:ba:f1:7e:9b:6c:ab:92:b7:a3:
                    89:3d:ad:04:44:13:fa:a8:c8:16:f8:f0:36:7f:4d:
                    3e:24:2d:5d:40:51:aa:b1:86:87:ed:e4:27:35:4e:
                    9d:cf:94:a8:16:cf:c1:fe:ab:62:68:15:18:fa:88:
                    61:51:de:6c:8e:9a:e8:ca:13:c4:9d:a6:b2:98:08:
                    47:d9:8f:37:52:a9:88:dd:01:b0:1f:b4:1e:e7:89:
                    82:fa:69:9b:83:e6:3d:ab:be:59:d6:a6:20:fb:3e:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:F2:3F:A8:9B:1D:29:DC:36:EC:0D:63:8C:1C:3B:23:52:8A:B8
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/98E572FC777011E7BF7EED10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:3e:51:8f:6b:06:b2:ac:08:35:08:d8:9b:93:de:68:c3:
         92:bb:5a:a6:28:28:33:95:16:4c:98:8f:9f:d1:21:76:1b:93:
         3b:de:30:12:96:7e:f9:76:90:e1:90:73:a8:7c:21:45:5b:5f:
         df:8e:48:b7:f2:ca:5b:00:b1:1a:1e:3c:b7:3f:81:91:84:b4:
         62:bd:76:00:cd:01:51:b4:17:5a:9a:a9:e4:0f:20:f4:f2:e4:
         53:c0:9c:d9:a3:5e:a4:06:fb:ce:ce:a3:89:38:41:e3:b2:1d:
         d2:cf:81:77:3b:b8:4e:b9:56:e2:bc:56:48:be:19:73:07:62:
         70:e7:f3:05:84:1a:1c:6c:9f:c7:4b:46:71:df:c5:ae:2f:76:
         97:5a:37:44:a4:2b:09:17:0b:07:2f:89:91:d1:82:24:87:da:
         3f:37:01:bd:6f:aa:9c:b5:6f:25:88:46:b0:85:eb:53:09:d4:
         53:8f:86:08:e2:f7:69:c5:cb:0a:56:d6:ca:01:85:e5:56:c8:
         01:b7:17:2d:67:e2:88:17:08:30:f7:cb:47:60:3c:2b:26:b7:
         80:b4:f7:4c:a1:c8:59:b3:91:43:43:fa:bc:a2:42:0a:56:bd:
         46:0f:a6:a2:07:e6:25:bb:7c:43:17:39:bd:ee:7a:80:37:ca:
         da:45:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:36:06 2026 by rpki-client