Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa
File:                     38E02CDC04EE11EE89900876C4F9AE02.roa (raw, json)
Hash identifier:          7OfdnhWRUICfd3vqfwgxuqTgwpFAQXLaqyIQvbydZXg=
Subject key identifier:   DC:E5:F7:FE:17:1A:7F:2C:88:5E:DB:0B:14:AB:BB:0B:9F:D9:F3:DB
Certificate issuer:       /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial:       031A
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa
Signing time:             Wed 21 Oct 2026 01:48:40 +0000
ROA not before:           Wed 21 Oct 2026 01:48:40 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     55850
IP address blocks:        103.172.232.0/24 maxlen: 24
                          103.172.233.0/24 maxlen: 24
                          223.165.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
                          rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 01:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
        Validity
            Not Before: Oct 21 01:48:40 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad819f8-cd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:53:44:9b:f1:cf:7c:e8:f6:f5:dc:a0:88:
                    e3:87:c2:20:51:b1:df:e8:da:a6:fd:b8:a0:22:55:
                    89:d0:58:6c:61:02:7b:37:80:f5:fa:df:52:0f:1a:
                    e1:9f:a7:c7:de:1d:12:3c:ce:ed:29:ca:ad:dd:89:
                    a6:7a:f0:67:3f:76:22:9e:eb:26:3a:e7:8a:3b:fa:
                    2a:3e:3c:bb:0f:67:3a:db:03:b8:32:5d:d3:86:54:
                    65:f6:36:67:d2:96:fa:11:91:6e:31:5d:38:75:2d:
                    3f:d1:22:1d:b3:db:39:fc:20:c4:e5:fb:98:b6:d0:
                    da:8c:5a:dc:75:bf:1d:25:f2:8e:3a:6d:4a:e4:f9:
                    6a:57:83:c8:bc:f9:ee:b7:5b:75:57:f2:1a:ec:26:
                    94:92:2c:ea:a4:58:b1:16:59:bf:33:93:d2:f0:47:
                    d3:bf:70:f0:f9:95:56:2a:e0:f7:8c:86:22:b5:e5:
                    cb:43:2d:b5:b8:6d:ed:c0:1e:9d:49:72:e9:ec:3c:
                    f9:cc:35:4c:5e:f1:97:14:69:5f:e5:35:2c:75:10:
                    fa:a1:14:4e:9d:85:53:cd:44:22:5b:39:08:16:99:
                    ed:8b:3a:ea:40:84:60:fb:18:cb:65:60:b6:7c:1c:
                    7e:f6:12:0c:f7:4e:9a:b4:36:19:a6:88:aa:78:e8:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:F7:FE:17:1A:7F:2C:88:5E:DB:0B:14:AB:BB:0B:9F:D9:F3:DB
            X509v3 Authority Key Identifier:
                keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.232.0/23
                  223.165.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:49:06:50:5f:bd:13:94:a5:4a:7b:11:83:77:e2:00:e6:38:
         7a:10:ec:a1:17:59:d6:e5:3d:14:78:0c:65:47:e1:d5:46:0e:
         1d:36:cc:01:9a:49:5e:80:b7:66:e5:cb:c5:0c:a7:9c:7c:61:
         7d:bd:5f:8f:4b:b1:17:ce:9e:1f:fb:07:21:1a:71:e2:32:b0:
         c4:a0:77:1e:f4:8d:06:8c:2e:04:22:79:d9:84:5e:75:4e:51:
         87:3a:d9:2b:a0:27:60:58:a8:6c:0e:58:e4:1e:55:57:49:4c:
         b3:31:c3:fa:fc:c7:21:e3:98:d1:af:84:c1:0c:ae:03:74:25:
         e9:57:7f:71:30:9a:42:28:ad:36:4b:b3:0e:d5:62:b0:8f:03:
         4e:d1:03:32:fa:5b:8c:b9:4c:ec:ac:d7:d1:07:17:62:38:14:
         c6:00:03:6b:bf:be:05:9f:e2:c6:18:5d:07:3f:da:11:aa:8e:
         e9:dc:a7:fc:cf:13:4a:46:48:32:f6:58:8e:38:09:24:df:d7:
         4c:95:92:10:a8:d5:c8:53:20:f8:08:f7:d3:6b:4b:b6:8b:2f:
         d7:67:e2:81:52:4f:c6:c3:fa:d1:ca:ea:a3:29:18:19:36:15:
         e2:a6:6d:7b:41:94:6b:c9:57:2c:91:ca:00:c7:98:22:d6:c2:
         79:9f:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:53 2026 by rpki-client