Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
File:                     7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (raw, json)
Hash identifier:          8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=
Subject key identifier:   0E:38:2B:BA:A3:A7:19:01:8E:1E:99:8A:D2:D2:B7:28:29:15:6D:B1
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       02B0
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
Signing time:             Wed 01 Apr 2026 02:34:09 +0000
ROA not before:           Wed 01 Apr 2026 02:34:09 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138687
IP address blocks:        103.86.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 01:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr  1 02:34:09 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cc8420-383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:fd:14:26:cc:65:f0:d6:b1:49:96:da:c7:
                    9a:7e:71:fb:f7:18:0f:b6:aa:00:39:60:65:b7:33:
                    70:f5:84:77:87:78:b2:5d:99:11:c7:6c:3c:54:03:
                    44:7c:14:8c:6f:67:10:99:c0:53:51:40:ca:90:4a:
                    58:44:06:0f:fc:f8:32:31:8b:9c:1a:76:b6:2a:a2:
                    84:19:f8:a3:f7:76:58:30:a7:c4:98:d4:3d:1e:dd:
                    5d:e4:0e:a6:9e:3f:e1:5f:cb:be:3a:5c:de:3a:b3:
                    f4:12:e8:02:fd:a3:65:56:fd:a1:d2:52:9a:c5:a4:
                    5e:7a:25:be:8b:d0:e4:3a:48:28:ca:64:d0:db:9f:
                    87:c3:67:6d:7b:13:ac:02:0a:66:9f:fd:84:d6:e3:
                    73:c2:40:85:b6:57:d1:97:80:0b:8c:a6:0b:b2:51:
                    b0:de:cf:04:ae:14:7f:13:c7:a6:9f:b9:75:8c:6a:
                    bc:10:74:cc:48:ad:d2:3b:b4:d9:24:5b:20:f2:f0:
                    58:3d:35:fd:ca:95:6d:42:3b:c4:1f:f8:02:80:ab:
                    37:81:8e:0e:64:1e:5e:4f:e3:e7:74:03:76:83:97:
                    6a:5d:b6:29:49:b0:09:c4:88:e8:5a:5f:81:97:cd:
                    8a:5f:de:d0:ab:71:02:dd:ac:bb:cc:f3:97:a6:79:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:38:2B:BA:A3:A7:19:01:8E:1E:99:8A:D2:D2:B7:28:29:15:6D:B1
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:57:1c:88:c1:2c:14:5e:08:ad:28:af:0c:af:69:5d:92:db:
         f8:1b:75:f7:b5:59:6f:7f:b9:56:6f:ff:76:d3:7a:f1:36:1b:
         90:7a:ca:3f:2f:42:8c:65:dc:7a:b5:76:5f:d3:be:b9:a1:19:
         0f:39:55:96:03:3b:31:61:48:f5:c6:ad:4f:8b:13:ea:e3:62:
         4e:dd:f6:29:4c:af:6e:26:c1:ae:5c:4b:9e:52:ea:88:b2:cf:
         5a:da:c2:1e:73:8d:d3:b0:85:d7:92:7d:17:38:11:46:15:62:
         27:e7:e3:e2:8a:db:e9:58:32:87:1d:b3:b0:4d:f9:a6:c4:12:
         6a:93:0b:f6:eb:22:7d:87:19:16:15:76:e2:4a:1b:56:91:07:
         a1:c0:9a:aa:a6:7c:0b:05:30:14:3f:b8:a6:d0:48:df:b0:b0:
         82:ac:a7:df:81:46:9f:18:b6:80:c5:cf:15:de:b5:c3:51:27:
         fe:09:a8:d9:38:a3:37:70:41:3c:26:e4:3a:3c:92:74:7a:40:
         1c:78:a8:f6:b8:24:b6:c3:d1:5d:91:ae:83:de:20:d7:d7:2b:
         22:23:fd:f1:0c:2d:73:42:23:82:fb:bb:76:72:61:fe:43:fa:
         b4:91:f3:b9:03:09:4d:67:83:63:37:84:24:3b:bf:16:e7:bc:
         cd:bd:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:16:43 2026 by rpki-client