Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa
File:                     836865ECD0DB11F086463D52C4F9AE02.roa (raw, json)
Hash identifier:          AKoZyPuf4M9ZcEU/leMev9H1xz48aswraZiTQr7vftg=
Subject key identifier:   CA:B2:8C:3D:E7:2C:06:0F:00:57:0E:2C:03:EC:E8:4F:61:4F:7D:F3
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0442
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa
Signing time:             Sat 27 Jun 2026 01:32:40 +0000
ROA not before:           Sat 27 Jun 2026 01:32:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     399870
IP address blocks:        103.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jun 27 01:32:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3f2838-cec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:c3:79:3b:1d:77:7b:2c:83:f7:7e:34:7c:
                    25:ff:64:a8:2b:9d:c6:92:28:20:57:05:49:07:4d:
                    79:c5:69:2c:09:f0:8c:dd:1a:40:9b:1d:fb:8e:c6:
                    0b:ad:d0:61:d8:2c:04:61:80:51:cd:86:04:7a:6a:
                    c7:ce:25:db:1b:81:b2:e4:00:eb:6a:ce:d2:d6:47:
                    6d:a6:71:92:b1:ce:71:ce:64:0c:ff:94:73:0b:dc:
                    de:67:9a:6d:8b:01:69:9b:4c:bd:6b:c4:57:10:aa:
                    0e:1d:b9:2c:dd:9b:04:20:20:bf:fb:a3:25:9a:97:
                    5d:01:c6:79:bd:b8:55:0e:07:ff:6d:f2:b3:f2:c9:
                    b5:99:5c:af:09:12:7d:ae:12:28:f6:cf:2c:3f:9b:
                    eb:38:0a:09:ae:46:af:b1:6e:39:e0:89:73:80:38:
                    db:98:79:63:c5:f0:f3:4f:bb:78:04:59:ae:c2:52:
                    2e:42:35:38:36:d3:25:6e:03:d1:fd:c5:01:99:ef:
                    77:a7:92:ee:fa:74:ba:7f:43:06:3f:a9:1a:68:2a:
                    91:80:38:1a:3f:ad:c3:48:41:5f:33:bc:f9:78:28:
                    e7:e1:ad:b4:c4:da:db:5b:cb:94:19:ff:9b:65:05:
                    62:bf:0e:54:52:dc:ba:f6:28:f8:ee:1a:a7:64:fc:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:8C:3D:E7:2C:06:0F:00:57:0E:2C:03:EC:E8:4F:61:4F:7D:F3
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:11:c3:90:43:03:da:89:e6:5b:e5:6d:31:0a:0c:7e:da:e4:
         f0:7d:c4:a6:7b:fc:46:1b:8a:0a:0a:60:62:ad:fe:20:a5:f0:
         d0:d7:b8:04:f0:c2:98:5c:51:b6:8a:63:d0:eb:bc:1c:64:3b:
         cd:38:b6:72:f1:82:bb:07:1a:a8:06:1a:75:a9:a1:87:23:32:
         f1:42:44:28:60:ee:fb:d4:20:0c:e5:1c:cd:92:fd:ae:df:84:
         e9:d7:d1:c1:1d:fa:d7:32:28:0f:0b:bb:17:85:e4:b6:4b:fe:
         ad:a4:61:1d:3f:55:1f:23:98:d0:4b:25:c4:43:3b:78:aa:90:
         38:4b:da:8b:bf:4c:d8:6a:fd:0b:0a:3d:e6:9a:65:b6:c8:af:
         e0:b0:2c:84:a5:52:df:69:20:de:53:5f:fd:f5:c4:93:19:ed:
         5f:2f:d8:bf:cc:db:62:62:46:a9:d3:39:68:86:c4:77:4a:5e:
         89:0f:f4:cb:f4:fe:54:04:3b:55:f4:ae:a2:a5:92:48:db:58:
         d7:87:03:e2:e1:f9:a1:59:a5:e7:99:a8:1e:a1:dd:5b:43:5d:
         de:0a:9a:00:47:1f:fd:a2:25:c3:4d:24:74:db:36:85:4e:76:
         5a:b2:96:ff:1b:e6:de:9d:d2:f1:a6:b4:e5:fe:59:02:39:a1:
         8e:3b:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:18 2026 by rpki-client