Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
File:                     CDB51BDC739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=
Subject key identifier:   0E:81:62:89:B4:BA:11:21:A4:61:D5:05:B2:99:97:05:64:7D:52:2B
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0227
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 03:51:47 +0000
ROA not before:           Mon 31 Aug 2026 03:51:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58511
IP address blocks:        103.22.144.0/22 maxlen: 22
                          2401:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 03:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug 31 03:51:47 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94fa53-a7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:5c:1e:e4:e1:99:66:e2:a3:cf:b3:a6:c8:
                    b2:01:63:1d:29:69:cc:37:e3:4b:5e:a5:b3:de:12:
                    0b:03:ca:5b:c8:b3:0c:3f:f5:88:d5:f8:af:0a:2f:
                    b6:e7:68:66:de:d3:25:2a:12:ab:ef:48:23:dd:cc:
                    65:28:1a:b8:ac:bf:ce:3b:62:57:5c:bf:6d:3d:15:
                    08:c8:07:ae:b6:6e:7a:4d:fa:ae:10:c8:2b:71:47:
                    82:5c:5d:79:bd:d4:c5:be:cb:4b:ee:d2:46:cf:fa:
                    06:ef:00:5d:00:5c:96:25:d9:83:64:96:f0:71:ae:
                    c0:6a:d5:95:f0:7a:64:c4:2e:02:2d:cd:9b:d4:39:
                    1a:3d:ec:66:8d:8b:bb:83:76:e9:99:40:68:c6:e7:
                    d8:99:e2:d6:a4:c4:77:33:31:9c:11:e3:43:40:f1:
                    eb:12:4a:fa:17:a2:b9:5c:a5:f5:ee:ee:41:a1:06:
                    0c:3d:a6:8f:67:9b:85:71:b5:15:eb:a4:65:ed:51:
                    d5:37:d0:d4:17:c8:c1:dd:e9:2b:96:e4:01:c1:86:
                    86:47:03:20:92:ca:fe:70:13:7e:50:86:eb:2b:83:
                    31:3f:7f:5e:91:e9:61:14:af:13:d1:e9:80:99:74:
                    89:d3:e9:24:a8:94:e8:49:69:06:70:20:37:f9:0d:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:81:62:89:B4:BA:11:21:A4:61:D5:05:B2:99:97:05:64:7D:52:2B
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.144.0/22
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:10:23:68:30:f8:12:9d:00:91:60:e8:51:b1:89:c9:16:66:
         cf:f5:13:73:c9:35:cd:60:ca:df:09:2d:3c:2c:fa:b3:75:3a:
         b4:4e:08:22:40:bf:62:34:4f:53:f8:0c:5d:8e:2a:5d:c3:87:
         f9:17:c2:17:ec:0f:f1:6d:0c:e3:a2:31:21:49:28:8a:f8:1b:
         60:8d:eb:bd:5e:17:61:c5:fe:3b:d0:ee:6a:6b:ca:40:ee:06:
         26:61:09:e8:05:ec:44:e9:95:bf:91:12:2e:a0:9a:6b:09:87:
         9f:a7:7f:a9:84:72:92:e0:0c:8f:58:c1:53:d1:52:7f:3b:3f:
         b5:bc:32:b8:19:7b:b8:12:e5:3b:7e:01:d9:a4:76:90:95:4c:
         b4:84:4c:58:b8:75:4d:cd:fb:71:41:c8:51:8d:fc:b6:f1:6c:
         a4:6a:11:52:93:86:3d:cc:35:55:4a:43:b5:99:45:de:dd:76:
         cb:64:23:c5:d6:a6:66:d8:c4:b2:dd:c8:56:b5:89:ed:a2:e7:
         16:3d:65:2d:61:cc:e8:f2:fb:6f:56:45:6b:97:04:be:81:0a:
         95:01:67:9e:5d:3f:60:e8:a1:c8:f4:9a:d8:5a:d9:fb:2a:93:
         62:3a:66:bc:fa:d1:fc:ff:98:ec:c3:96:f7:eb:3b:f0:b5:b5:
         ec:1d:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:11:08 2026 by rpki-client