Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
File:                     8BEC7D66E54911F091014A6A756F56BC.roa (raw, json)
Hash identifier:          4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=
Subject key identifier:   B4:1F:44:FA:95:82:BD:B2:41:C0:3F:43:5B:49:41:F1:EE:01:F9:BB
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E0B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
Signing time:             Wed 23 Sep 2026 12:20:14 +0000
ROA not before:           Wed 23 Sep 2026 12:20:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     2497
IP address blocks:        43.246.129.0/24 maxlen: 24
                          43.249.241.0/24 maxlen: 24
                          45.115.35.0/24 maxlen: 24
                          45.124.63.0/24 maxlen: 24
                          103.7.209.0/24 maxlen: 24
                          103.7.210.0/24 maxlen: 24
                          103.26.164.0/24 maxlen: 24
                          103.26.165.0/24 maxlen: 24
                          103.26.166.0/24 maxlen: 24
                          103.26.167.0/24 maxlen: 24
                          103.244.211.0/24 maxlen: 24
                          160.20.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 12:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3595 (0xe0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Sep 23 12:20:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ab3c3fe-aa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3d:31:00:a1:f4:8d:05:eb:05:49:fe:ce:54:
                    77:4a:8b:b9:24:fa:b1:75:dc:cf:d8:96:89:bb:09:
                    38:eb:1b:4f:82:20:69:57:7c:8b:ce:b5:ab:f1:be:
                    34:8e:13:3f:42:08:c3:5f:b9:5d:fc:2e:cd:10:14:
                    54:87:53:f6:c4:a0:43:8e:f3:7b:5f:1c:43:cd:0b:
                    65:e6:b8:d4:8b:02:ec:92:3c:2f:1c:74:42:e3:8d:
                    88:4c:79:67:eb:bf:e5:93:ec:ae:37:11:c5:11:0e:
                    89:46:50:1d:e0:f5:af:8d:93:80:7d:42:0c:c0:e3:
                    c0:d9:e4:28:66:57:f2:5e:35:73:4f:1f:f9:97:d4:
                    38:59:81:09:98:0b:8b:43:f2:40:ca:08:e2:82:0d:
                    a7:17:19:ef:56:0f:20:ee:da:9b:66:67:ce:10:c6:
                    70:f7:bf:58:e3:37:60:ec:61:8f:e4:cc:12:1a:ad:
                    56:0c:60:21:46:c7:1b:16:fb:48:50:f8:79:30:76:
                    56:97:26:aa:54:bc:0a:0e:8e:20:1d:52:77:c7:54:
                    b2:cd:66:11:85:2d:8c:9f:a6:0e:82:2d:bc:18:7a:
                    3d:08:5c:6b:e6:6c:7a:13:ae:33:60:53:a9:95:1c:
                    8f:cb:d2:0a:5d:00:30:d3:61:4a:26:2a:c5:d7:12:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:44:FA:95:82:BD:B2:41:C0:3F:43:5B:49:41:F1:EE:01:F9:BB
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.129.0/24
                  43.249.241.0/24
                  45.115.35.0/24
                  45.124.63.0/24
                  103.7.209.0-103.7.210.255
                  103.26.164.0/22
                  103.244.211.0/24
                  160.20.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:0e:3f:89:f6:38:7c:59:67:e4:92:ee:fa:cd:c2:3c:0b:83:
         b4:a2:56:b4:ec:b1:db:3f:40:b3:f7:87:a0:13:a3:ae:f7:aa:
         e2:2f:00:cc:52:67:93:ad:65:6b:85:29:fe:bc:fa:2a:76:09:
         5d:84:39:fc:0b:72:04:98:40:02:a3:52:5c:3d:e3:c2:7e:82:
         3d:1e:dc:44:aa:bd:d6:02:08:bd:ce:80:a2:41:10:fb:e7:be:
         ea:16:b3:a6:7e:e9:ea:93:46:76:fb:13:f4:8f:70:76:78:f0:
         a0:c6:de:34:b4:71:4e:0e:b4:77:79:96:86:b8:1a:e3:93:28:
         de:53:0f:ff:0e:31:86:02:29:a7:a5:d7:75:ac:e1:b4:63:4a:
         cc:9d:c2:c0:e1:06:45:9e:75:a2:d5:5e:88:09:22:2c:41:86:
         52:ce:3d:83:93:44:38:81:07:f1:a5:bc:8a:98:5c:f1:92:49:
         d2:90:b6:24:90:3f:70:b6:6e:77:5c:ba:ae:e3:05:39:1a:42:
         59:ec:73:f0:96:58:7d:0a:84:f4:a8:86:8b:7d:b1:3c:63:3c:
         54:09:bd:23:50:72:4e:d9:83:23:3d:5c:7d:7f:a7:42:49:94:
         e4:5c:9c:0d:92:76:c4:a3:eb:2f:77:6f:e7:88:58:e5:91:43:
         38:0f:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:01 2026 by rpki-client