Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
File:                     99551366132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          /0+0GHTpaBZOFuG5rDuo51arfje479tYwR6HSOPEqOM=
Subject key identifier:   F1:45:1C:F7:BC:27:18:AF:F8:63:47:9F:77:71:7A:FE:48:A2:44:E4
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       08B7
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 21:40:38 +0000
ROA not before:           Fri 02 Oct 2026 21:40:38 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141234
IP address blocks:        103.156.244.0/24 maxlen: 24
                          103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Oct  2 21:40:38 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac024d6-9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:d9:62:2b:a1:90:66:a7:7b:0c:1c:08:7d:
                    d1:2d:e2:af:ff:4d:15:80:4a:bc:42:ed:c2:c8:41:
                    62:7a:fb:bf:34:80:56:a2:66:a5:3f:39:17:19:2d:
                    7e:7a:ad:22:2c:e0:b7:2e:d3:53:af:ed:79:f2:53:
                    14:ca:dc:85:e2:cb:6d:b0:9d:7c:4d:21:74:0d:85:
                    7a:c2:f1:03:c7:b9:26:e7:91:b1:66:1d:a8:6d:bb:
                    59:a3:33:e2:8f:cf:04:2f:ea:94:b7:c1:a6:f6:fb:
                    ae:fc:3b:d5:ac:fb:71:84:1b:08:1a:c8:d9:f5:76:
                    1c:62:f3:66:bc:05:a3:fa:f2:87:44:44:8d:48:9a:
                    d7:02:2a:6b:d5:50:cb:e5:db:dd:2f:69:fd:4d:a1:
                    f4:3f:4b:50:d7:a8:72:2e:8f:96:92:62:a1:5a:ea:
                    1a:14:f1:d2:82:ae:cf:d3:ef:3f:e4:c3:64:d3:43:
                    a8:5f:87:ec:dc:11:65:f8:f6:75:1d:79:54:6d:a1:
                    0f:5a:6c:38:12:ef:9f:61:40:11:4c:30:77:49:7d:
                    45:d0:95:3e:81:b2:11:e8:2e:51:bc:54:27:a0:0b:
                    a6:41:7d:c3:71:82:97:47:db:d9:aa:62:bb:d7:a8:
                    be:dd:55:9f:5c:4d:2b:5b:b3:b8:43:89:a7:46:5e:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:1C:F7:BC:27:18:AF:F8:63:47:9F:77:71:7A:FE:48:A2:44:E4
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:87:ad:bc:62:30:64:9b:93:e8:33:f1:4b:6a:60:96:63:c0:
         d5:ef:12:52:74:21:e5:e5:3a:0e:68:25:b1:9b:e2:a5:4d:ee:
         c0:19:b1:eb:90:7c:b1:46:da:7e:e1:0c:35:7b:b0:b4:83:10:
         b5:53:b5:0a:9b:70:39:99:c6:f4:72:d7:e8:44:75:8c:35:09:
         0b:5a:2a:6c:9c:4a:fe:6a:69:1d:f8:e4:05:55:29:61:7d:65:
         1c:a1:0a:6d:91:58:1c:d6:7d:ec:d0:91:7f:7e:f6:49:3c:aa:
         3e:f3:d3:cf:0e:ac:00:9a:cd:af:86:88:7a:43:bd:7f:8d:dc:
         90:fd:b6:76:5e:1d:58:0a:ad:be:00:8a:f5:e0:36:44:5f:58:
         42:cd:74:18:e3:12:05:bb:87:6f:8a:cf:74:45:6c:46:de:ad:
         03:a6:a2:b2:da:32:cf:3d:29:7e:37:11:8b:79:32:41:ed:1e:
         5e:63:54:f2:67:ce:e6:a1:ec:15:75:91:6c:54:b8:48:f6:fd:
         5d:d2:d9:a3:3a:f8:34:4f:c8:76:12:05:f1:dc:06:d7:03:fc:
         75:53:1d:e1:ad:74:ed:fd:5d:57:38:dd:d7:49:a2:73:5d:a7:
         ee:57:6a:85:0c:fe:69:68:b4:0f:99:42:43:7e:32:eb:d1:83:
         f8:d9:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:38:57 2026 by rpki-client