Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/88FCD2C62DBA11ED94AFED62C4F9AE02.roa
File:                     88FCD2C62DBA11ED94AFED62C4F9AE02.roa (raw, json)
Hash identifier:          /6WdSynf7V0vN/nZ8NChu2HHIyeykBoMxKn2RuUgb30=
Subject key identifier:   16:96:32:D7:43:35:5F:AE:F7:AE:A8:91:3D:A9:65:19:3D:30:CA:BB
Certificate issuer:       /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Certificate serial:       0317
Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/88FCD2C62DBA11ED94AFED62C4F9AE02.roa
Signing time:             Wed 19 Aug 2026 01:50:01 +0000
ROA not before:           Wed 19 Aug 2026 01:50:01 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150303
IP address blocks:        103.215.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 01:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
        Validity
            Not Before: Aug 19 01:50:01 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6a850bc9-6c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:a8:e9:dc:19:ed:8f:9c:a5:c7:a5:10:40:
                    ce:63:5d:96:45:38:65:75:3c:b7:78:13:62:25:3a:
                    23:72:be:73:c1:f3:a9:0e:81:37:7e:70:e0:86:88:
                    dd:5f:e2:06:50:42:44:b2:65:3e:f5:0b:58:ec:5c:
                    1c:66:fb:a0:4e:2f:88:93:2a:80:c4:4b:82:c6:a3:
                    ce:47:ef:0d:10:2c:3c:22:19:09:4d:66:f8:23:cd:
                    b4:29:0e:28:3a:61:38:b4:fd:f4:82:71:eb:f3:2c:
                    92:78:86:3a:58:c3:65:14:31:40:a2:c1:e5:b8:cb:
                    90:b7:53:f5:5e:73:96:27:c2:95:f1:04:0d:52:08:
                    7b:05:85:a8:94:d5:89:75:cf:d6:30:77:64:4b:69:
                    d0:2b:04:05:12:a7:ad:ba:bb:8e:c9:5f:29:2f:f4:
                    a1:cd:85:01:9e:3d:71:73:8a:44:13:72:82:3a:47:
                    4a:d4:92:61:bc:62:56:bf:02:65:bd:a1:a9:a9:0c:
                    06:12:7b:1e:ea:6d:e2:0b:f5:57:96:e9:cd:1a:5a:
                    91:66:7e:71:f2:dd:f1:c1:28:a0:4e:9c:b7:db:1a:
                    f4:ab:05:4c:32:46:e9:8c:00:47:be:6b:a6:83:78:
                    3b:09:75:52:78:83:b6:32:99:75:1c:61:9f:bf:f3:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:32:D7:43:35:5F:AE:F7:AE:A8:91:3D:A9:65:19:3D:30:CA:BB
            X509v3 Authority Key Identifier:
                keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/88FCD2C62DBA11ED94AFED62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:84:ee:37:62:7f:5a:8c:9f:4c:93:05:11:61:fd:6c:49:1c:
         b0:34:ca:a8:7d:33:e1:59:93:0d:ea:08:86:74:9f:09:27:85:
         5e:8d:b0:aa:e9:ad:e3:9a:a7:19:d6:a5:a5:23:55:b7:2e:c8:
         ac:ef:f4:54:37:da:1e:4b:63:7e:33:90:ac:a1:6d:39:75:cc:
         f1:21:52:d8:07:d8:fa:5b:93:ff:b9:50:97:9d:c4:45:f8:61:
         eb:a0:43:94:61:53:04:d0:19:b5:1d:e6:42:6a:b2:77:ff:18:
         12:24:93:31:a1:3e:1a:68:7b:d3:f0:5b:4d:00:db:3c:62:45:
         ba:9c:5b:3d:06:b3:75:fd:11:23:00:b7:04:31:75:93:58:40:
         41:eb:68:99:cb:15:0c:26:48:5c:21:8b:d9:83:65:e9:3f:a5:
         37:dd:e5:61:b8:8d:0b:15:bf:78:b3:8e:73:7b:79:07:df:10:
         24:7c:60:cf:b5:be:b8:05:e7:f5:00:8f:07:89:dc:76:10:a8:
         c1:bf:ec:9a:3d:2b:67:c3:8f:61:af:5e:79:42:ed:b9:d3:1f:
         0c:d1:78:2c:61:d3:d7:dc:e7:8b:28:eb:3c:43:e2:61:3f:b1:
         f5:16:3e:9d:3c:b9:56:41:43:f9:c6:f9:52:6f:34:87:62:4a:
         81:5e:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:48:52 2026 by rpki-client