Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa
File:                     688EAE1E8A1911EC94921D85C4F9AE02.roa (raw, json)
Hash identifier:          cm2Fl2NPATbgGQFwsosZWB6VAsdQeNU6CjDmIcGsXUM=
Subject key identifier:   E4:C9:D1:AA:B1:05:80:A1:E8:AB:B6:62:6C:83:86:65:D4:1F:CE:3D
Certificate issuer:       /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial:       0817
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 21:41:30 +0000
ROA not before:           Wed 02 Sep 2026 21:41:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138186
IP address blocks:        110.76.176.0/22 maxlen: 22
                          110.76.176.0/23 maxlen: 24
                          110.76.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
                          rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
        Validity
            Not Before: Sep  2 21:41:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98980a-a4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:94:5c:6c:97:da:18:4d:14:47:0c:68:a5:
                    53:a7:f6:d5:a6:ea:d3:45:bb:95:75:ff:e9:83:bb:
                    7a:58:60:b2:24:6b:8f:1f:42:26:12:1a:31:7d:09:
                    c3:d7:d0:25:85:6d:b0:b9:b5:4f:ce:6e:7f:40:e0:
                    54:a4:9d:9c:dc:b0:e7:bf:11:4d:d7:75:91:9c:1d:
                    22:29:44:ae:06:a6:97:41:3d:72:60:8b:f4:a1:1c:
                    ef:85:86:40:a1:5e:a2:3f:1f:44:25:66:73:1b:34:
                    eb:4e:d6:45:58:34:b8:f2:f2:48:0d:84:5f:16:ab:
                    93:80:e6:d3:d0:b3:a1:8a:0f:6d:ab:df:b1:3e:c4:
                    68:01:c2:db:90:2c:68:b9:10:68:7f:13:93:61:01:
                    47:d7:5e:70:23:31:91:8c:51:94:19:c3:c8:27:3f:
                    9c:0e:af:01:35:0b:f5:fb:7b:17:04:a5:a2:f4:10:
                    2a:aa:0b:74:a0:e9:fd:65:b8:b2:96:6c:94:d5:9a:
                    6b:44:86:27:31:df:d2:13:1a:89:55:da:e3:d0:10:
                    94:27:5f:c3:06:51:75:52:59:06:cc:ec:52:24:85:
                    09:0e:5c:df:16:8a:e3:b7:a9:0f:0b:92:7a:fe:03:
                    29:16:96:9a:30:12:34:40:f8:1a:a3:ea:88:f0:e7:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:D1:AA:B1:05:80:A1:E8:AB:B6:62:6C:83:86:65:D4:1F:CE:3D
            X509v3 Authority Key Identifier:
                keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:4a:dd:1c:38:8a:35:da:43:31:d2:3c:51:3a:f0:fb:e9:a4:
         a0:0d:6e:e5:7b:fe:4b:59:87:f1:56:29:98:0b:93:bb:af:56:
         a3:ff:9f:76:eb:93:56:3e:c0:88:49:44:86:67:f8:07:55:92:
         3f:17:7b:06:c4:d9:37:af:44:99:87:86:9d:52:fe:ab:f3:85:
         8c:a0:08:b0:81:46:07:e5:aa:47:a0:e6:5c:8c:fd:93:99:ad:
         18:ea:58:bc:d9:25:d0:e6:ce:f1:22:61:1c:ba:ab:bc:f9:c0:
         70:3f:31:04:36:3e:c4:8a:c9:41:07:f4:81:00:4c:d3:02:b3:
         3a:34:69:60:60:1e:15:ab:dd:18:3e:70:bd:f7:5b:03:51:0f:
         73:c5:a1:ff:60:7e:c8:9e:10:12:32:64:2b:7f:36:df:e4:d1:
         c8:e8:47:13:b3:a2:22:6a:61:3e:6d:4d:73:ef:61:f3:63:49:
         8a:c0:37:ae:39:dc:92:c5:31:26:cf:6c:5d:fc:1c:c6:dd:8c:
         ee:76:56:36:7b:1b:a5:33:ef:33:ca:df:9d:2e:da:75:be:c0:
         92:c2:af:d0:40:c4:01:8e:3a:0a:82:cd:fe:7a:6d:ce:a6:90:
         29:37:4b:26:20:e1:1d:ac:ad:06:f8:63:1f:3d:a2:b0:bf:4e:
         6d:be:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:18:53 2026 by rpki-client