Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/ADF88998959511F1912ACC523811F970.roa
File:                     ADF88998959511F1912ACC523811F970.roa (raw, json)
Hash identifier:          VyeCNfAQ1Lewv80rlO9efnG9LzPbSGz956xqK+orj+Q=
Subject key identifier:   2B:E4:2A:E8:3E:54:3D:73:C4:2C:55:41:32:85:E0:4D:25:62:D0:1C
Certificate issuer:       /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Certificate serial:       0B3B
Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/ADF88998959511F1912ACC523811F970.roa
Signing time:             Tue 11 Aug 2026 15:02:33 +0000
ROA not before:           Tue 11 Aug 2026 15:02:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141778
IP address blocks:        103.87.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
                          rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142661, serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
        Validity
            Not Before: Aug 11 15:02:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7b3989-9cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:fb:c1:be:a4:54:6a:d7:98:f1:ee:07:ac:
                    91:8b:46:ca:48:b3:5c:25:2e:9e:76:87:fc:0a:1c:
                    49:e9:ce:49:41:4c:31:a3:9d:b6:98:07:a7:89:3a:
                    0c:23:db:8c:ad:c2:93:2f:3a:76:39:df:0f:27:59:
                    af:c7:d8:a6:50:68:4e:5b:36:35:72:d6:e9:4a:3d:
                    84:3d:ac:f3:bd:1d:19:09:ba:ed:68:b1:b9:85:ad:
                    22:bd:1e:d0:52:44:d2:48:4c:e6:2b:0a:3e:c3:f4:
                    d7:7d:26:b0:e4:03:e5:18:0f:29:2a:a5:9a:f9:72:
                    27:a6:ca:4e:1a:c5:1e:f3:83:46:6d:45:02:9e:e4:
                    c4:83:08:8e:87:f4:6a:0b:b7:96:07:47:f2:84:68:
                    99:7f:90:1b:19:16:da:6e:93:a0:45:4b:71:05:3d:
                    ed:24:79:c5:84:7f:25:08:14:1a:d2:9c:73:88:41:
                    fb:f9:2c:b3:af:48:2b:af:c4:a2:aa:ac:65:1c:7a:
                    fa:35:63:99:e8:20:8b:94:c3:e3:fa:ef:96:f7:9d:
                    01:3f:3d:ba:01:ee:fe:c1:cd:06:1e:88:7e:55:5d:
                    7a:1e:b5:3e:f9:f0:e7:5f:5d:eb:db:ef:ba:4d:27:
                    6b:3c:cd:a8:5f:62:36:c2:cd:82:0e:3e:1f:1f:8a:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:2A:E8:3E:54:3D:73:C4:2C:55:41:32:85:E0:4D:25:62:D0:1C
            X509v3 Authority Key Identifier:
                keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/ADF88998959511F1912ACC523811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:29:45:d7:12:05:23:e4:18:f2:f0:78:5b:b3:83:c9:40:
         3c:99:61:97:61:a1:3a:8c:d5:0d:c1:0a:92:03:59:6e:e7:50:
         99:6e:98:9c:9d:f0:9d:70:f8:d5:54:72:86:3d:f8:10:0f:f1:
         cc:96:c1:7d:96:36:83:33:1c:c3:42:e5:5f:b8:ac:9d:fa:fc:
         bb:f4:8a:69:e0:44:f1:f1:56:5b:82:c1:1b:61:bc:cf:16:d6:
         f2:0e:94:e3:5d:2d:b6:73:d5:ae:ab:3b:28:af:82:ff:55:45:
         86:cb:55:d2:e0:2b:29:90:e9:0b:bd:81:8b:34:5a:b7:0f:53:
         eb:15:b8:dd:b5:c5:03:12:60:ff:7d:2e:bd:b8:f5:87:6e:4c:
         ae:e9:3a:15:20:24:09:75:f0:b4:54:24:8c:8c:eb:36:16:89:
         9d:c6:ae:db:1a:48:a6:56:42:90:3c:7d:8d:ca:40:19:c7:a6:
         3d:f6:ae:27:05:97:e8:b8:9c:e6:3d:68:31:7f:27:68:3e:c3:
         35:53:9b:32:cb:61:4f:96:4c:e3:c5:30:02:b9:47:90:3c:64:
         3c:00:b5:0f:bf:b2:b9:53:4c:9c:fe:9d:41:86:ce:12:a5:bd:
         d7:5b:c8:2c:cb:1e:2c:3c:99:9a:1b:3c:62:67:c1:7b:77:95:
         fc:cf:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:00 2026 by rpki-client