Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          zmQph1hLBl/gIKXC+1XSZphxd+ydolaFT+U64zdnWx0=
Subject key identifier:   4A:87:76:1E:9C:0B:77:E2:35:3B:90:54:82:F5:6D:7C:B0:E0:E9:6F
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       08B6
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 21:40:36 +0000
ROA not before:           Fri 02 Oct 2026 21:40:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Oct  2 21:40:36 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac024d4-e1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:08:ea:4b:1e:fa:4a:5e:47:3b:b5:36:f1:
                    00:61:f6:40:9b:7f:98:83:a2:82:e3:1e:81:cb:c4:
                    7b:c2:71:08:39:eb:e6:7f:6f:56:22:b7:8d:d4:c1:
                    50:2c:c1:95:ed:77:a0:2c:20:2c:08:de:5e:33:68:
                    55:bf:6f:7b:4d:d2:36:94:5f:b0:b3:cc:7a:5d:f0:
                    20:72:99:f4:7f:26:7f:cd:10:bd:f7:93:85:ee:13:
                    83:44:b0:3c:29:ba:3e:f6:f0:50:92:b9:77:96:5e:
                    91:fe:70:58:3b:6b:6c:67:50:82:02:70:f0:98:4a:
                    f5:ae:ec:65:26:6a:c5:82:42:cd:b1:c1:80:5a:00:
                    1b:4e:0d:c9:a9:6b:ac:bd:b2:36:2f:f4:c1:bd:85:
                    e1:60:cf:ff:c8:0a:98:5b:4e:7d:99:b6:31:1e:ee:
                    df:26:ca:4f:f7:ef:14:2a:da:62:41:79:85:2e:a7:
                    a6:44:84:4d:94:81:37:b9:c9:31:58:2f:f9:46:a1:
                    a7:ab:bf:97:1b:dc:76:15:b5:d9:c5:f8:a5:aa:fe:
                    37:61:fc:9f:4e:dd:1e:47:23:aa:32:6c:ae:93:90:
                    7f:af:a1:9d:d4:d6:b8:76:fe:8f:50:62:59:44:33:
                    a4:29:b7:3b:fa:27:e2:91:06:2f:53:42:9f:26:1f:
                    d3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:87:76:1E:9C:0B:77:E2:35:3B:90:54:82:F5:6D:7C:B0:E0:E9:6F
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:64:4f:46:6b:7f:ee:0d:2a:fa:fb:62:d3:cd:1f:44:6a:fa:
         ca:ab:24:d1:bb:4a:30:f7:2a:64:66:71:01:d2:b3:0f:57:71:
         45:a8:73:20:7e:7d:98:19:11:88:af:5f:4d:66:cd:f6:01:74:
         c0:93:27:b2:84:07:02:f0:8a:25:ce:f6:8e:1e:a1:4e:b4:90:
         8c:a9:36:f1:4c:f9:59:a4:c5:0b:dc:69:2d:43:07:58:e7:d2:
         57:ef:c4:ea:d9:03:52:00:8f:50:81:3b:4b:16:94:3b:6d:2f:
         3b:a1:f4:11:44:d8:ed:67:d1:94:dd:33:fa:4f:b4:3d:a1:2b:
         d9:94:3b:b6:a6:6e:e8:47:7a:3f:4b:a2:b1:99:92:57:8c:aa:
         b0:d1:b5:22:01:9c:23:e0:aa:26:f8:33:6f:7e:37:3a:df:ee:
         cb:78:7d:24:b9:a8:95:26:60:91:a1:c7:04:be:d8:9f:69:7b:
         ae:e2:91:74:0b:04:13:04:e0:da:85:17:40:b2:fe:04:95:5f:
         a5:38:1d:aa:14:f5:4b:41:5f:4c:e3:55:cf:94:93:8e:3f:4d:
         d1:a1:0b:f3:e9:4e:a0:1d:f0:2a:47:34:eb:d4:32:64:fa:a9:
         37:58:64:68:ca:b1:cf:09:6d:20:34:38:78:14:bc:95:25:c5:
         97:03:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:20:15 2026 by rpki-client