Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
File:                     0361CF86560211EB97A98D46C4F9AE02.roa (raw, json)
Hash identifier:          GMJZeEpsDtNeV9crV1/EbJHhDeurBSSuwnnelfqM6TA=
Subject key identifier:   88:48:FF:9A:D3:E7:57:4D:C6:7A:8B:5E:89:4D:5C:75:B0:E5:48:AD
Certificate issuer:       /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial:       07BA
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 22:42:22 +0000
ROA not before:           Sun 02 Aug 2026 22:42:22 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     131230
IP address blocks:        103.68.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
        Validity
            Not Before: Aug  2 22:42:22 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6fc7ce-7c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:4c:d6:f7:30:1d:5d:ff:88:c3:f7:f9:d3:
                    c8:5e:48:99:25:62:74:3e:80:8c:f6:e1:af:be:5f:
                    26:12:14:14:6a:08:e4:b9:e2:51:3f:38:61:97:2d:
                    cc:14:1a:37:10:9b:d7:ed:51:55:f4:1c:b1:27:09:
                    b4:a6:1b:d6:fd:58:5d:e2:fa:be:5a:84:48:a8:20:
                    73:02:3c:c0:bb:17:a4:c5:a5:f5:83:0d:74:65:8b:
                    3a:cc:9b:82:1c:e7:18:05:05:2c:a5:66:7d:52:f6:
                    f5:ff:92:bf:26:6b:34:40:f6:41:f8:07:8f:bf:f3:
                    31:ea:eb:be:24:71:38:76:fe:5c:68:54:ae:06:4d:
                    ae:31:fe:72:c0:a7:c6:0f:1b:1b:10:b5:ca:46:93:
                    82:67:05:bb:4d:cc:43:e5:f9:ed:fb:19:4b:5e:0d:
                    c7:51:1d:08:bb:39:54:5f:bb:84:98:e3:c1:64:78:
                    ff:63:a6:ef:80:d1:9c:1a:2f:59:04:79:31:1c:0a:
                    05:e6:97:34:96:67:c1:14:4c:a5:3b:cf:68:42:84:
                    84:9a:52:34:91:f5:06:f0:1a:75:f1:c7:af:c4:ce:
                    f0:5c:10:8f:50:23:ed:36:3d:eb:3c:94:18:96:fd:
                    8a:a1:f1:76:ad:2d:aa:f5:84:43:43:32:ac:d7:5e:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:48:FF:9A:D3:E7:57:4D:C6:7A:8B:5E:89:4D:5C:75:B0:E5:48:AD
            X509v3 Authority Key Identifier:
                keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:73:b1:bb:c8:1c:05:8b:82:03:e3:2f:9b:f7:35:6d:87:
         88:21:ac:ae:a4:0d:b7:26:78:23:5b:2f:32:47:2b:64:be:31:
         17:63:77:d3:ca:f9:2a:2f:19:a9:42:91:bf:77:ab:13:94:19:
         0c:aa:e3:8b:5a:f2:7b:a2:61:5c:e4:30:ee:b8:d1:bf:cf:dc:
         8f:1b:7c:a1:f4:71:b8:81:fe:93:c4:4f:e0:05:c3:64:fb:4d:
         ab:0c:6e:53:46:e7:29:8a:4f:6c:9d:2f:75:e0:a4:f1:d8:6d:
         af:03:a0:11:b6:3d:c8:2b:51:44:ba:4a:2e:b1:59:98:e4:3a:
         fb:8c:d6:09:78:ee:d9:d6:76:7d:a6:d0:5b:60:c8:23:f6:1c:
         70:93:2d:49:f6:fa:bd:cf:77:2f:49:b9:2e:6e:06:77:05:5b:
         93:11:02:f1:eb:cc:73:29:cc:f2:46:6b:bb:3f:e2:89:8e:1b:
         48:8c:47:83:7e:d4:b9:31:39:0f:0d:33:84:07:33:00:75:ab:
         41:90:4f:37:63:ce:db:cb:90:72:d5:84:6a:dd:d7:3b:19:e1:
         3f:a4:ba:65:b9:be:44:a9:0c:ba:d4:cb:8e:35:6c:0c:c1:55:
         f8:3f:ed:c1:db:f4:61:60:24:3a:fb:77:7b:e8:c5:d1:50:d7:
         39:d6:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:50 2026 by rpki-client