Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/9D0A5048B0B711F1A935775B6511F970.roa
File:                     9D0A5048B0B711F1A935775B6511F970.roa (raw, json)
Hash identifier:          TqqLO6ohhVV1eoFj1YiCKqeJJ+gDVg7wIfsfChMSkuo=
Subject key identifier:   E5:0C:A7:70:FC:DE:1F:D1:86:B5:65:5C:D1:47:80:67:2E:D2:99:DD
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08EB
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/9D0A5048B0B711F1A935775B6511F970.roa
Signing time:             Tue 15 Sep 2026 03:43:28 +0000
ROA not before:           Tue 15 Sep 2026 03:43:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     15412
IP address blocks:        103.233.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Sep 15 03:43:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa8bee0-09b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:02:fd:a5:f6:08:11:51:33:33:9f:26:92:
                    f5:44:1c:31:89:b3:2d:d4:33:6e:42:9d:d3:c6:85:
                    9b:a3:94:24:f5:fa:38:2a:a6:20:a9:62:a9:f7:10:
                    cc:c6:be:45:cc:36:03:69:27:c9:74:5c:34:64:08:
                    08:e1:54:1b:eb:94:33:19:b7:35:7d:2a:1d:1c:0f:
                    67:97:cb:96:0d:cb:76:d1:79:b2:a2:02:88:4b:55:
                    fc:1a:88:cf:c0:94:78:1a:35:96:72:ef:a6:68:0a:
                    8e:e2:69:17:ec:d3:33:7b:a4:09:5b:8b:e1:41:3d:
                    8d:8c:6d:19:5e:db:e8:9a:1a:3b:38:e2:b9:20:5d:
                    98:7e:76:91:fc:7d:c4:0c:ae:58:c2:11:ce:c9:d3:
                    2c:30:9f:05:ac:77:49:3e:b4:02:f7:26:60:3f:4d:
                    f8:05:46:c3:70:cd:96:00:60:09:f0:57:a0:ac:9e:
                    00:16:f4:d0:6c:36:ef:ca:b9:b9:e3:bf:eb:15:11:
                    c5:eb:70:14:42:3d:9a:31:a0:47:05:d8:10:ad:c4:
                    6d:94:6f:7d:35:01:20:ea:c1:7b:82:a9:0d:f7:07:
                    92:eb:74:3e:94:23:e7:e8:43:0e:a1:24:1a:6a:b0:
                    73:f2:57:83:df:04:c1:f2:68:78:3a:f8:9c:3b:6e:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:A7:70:FC:DE:1F:D1:86:B5:65:5C:D1:47:80:67:2E:D2:99:DD
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/9D0A5048B0B711F1A935775B6511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:15:9f:89:7f:98:64:ef:1f:a8:0b:a1:12:22:cb:e4:e4:
         13:5c:c8:ea:69:fa:44:56:b8:bb:c3:9b:1f:5b:8c:82:11:58:
         18:4f:ea:d4:02:48:f6:4f:eb:45:a2:27:03:fa:c7:4f:35:8d:
         0b:e1:de:46:1f:ba:21:a7:63:d8:94:a5:c1:83:71:b5:c9:c1:
         bc:70:01:c1:4b:19:49:6e:e2:0a:64:a7:c0:f4:20:53:4a:6b:
         cf:24:c3:1d:18:d7:8c:19:9d:1c:29:f3:cf:67:5f:8a:b6:29:
         36:f5:93:67:ef:6a:b4:69:44:87:0c:69:12:a8:e4:4e:25:43:
         80:fd:ec:1d:6f:64:76:83:92:8a:93:75:81:c6:8d:27:89:68:
         02:3b:98:5b:58:42:36:6a:b3:f6:d0:77:09:a4:e3:07:23:4c:
         b5:17:46:19:27:a1:7c:ec:71:08:21:c7:bd:af:6b:03:84:25:
         cf:01:02:0e:a5:45:5f:02:ab:cf:b6:b9:a9:e4:5f:d3:ac:04:
         cd:6c:c7:1f:0e:31:0c:a3:fc:d7:87:24:00:2d:c0:bd:b5:09:
         e9:ab:28:d4:30:8f:fe:a3:81:44:92:c1:3a:37:76:f7:17:8f:
         d1:28:88:cf:9c:c1:70:9e:11:43:e9:7b:2f:9c:0e:95:47:fa:
         5d:29:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:02:50 2026 by rpki-client