Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/F88E2564955211F19EAEED7D6411F970.roa
File:                     F88E2564955211F19EAEED7D6411F970.roa (raw, json)
Hash identifier:          pKiZMTH93sR7vU9mFLBYmtO9yBYDCzaSyoBxrPbbRDs=
Subject key identifier:   17:06:47:45:12:F6:5E:56:06:97:2A:21:58:53:E6:F7:A9:1B:AA:3B
Certificate issuer:       /CN=A91B8782/serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
Certificate serial:       02
Authority key identifier: 26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/F88E2564955211F19EAEED7D6411F970.roa
Signing time:             Tue 11 Aug 2026 07:05:02 +0000
ROA not before:           Tue 11 Aug 2026 07:05:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151846
IP address blocks:        103.65.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl
                          rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8782, serialNumber=260087DAEF919E0DABF8A2C82F0185D51C987C51
        Validity
            Not Before: Aug 11 07:05:02 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a7ac99d-a75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:62:fb:81:22:67:30:c4:9f:d2:9c:67:93:
                    d6:d8:03:b9:1d:fe:7a:15:ad:b3:1d:2c:d3:c3:85:
                    74:b0:0f:9e:8e:63:dc:4c:16:19:dc:87:35:ab:74:
                    ca:e4:92:aa:a4:2e:98:49:af:08:6f:68:2c:f6:fb:
                    cd:d5:9e:7e:7a:07:31:55:f3:50:c4:7d:bb:75:c5:
                    04:8e:55:80:bc:39:d2:de:00:d9:57:6a:b0:a7:ef:
                    df:a2:2d:e8:c4:69:96:41:ea:ee:49:70:3a:50:2f:
                    57:11:3e:a6:76:0d:16:3a:ef:e6:c3:1a:19:17:a6:
                    70:79:78:05:62:04:36:cf:0b:82:1f:c2:1e:e1:d2:
                    01:7a:cf:68:55:7c:09:b0:02:1c:65:8e:ca:ff:c3:
                    e7:4f:5e:51:40:8d:5f:5f:18:f7:57:e3:b6:3c:dc:
                    fe:5f:14:92:b4:d9:a7:66:67:7a:fe:c5:75:13:ca:
                    31:0f:4c:6d:b7:06:e3:6f:84:d0:ee:bd:49:31:ef:
                    bf:d2:0e:96:49:40:36:32:47:68:d5:8d:cd:78:b8:
                    6c:24:dc:83:30:61:be:9a:9a:01:46:21:0d:56:f4:
                    1c:31:7f:ba:79:e9:63:ad:d0:71:f6:bf:65:d9:d1:
                    55:0c:4a:b9:ed:8f:c3:46:8c:63:3b:53:11:43:d3:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:06:47:45:12:F6:5E:56:06:97:2A:21:58:53:E6:F7:A9:1B:AA:3B
            X509v3 Authority Key Identifier:
                keyid:26:00:87:DA:EF:91:9E:0D:AB:F8:A2:C8:2F:01:85:D5:1C:98:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/JgCH2u-Rng2r-KLILwGF1RyYfFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgCH2u-Rng2r-KLILwGF1RyYfFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8782/B289DEE6955211F1B2D1D7136411F970/F88E2564955211F19EAEED7D6411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:77:79:0c:da:b5:ce:5b:b2:e0:ae:71:b6:0b:e7:ed:70:f4:
         70:d5:5e:d8:ba:1f:74:2c:df:46:2c:cb:49:24:3f:3b:19:a9:
         00:46:c0:27:83:75:15:74:32:e0:39:f0:8f:17:6f:fa:7e:5e:
         64:0a:ac:f8:78:1d:4e:fb:e4:4e:b6:9b:c7:29:ae:5c:40:7a:
         f4:68:18:1d:94:bf:0a:a7:74:95:52:d1:a6:e4:2f:fe:d6:9e:
         8e:64:f5:17:13:32:58:e8:a2:60:1e:b2:3f:17:ca:0e:39:13:
         99:8f:bb:26:b0:b7:de:b8:ea:68:87:60:8d:bd:93:c8:9a:86:
         2d:50:c7:60:8c:1a:69:00:d9:69:c5:e1:c8:92:ff:e3:80:87:
         23:19:ce:bd:6b:95:5a:09:5e:0a:06:80:19:f8:05:ee:96:46:
         8b:90:ab:49:65:48:5a:73:6b:01:aa:ee:06:ff:09:b1:11:89:
         52:eb:33:e7:15:45:0a:81:d1:0a:d6:88:a2:22:63:8f:b1:1a:
         2f:21:6c:e6:98:ae:ae:a8:48:5c:dc:a5:7e:5e:0f:7d:30:20:
         ac:3e:e2:5b:7f:c9:8a:0e:ed:ba:15:d4:34:70:77:d7:33:db:
         18:95:e8:b7:dc:32:0c:17:35:c6:70:ac:16:91:f7:fc:7d:78:
         53:72:5f:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:48 2026 by rpki-client