Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
File:                     800F1868BEB311EAAFE28B42C4F9AE02.roa (raw, json)
Hash identifier:          nVlM8+uOljV/QDZ3lwkLpa0hZxnkvwmjDj6PgDNVAlw=
Subject key identifier:   E3:42:FD:30:47:72:18:75:F6:82:13:C2:EC:19:BA:BA:86:EC:98:37
Certificate issuer:       /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial:       0AE5
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 20:38:44 +0000
ROA not before:           Fri 02 Oct 2026 20:38:44 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     140583
IP address blocks:        103.152.0.0/24 maxlen: 24
                          103.157.17.0/24 maxlen: 24
                          2001:df3:7880::/48 maxlen: 48
                          2407:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
                          rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
        Validity
            Not Before: Oct  2 20:38:44 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac01654-4955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:66:35:db:4f:de:65:39:d0:fb:9d:e3:0d:
                    96:88:12:d5:b4:0f:02:5b:99:f2:d7:fd:93:d3:a0:
                    69:b5:d3:45:e9:2d:4b:8a:a0:3d:09:c1:9f:a7:14:
                    d2:96:e8:40:e1:1a:a4:f5:50:cf:ca:29:5b:39:88:
                    1c:88:26:cb:0f:34:5f:1c:f7:d1:30:27:e1:d9:30:
                    b5:ce:2d:b8:27:ad:1f:93:cb:93:c7:91:89:0e:34:
                    85:5a:ba:53:fb:44:07:d2:af:ad:3d:4b:59:29:a0:
                    a8:4f:43:c0:1d:36:4f:92:7c:21:a8:1a:8f:11:e8:
                    57:89:57:47:2e:c6:6a:50:3a:42:cd:3b:0c:11:23:
                    b9:a7:d0:ea:73:fa:06:17:28:34:d9:4b:0a:d7:9d:
                    27:d8:e8:93:a4:38:3a:47:3a:2e:f7:94:a2:d3:95:
                    d5:56:2d:5f:6a:8b:a9:42:9c:ae:42:ee:b6:a2:21:
                    d4:36:5b:e1:93:c1:dc:e1:4e:d5:5f:04:f7:fd:72:
                    c4:6c:51:a4:33:a7:8d:34:2b:d5:c0:5d:8a:99:32:
                    5b:86:f2:11:0b:f3:1c:9f:51:cd:eb:93:2b:a2:18:
                    96:e2:0e:fc:0c:06:e6:7d:62:9a:53:76:b3:11:b3:
                    87:16:c3:ab:10:5c:4e:a4:ab:82:2c:ca:00:1b:0a:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:FD:30:47:72:18:75:F6:82:13:C2:EC:19:BA:BA:86:EC:98:37
            X509v3 Authority Key Identifier:
                keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.0.0/24
                  103.157.17.0/24
                IPv6:
                  2001:df3:7880::/48
                  2407:3dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:03:60:df:a3:b3:bf:9f:9c:dd:8a:1c:43:1b:65:04:8a:2e:
         6d:c1:01:ac:b4:af:26:68:55:b2:61:0a:3e:60:74:42:74:c5:
         cb:5b:8c:2a:d6:ec:d3:b9:18:c5:54:b8:42:17:0b:62:f4:8f:
         ee:21:28:cf:4b:0f:d3:3c:60:35:fd:bd:b5:b8:24:78:f2:1d:
         98:26:8c:36:a3:e1:30:3c:1e:fc:42:74:c1:cc:c2:a9:7b:b0:
         46:49:f3:f1:04:02:70:35:b6:9c:64:36:4d:7e:9e:0a:bd:5a:
         67:47:dc:7f:d2:34:db:32:39:47:21:2c:c1:f0:5d:19:e7:8e:
         4d:d0:65:b8:2c:01:ca:f9:7c:11:17:5c:b3:05:5b:20:11:b2:
         73:b9:98:8b:d0:ff:d8:04:39:64:15:75:55:c7:3d:86:02:ed:
         cf:65:6c:c9:61:1e:2c:4c:1e:fb:d8:cb:a9:c6:dc:7e:46:a0:
         8d:d0:95:79:e4:94:a8:ed:db:90:28:c0:ef:f9:de:f6:ca:02:
         25:44:19:3b:d9:5c:34:50:92:0b:ee:48:01:73:f2:38:5e:a1:
         01:db:2b:f3:27:7e:97:5e:b5:ab:57:e5:83:2e:0c:10:bc:ff:
         84:72:b6:94:19:5c:b6:e5:cd:78:47:73:5e:c8:c5:cf:58:ab:
         99:36:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:57:53 2026 by rpki-client