Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/09102B0AC4B311F198C2224D5D11F970.roa
File:                     09102B0AC4B311F198C2224D5D11F970.roa (raw, json)
Hash identifier:          IBN53rxAyAOubtU0YAuDwBwmK8ruUnB7D9JPnDVtQks=
Subject key identifier:   DB:BE:55:D6:DA:EE:44:C1:E0:FE:DC:87:FC:9A:FB:03:97:E8:19:C0
Certificate issuer:       /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial:       0D39
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/09102B0AC4B311F198C2224D5D11F970.roa
Signing time:             Sat 10 Oct 2026 14:01:06 +0000
ROA not before:           Sat 10 Oct 2026 14:01:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149986
IP address blocks:        103.35.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
                          rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
        Validity
            Not Before: Oct 10 14:01:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aca4521-201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:0b:1a:a9:82:88:14:57:81:07:a1:e8:0e:
                    63:4e:49:17:f5:6a:59:82:de:b2:95:e1:07:75:56:
                    f3:84:2a:85:d0:12:51:be:3c:e5:77:2d:de:90:54:
                    0f:75:98:46:6b:69:d0:be:56:e7:bd:fa:6a:2c:7c:
                    2b:9d:63:da:07:fc:d2:01:60:31:5c:12:70:a3:f0:
                    75:55:1b:12:72:98:7f:d0:38:ea:44:74:21:3a:dd:
                    b0:1f:d9:92:ff:b1:e1:36:d7:8d:e4:06:ca:a2:14:
                    05:02:8e:fe:d7:8c:ae:c2:fe:47:08:fb:d5:90:7c:
                    25:a7:b1:15:81:b4:38:d1:7c:c7:ed:db:30:c0:7d:
                    41:41:4f:d4:df:bb:fe:78:56:18:09:a8:c6:51:c3:
                    40:44:e0:de:a5:af:ff:dc:fb:38:41:58:bd:8f:3b:
                    9f:69:40:fb:7c:d0:42:59:65:ae:0c:b5:b1:27:28:
                    76:23:f4:c7:62:63:54:db:f8:41:d5:52:5d:30:ea:
                    28:92:b7:ee:d2:62:8a:8a:62:1d:ba:d0:24:44:b0:
                    9c:6b:70:5f:47:cf:18:92:cd:40:4c:5d:7b:3f:d3:
                    3f:9a:ef:fd:e1:0a:66:d7:7f:5e:79:42:1c:da:64:
                    27:ea:88:1c:34:e2:e8:2b:38:ad:2b:20:35:8a:cd:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:55:D6:DA:EE:44:C1:E0:FE:DC:87:FC:9A:FB:03:97:E8:19:C0
            X509v3 Authority Key Identifier:
                keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/09102B0AC4B311F198C2224D5D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:eb:18:65:f3:bd:a7:69:37:66:4e:8c:70:f1:98:cd:f0:
         3f:67:33:99:40:1f:ea:e2:d8:c2:89:f0:01:42:05:c5:d7:e7:
         2c:e4:d8:71:47:02:4c:14:e7:9e:10:9b:15:8a:f3:94:f4:3c:
         bb:8d:7c:c5:f4:a4:aa:99:fa:21:16:b6:8f:f4:09:c1:88:5e:
         23:3e:14:e1:98:d8:e6:00:1e:15:c1:f8:ea:c9:db:2e:bd:1b:
         ea:f6:80:ae:76:87:fe:96:6c:8e:04:1c:48:6d:df:c6:74:f7:
         94:5e:4b:fb:d9:ec:6d:58:44:97:38:b1:5e:99:7c:af:10:f6:
         1d:ec:9d:ba:60:05:3b:60:40:93:a7:e3:fe:a4:d0:b1:15:13:
         e6:26:14:3d:0c:b4:6b:e8:2a:25:ed:62:51:bb:78:4e:2b:41:
         f3:df:2b:31:79:9c:cd:57:47:00:d0:e7:dd:bd:63:05:b5:6d:
         27:c8:f4:d9:c1:36:7e:e1:77:55:c1:d0:28:60:14:3f:d1:8e:
         e1:33:e6:7e:a9:95:bc:80:e3:95:c0:a1:3f:13:76:54:84:cd:
         7a:63:35:46:a4:ae:35:88:98:5c:d2:3f:19:66:e9:61:35:01:
         e6:7e:9b:ae:11:e2:c0:8d:24:6d:df:14:26:6e:3e:85:13:dd:
         aa:57:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:26:55 2026 by rpki-client